last executing test programs:

9.496435839s ago: executing program 2 (id=717):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00')
pipe2$9p(0x0, 0x10000)
pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4)

8.105516295s ago: executing program 2 (id=719):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
dup3(r3, r2, 0x80000)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0x0, r5)
keyctl$get_persistent(0x16, 0x0, r5)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000000)=0xd)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

7.971031199s ago: executing program 4 (id=722):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x2000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x0, 0x2, 0xf, 0x2, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x6002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x4d, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x8080)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)

7.093867488s ago: executing program 2 (id=724):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x559c, &(0x7f0000005e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW")
creat(0x0, 0x0)
creat(0x0, 0x0)
mknod$loop(0x0, 0x1, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2)

6.808619477s ago: executing program 4 (id=729):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

5.679174244s ago: executing program 3 (id=732):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x80001}, 0x1c)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x8, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x40000000000, 0x7, 0x8000000000000000, 0xc4, 0x8, 0xfffffffffffffffe, 0xfdffffffffffffff], 0x1, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.162976902s ago: executing program 4 (id=734):
creat(&(0x7f0000000080)='./file0\x00', 0x6a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)

5.027287236s ago: executing program 3 (id=735):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

4.818614283s ago: executing program 4 (id=737):
io_setup(0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x124f400, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20)

4.29881685s ago: executing program 1 (id=738):
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r1, 0x0, 0x0)

4.29813807s ago: executing program 4 (id=739):
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

4.059602418s ago: executing program 1 (id=740):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x0, 0x34}, 0x28)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.922241072s ago: executing program 3 (id=742):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0)
gettid()
timer_create(0x1, 0x0, &(0x7f0000000080))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)

3.837055355s ago: executing program 1 (id=743):
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

3.67137646s ago: executing program 1 (id=745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000)

3.631807321s ago: executing program 3 (id=746):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000740)={[{@resuid}, {@errors_remount}, {@nombcache}, {@test_dummy_encryption}, {@bsdgroups}, {@bh}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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")
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file1\x00', 0x4)
io_setup(0x40, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x2000}])

3.303467972s ago: executing program 2 (id=748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x8, 0xb}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000840)="6558fc70760d1916384e297e571f", 0xe}], 0x1}, 0x4008840)

3.143497448s ago: executing program 1 (id=749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(r1, 0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d2000000000f0ff00070000", @ANYRES32], 0x58}}, 0x0)

1.814138261s ago: executing program 1 (id=752):
syz_open_procfs(0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x80003, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
readv(r1, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0xf4, 0x5, &(0x7f00000000c0)={0x14, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}})

1.709216275s ago: executing program 0 (id=754):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r4=>0xffffffffffffffff, 0x0, 0x0, 0xcd})
close_range(r4, 0xffffffffffffffff, 0x0)

1.595923879s ago: executing program 2 (id=755):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2b}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r6 = accept4(r1, 0x0, 0x0, 0x800)
sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d2000000000f0ff00070000", @ANYRES32], 0x58}}, 0x0)

1.523416351s ago: executing program 0 (id=756):
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r0, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
stat(&(0x7f0000000140)='./file0/file0\x00', 0x0)
close(0x3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fsync(0xffffffffffffffff)

1.521980371s ago: executing program 0 (id=757):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x4098, &(0x7f0000000100)={[{@nogrpid}, {@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@nodiscard}, {@noquota}]}, 0x3, 0x438, &(0x7f0000000d80)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

1.113845384s ago: executing program 4 (id=758):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x7fffffffffffffff, 0x58f24868, 0x3, 0x7f, 0x80000001, 0x1, 0x0, 0x4, 0x1000, 0x3ff, 0x8, 0x7, 0x8001], 0x54000, 0x100204})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge0\x00'})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

651.742589ms ago: executing program 3 (id=759):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RREAD(r2, &(0x7f00000002c0)={0xb, 0x75, 0x2}, 0xb)
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

354.669449ms ago: executing program 0 (id=760):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000580)="b318"})

354.028779ms ago: executing program 2 (id=761):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff)
r1 = inotify_init()
inotify_add_watch(r1, 0x0, 0x42000040)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000})

255.512432ms ago: executing program 3 (id=762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0xa, 0x801, 0x84)
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(r1, 0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="090d2000000000f0ff00070000", @ANYRES32], 0x58}}, 0x0)

215.434844ms ago: executing program 0 (id=763):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x3948, 0x6, 0x8, 0x8, 0x8, 0x1})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x48000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000480)={{0x1, 0x2, 0x0, 0x8, 0x0, 0x10001}, 0x311, [0x3, 0x8, 0x1, 0x1000, 0x9, 0xffffffff, 0x1, 0x44000000, 0x5, 0x7, 0x400, 0x5, 0x80000000, 0xc, 0x8, 0x6, 0xff, 0x400, 0x7ff, 0x3, 0x1, 0x7fffffff, 0x9, 0x7, 0x8001, 0x7, 0x7f21fe40, 0xfe, 0x8000, 0x8, 0x9, 0x61f, 0x9, 0x7, 0x65e4, 0x3, 0xffffffff, 0x0, 0x4, 0x40, 0xff, 0x4, 0x8000, 0x9, 0xfffff1a7, 0x80000001, 0x0, 0x4, 0x4, 0xd5, 0x2, 0x4, 0x9d35, 0x7f550721, 0x4, 0x81, 0xfffffffe, 0x2, 0x8, 0xfffffffa, 0x1, 0x0, 0x7ff, 0x7ff, 0x6, 0x1, 0x2, 0x10, 0x200, 0x9, 0xfffffdfa, 0x6, 0x3, 0x6, 0x4, 0x80000000, 0x7, 0x7fff, 0x7ff, 0x3, 0x5, 0x800, 0xf6, 0x7, 0x1, 0x3, 0x64, 0x4, 0x1, 0x6, 0x5, 0xff, 0x100, 0x7f, 0x8, 0x0, 0xcc, 0x8000, 0x9, 0xffffffff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x39d5, 0x7fff, 0x20000000, 0x81, 0x3, 0x5, 0x9, 0x7, 0x8001, 0x6f, 0x4, 0x800, 0x401, 0x0, 0x6, 0xd, 0x3, 0x1, 0x4, 0xfffffff9, 0x1, 0x6, 0x4, 0x5, 0x0, 0x9, 0x7, 0x7, 0x9, 0x4, 0x4, 0xfb5, 0x0, 0xffffffff, 0xfffffffc, 0x9, 0x4, 0x3, 0x4db, 0x2, 0x200, 0x0, 0x8, 0x4, 0x6, 0x1a6, 0xbd, 0x9, 0x10, 0x7fffffff, 0x6, 0x9a, 0x6a9d, 0xfffffffd, 0x8, 0x2, 0xffff, 0x9, 0x7, 0x6, 0xfffffff9, 0xb, 0x543367e9, 0xfffffff8, 0x200, 0xcee7, 0x3ff, 0x7, 0x0, 0x8, 0x156, 0xffffff80, 0x80000000, 0x4, 0x174, 0x4, 0x8, 0xd34, 0xffffff80, 0xfff, 0x53, 0xa6, 0x3, 0x80000001, 0x6, 0x0, 0x400, 0xfffffffe, 0x10001, 0x2d, 0x5, 0xffff, 0x3ff, 0x5, 0x2, 0xffff8001, 0x4, 0x99, 0x5, 0x2, 0xc, 0x80, 0x7ff, 0x7, 0x1, 0xfffffffc, 0x3, 0x3, 0x2, 0x7, 0x9, 0x4, 0x7, 0x10, 0xb87e, 0x2, 0x1, 0x9, 0x995, 0x6, 0x6, 0x1ff, 0x5, 0xfc3d, 0xfffffff9, 0x5, 0x4, 0x4, 0xd00, 0x800, 0x8, 0x4, 0x9, 0x6, 0x3, 0xf8f, 0x4, 0x6, 0x4, 0x4, 0x4, 0x81, 0x9abb, 0x2, 0x1ff, 0xd01, 0x7, 0xffffffff, 0x7, 0x1, 0x7, 0x8, 0x1b591f9c, 0xff, 0x6ce16fcb, 0x0, 0x7, 0x5, 0x5, 0x7, 0xb, 0x7fff, 0x8, 0xf, 0x4, 0x6, 0x5, 0xfffffffd, 0x5, 0xfff, 0x6, 0x4, 0x8, 0xf, 0x7, 0x8, 0x34f7b024, 0xfffffffa, 0x3, 0xfffffffc, 0x7, 0x6, 0x1, 0x5, 0x27c3, 0x7, 0x7fffffff, 0x3, 0x6, 0xfffffff8, 0x4, 0x3, 0x1, 0x8, 0x4, 0x9, 0x2, 0x9, 0x5, 0x1, 0x3, 0x0, 0x7fffffff, 0x5, 0x2, 0x401, 0x10000, 0x2, 0x40, 0xa2e3, 0xee3, 0x7, 0x2, 0x800, 0x58, 0x8, 0x4, 0x101, 0x2, 0x40, 0x80, 0x4, 0x9, 0x356d, 0xf4, 0x40, 0x39d, 0x10, 0x2, 0xaa, 0x5, 0x7, 0x5, 0x5, 0x7, 0x7fffffff, 0x9, 0x1, 0x6, 0x4, 0x8, 0x3, 0x2, 0x5507b1d9, 0x1, 0x7, 0xccf, 0x0, 0x9, 0xb6, 0xff, 0x5, 0xd9, 0x6b57, 0x2, 0x691, 0x8b91, 0x7, 0x36, 0x1, 0x0, 0x723, 0x4, 0x8, 0x38a00, 0x8, 0x7, 0x8, 0x2, 0x3ff, 0xff, 0x9, 0x7, 0x13cffa0e, 0x1, 0x0, 0x9, 0x8, 0xcbb9, 0x9, 0x2, 0x1, 0x2, 0x5e, 0x3, 0xad, 0xfffffffc, 0x1, 0x1, 0x10, 0xffff, 0x8, 0x4, 0x9, 0x5, 0xffffffff, 0x101, 0x9, 0x0, 0xe9e, 0x40, 0x3, 0x8, 0xfffff3ca, 0x918, 0x3f16ac1f, 0xfff, 0x5, 0xe74, 0x7, 0x0, 0xe, 0xb, 0x2, 0x0, 0x8, 0x9d30, 0x7, 0x7fff, 0x6, 0x1, 0x1, 0x3, 0x2, 0x8, 0x2, 0x7, 0x4, 0xffffffff, 0x5, 0x100000, 0x2, 0x6, 0x11, 0x6, 0x5, 0x8, 0x7, 0x8001, 0xfff, 0x7f, 0x0, 0x2, 0x9, 0x7, 0xd05c, 0x0, 0x9, 0x4, 0x7, 0x80000001, 0xa, 0x4, 0x5, 0xe78, 0x3, 0x1, 0x51, 0x7, 0x7ff, 0x7fff, 0x4, 0x4, 0x80, 0xe6d8, 0xa4, 0x2ee, 0xa, 0x0, 0x7, 0x1e4, 0x2, 0x2, 0x8, 0x98b, 0x10001, 0x3, 0x1, 0x8000, 0x7, 0x2, 0x5e, 0x5536, 0xe, 0x37, 0x1, 0xfffffff7, 0xad8, 0x2, 0x9, 0x1, 0x200, 0x1, 0x7, 0x10001, 0xffffff2c, 0xcf9, 0x6, 0x3, 0x2094, 0x10001, 0x4, 0x800, 0x4, 0x6, 0xfffffffb, 0x0, 0xfff, 0xd, 0x7, 0x400, 0x80000000, 0x2, 0x7, 0x0, 0x80000000, 0x20000000, 0x4, 0xfffffffc, 0x4904, 0x1b, 0xc7, 0xe, 0x800, 0x5, 0x8, 0x2, 0x2, 0x4d, 0x5, 0x3, 0x2, 0x3, 0x1, 0x3, 0x7fffffff, 0x8, 0x2, 0x1, 0x2, 0x8001, 0xffff, 0x1d, 0xc, 0x22d4, 0xfffffffd, 0x8, 0x3d, 0xf7, 0x1, 0x8, 0x4, 0x6, 0x6, 0x412, 0x1, 0x5, 0xfffffff9, 0x81, 0x10001, 0x4, 0x5, 0x7, 0x9, 0x2, 0xf515, 0x2, 0x363b5aae, 0x6f, 0x6, 0x0, 0x8, 0x800, 0xffe, 0x1, 0x2, 0x2, 0x5, 0x9, 0x10d, 0x0, 0x5, 0x4, 0x5, 0x1, 0x0, 0x7, 0x3ff, 0x10, 0xa, 0x5, 0x4, 0x7, 0x6, 0x8, 0xf, 0x2, 0x4, 0x2, 0x9, 0xbf1, 0x5, 0x8, 0xe, 0x81, 0x2, 0x0, 0x3, 0x9, 0x1ff, 0x3, 0x864, 0x4, 0x7f, 0x561f, 0xe, 0x2, 0xffffffa8, 0xfffffff8, 0x7, 0x1000, 0xc01c, 0x3, 0xb0000000, 0x6, 0x7, 0x5, 0x20000, 0x81, 0x2, 0x2, 0x6, 0x200, 0x2, 0xb, 0x0, 0x8, 0x8, 0x2, 0x2, 0xfffff2ff, 0x8, 0x33a6, 0x4, 0xfffffffc, 0x7, 0x7, 0x9, 0x800, 0x200, 0x7, 0x2, 0xff, 0x6, 0x1, 0x9, 0xa, 0x4, 0x3, 0x6, 0x9, 0x81, 0x8001, 0x4, 0x8000, 0x8, 0x7, 0x0, 0x7, 0xfffff594, 0x8, 0xb54, 0x9, 0x4, 0xffff, 0x7, 0x2, 0x9, 0x5, 0x4, 0x6, 0x8, 0x0, 0x5, 0x8, 0x8, 0x4, 0x9, 0x9, 0x2, 0x10, 0x7, 0x2118, 0x1, 0x7ff, 0x100, 0x100, 0x400, 0x3, 0x2, 0x7, 0x9, 0x96ea, 0x3, 0xa7, 0xffff8001, 0x8, 0x4, 0x9, 0xfffffffd, 0x2, 0x9, 0x9, 0x10, 0x9, 0x6, 0x0, 0x2, 0x0, 0xb, 0x3, 0x6, 0xd4c9, 0x8000, 0x6ad6, 0x7, 0x8bf, 0x6, 0xfff, 0x3, 0x5, 0x6, 0xc, 0xf4ea, 0x4bb5930c, 0x5, 0x24b, 0x3, 0x81, 0x0, 0x9, 0x2, 0x7, 0x401, 0x95, 0x8, 0x7, 0x1, 0xa, 0xb, 0xc000, 0x9, 0x5c4, 0x0, 0x8, 0xfffffff9, 0x14a0, 0x9, 0x4, 0xcb5, 0x3, 0x7, 0x6, 0x7, 0x1ff, 0x9, 0x1, 0x40, 0x53, 0x8001, 0x9, 0x7, 0x2, 0xffff, 0x0, 0x9, 0x180000, 0x2, 0x5, 0x0, 0x58, 0x8, 0x7, 0x1, 0x1, 0x3, 0x775, 0x4, 0x8, 0xfff, 0x6, 0x1, 0x9, 0x82, 0x1, 0xfff, 0x9, 0x3, 0x792e, 0x2, 0x9, 0x9, 0x7, 0xe, 0x8, 0xe69, 0x7fff, 0x8, 0x115, 0xfffffffd, 0x3, 0x101, 0xffffff94, 0x4, 0x8000, 0x8000, 0x7fffffff, 0x10, 0xe, 0x5a3, 0x7, 0x100, 0x2, 0x1, 0x2, 0x398, 0x8000, 0x89, 0x7, 0x1, 0x5, 0x6, 0x7f, 0x37, 0x6, 0x10001, 0x7, 0x2, 0x2, 0x7ff, 0x10001, 0x9, 0xfffffffb, 0x7ae2, 0xfffffffe, 0x800, 0x3bf, 0xffff4e1c, 0x800, 0x4, 0x7, 0x8, 0x0, 0xffffffff, 0x5, 0x9, 0x800, 0x6, 0x3f, 0x3, 0x16e, 0x9, 0x0, 0x9, 0x5, 0x7, 0x8, 0x3, 0xac1a, 0x3, 0xfffffff9, 0x6, 0x9, 0xa, 0x7f, 0x4, 0x2, 0x0, 0x9, 0x3, 0x2d2d2c77, 0x5, 0x8, 0x8, 0x4, 0x200, 0x2, 0x7, 0x7fff, 0x4, 0x1, 0x0, 0x80000000, 0x7ff, 0xe2e, 0xc, 0x1, 0x9, 0x3, 0x2, 0x6, 0xb4, 0x1, 0x6, 0x4, 0x80, 0x4, 0x7, 0x80, 0x1, 0x5, 0x246, 0x1fffe0, 0x9, 0x876, 0x7f5bc838, 0x183c099c, 0x3cd, 0x7ff, 0x6, 0x4, 0x0, 0x0, 0x4, 0x85d, 0x3, 0x5c, 0x9, 0x10001, 0x4, 0x7f, 0x6, 0x8, 0x81, 0x8, 0xd, 0x6e1c, 0x0, 0xfffffffe, 0xfffff5bd, 0x6, 0x6, 0x6, 0xb, 0x1, 0xfffffffe, 0x9, 0xffffffff, 0x2, 0x7, 0x3, 0x0, 0x40, 0x6, 0x6, 0x5, 0x1, 0xa, 0x8, 0x7, 0x6, 0x6, 0xd, 0x6e, 0x6, 0x9, 0x6, 0x2, 0xc033, 0xffffffff, 0x9, 0x5e, 0x5, 0x3, 0x8, 0xeced, 0x7, 0x0, 0x5, 0x7, 0x883, 0x8001, 0x5, 0x8001, 0x100, 0x4, 0x5, 0xf81, 0x0, 0x3ff, 0x1, 0x8000, 0x6, 0xff, 0x86e, 0x3, 0x5, 0x200, 0x1, 0x3, 0x9, 0x8, 0x10, 0x7, 0xffffffff, 0x6, 0x9, 0x4, 0x7fff, 0x0, 0x8001, 0x8, 0xe403, 0x0, 0x7b5, 0x0, 0x1ff, 0x6, 0x24000]})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

0s ago: executing program 0 (id=764):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r4, r0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8)

kernel console output (not intermixed with test programs):

d from eth2
[   63.887385][ T4197] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.956736][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.970991][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.993771][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.009035][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.023299][ T4198] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.035701][ T4198] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.050755][ T4198] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.061238][ T4198] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.121372][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.137352][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.156221][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.167437][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.179246][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.219358][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.233353][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.243451][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.261957][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   64.281528][ T4197] 8021q: adding VLAN 0 to HW filter on device team0
[   64.291533][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.300631][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.326804][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.336544][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.347135][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.354505][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.394182][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.402237][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.412952][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.422264][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.429473][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.438205][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.447204][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.457960][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.465303][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.472991][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.481854][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.491066][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.500047][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.507199][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.517000][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.525800][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.539871][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.559494][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.570195][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.584873][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.599555][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.621657][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.633732][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   64.643808][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.652778][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.662439][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.671102][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.697445][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   64.707305][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   64.716256][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.726778][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.735492][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.743665][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.752204][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   64.760997][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   64.770028][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.777964][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.786247][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.802552][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.820633][ T4198] 8021q: adding VLAN 0 to HW filter on device team0
[   64.832508][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   64.849070][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   64.858583][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.867461][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.877204][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.885875][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.893476][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.901322][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.910760][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.919409][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.926504][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.935314][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.947231][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   64.957444][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.974960][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.989038][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.018860][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.031005][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   65.040598][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.050567][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.062270][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.071282][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.078415][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.087907][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.096573][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.105780][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.114881][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.121997][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.130830][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.142398][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.151065][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.159783][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.168723][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.184982][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.193074][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.203708][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.212351][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.220860][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.229798][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.239028][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.252054][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.267523][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.280037][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.287200][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.302829][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.313193][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.361887][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.370785][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.395042][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.402160][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.422338][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.432559][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.442538][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.452402][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.461940][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.472075][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.481388][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.490659][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.499324][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.507662][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.514365][   T23] Bluetooth: hci0: command 0x041b tx timeout
[   65.521956][   T23] Bluetooth: hci1: command 0x041b tx timeout
[   65.543449][ T4198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.562087][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.586100][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.600745][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.604520][   T21] Bluetooth: hci3: command 0x041b tx timeout
[   65.610767][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.615080][   T21] Bluetooth: hci2: command 0x041b tx timeout
[   65.630207][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.639511][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.648635][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.653114][   T21] Bluetooth: hci4: command 0x041b tx timeout
[   65.658264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.671885][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.681701][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.696190][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.708579][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.731946][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.759400][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.773093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.809681][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.822637][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.862545][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.898317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.908932][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.924630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.932286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.978842][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.008514][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.022749][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.042220][ T4187] device veth0_vlan entered promiscuous mode
[   66.074810][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.083556][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.099212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.109623][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.122351][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.133126][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.154984][ T4187] device veth1_vlan entered promiscuous mode
[   66.173820][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.182448][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.196421][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.225175][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.250670][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.258947][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.267471][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.277624][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.294660][ T4188] device veth0_vlan entered promiscuous mode
[   66.310622][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.321088][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.330436][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.339288][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.367006][ T4188] device veth1_vlan entered promiscuous mode
[   66.380681][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.390751][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.400172][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.442578][ T4187] device veth0_macvtap entered promiscuous mode
[   66.451834][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.461673][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.471110][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.479553][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.488294][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.497719][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.506802][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.516006][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.525442][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.537825][ T4197] device veth0_vlan entered promiscuous mode
[   66.551099][ T4198] device veth0_vlan entered promiscuous mode
[   66.561788][ T4187] device veth1_macvtap entered promiscuous mode
[   66.569716][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.578527][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.588449][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.598919][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.607361][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.616653][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.626465][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.635097][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.647647][ T4197] device veth1_vlan entered promiscuous mode
[   66.660943][ T4198] device veth1_vlan entered promiscuous mode
[   66.687432][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.719481][ T4196] device veth0_vlan entered promiscuous mode
[   66.726706][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.735128][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.743192][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.751542][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.760163][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.768859][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.778138][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.787422][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.797974][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.806178][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.817276][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.826357][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.842450][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.851852][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.870589][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.900220][ T4196] device veth1_vlan entered promiscuous mode
[   66.911062][ T4188] device veth0_macvtap entered promiscuous mode
[   66.920381][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.929041][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.938534][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.949782][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.963017][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.972699][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.982085][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.991242][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.009192][ T4197] device veth0_macvtap entered promiscuous mode
[   67.020978][ T4188] device veth1_macvtap entered promiscuous mode
[   67.035510][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.045029][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.055272][ T4198] device veth0_macvtap entered promiscuous mode
[   67.080277][ T4197] device veth1_macvtap entered promiscuous mode
[   67.107276][ T4198] device veth1_macvtap entered promiscuous mode
[   67.128618][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.140009][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.159410][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.176418][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.190262][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.201681][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.212664][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.225523][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.233183][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.241949][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.250740][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.259804][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.272177][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.281184][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.290525][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.299674][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.312574][ T4196] device veth0_macvtap entered promiscuous mode
[   67.324584][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.335833][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.347692][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.361702][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.372635][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.383634][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.394673][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.406959][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.421519][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.431802][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.440973][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.450568][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.461346][ T4196] device veth1_macvtap entered promiscuous mode
[   67.473700][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.482319][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.490978][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.499824][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.510196][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.520219][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.530992][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.544518][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.553259][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.562177][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.585406][   T21] Bluetooth: hci1: command 0x040f tx timeout
[   67.597778][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.608631][   T21] Bluetooth: hci0: command 0x040f tx timeout
[   67.613669][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.625074][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.635604][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.645493][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.656609][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.668815][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.677554][   T21] Bluetooth: hci4: command 0x040f tx timeout
[   67.702001][   T21] Bluetooth: hci2: command 0x040f tx timeout
[   67.711545][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.722179][   T21] Bluetooth: hci3: command 0x040f tx timeout
[   67.727774][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.742774][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.755343][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.765453][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.777762][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.788051][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.799753][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.811236][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.826482][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.842246][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.852665][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.863396][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.874201][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.884994][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.896318][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.908294][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.920143][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.948690][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.958227][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.967585][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.976480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.989185][ T4198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.002059][ T4198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.011258][ T4198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.020400][ T4198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.034267][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.052956][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.063143][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.081854][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.091883][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.102775][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.113019][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.123786][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.135150][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.147015][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.156445][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.179269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.188104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.197185][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.232422][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.243821][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.254812][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.263528][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.287738][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.296346][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.336376][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.390447][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.404770][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.413063][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.431712][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.445690][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.453802][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.474665][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.484165][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.505983][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.575900][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.576039][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.583759][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.607472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.618026][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.683305][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.722332][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.759562][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.789255][ T4268] loop4: detected capacity change from 0 to 1024
[   68.833903][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   68.853890][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   68.863891][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   68.873890][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   68.883887][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   68.923906][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!!
[   68.985017][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.954580][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   69.964542][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   69.967464][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.970688][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[   69.983908][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!!
[   69.993911][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   70.003892][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   70.013890][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   70.034990][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.132390][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[   70.138961][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[   70.228851][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.239546][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.342581][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.362926][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.674311][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[   73.680913][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[   73.978005][ T4297] loop3: detected capacity change from 0 to 128
[   74.153445][    T9] hfsplus: bad catalog file entry
[   74.185202][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.211411][    T9] hfsplus: b-tree write err: -5, ino 3
[   74.226624][ T4297] =======================================================
[   74.226624][ T4297] WARNING: The mand mount option has been deprecated and
[   74.226624][ T4297]          and is ignored by this kernel. Remove the mand
[   74.226624][ T4297]          option from the mount to silence this warning.
[   74.226624][ T4297] =======================================================
[   76.218821][ T4333] loop3: detected capacity change from 0 to 512
[   76.409559][ T4333] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.648894][ T4340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'.
[   79.551513][ T4344] loop2: detected capacity change from 0 to 64
[   79.751455][ T4333] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3.
[   82.369171][ T4382] loop0: detected capacity change from 0 to 256
[   82.737622][ T4400] loop3: detected capacity change from 0 to 128
[   83.293904][ T4382] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   83.391795][ T4382] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   83.910397][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   84.359925][ T4400] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.424647][ T4382] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   85.586263][ T4430] tipc: Started in network mode
[   85.750961][ T4430] tipc: Node identity 46f54be92487, cluster identity 4711
[   85.787272][ T4430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.218125][ T4437] process 'syz.3.19' launched './file1' with NULL argv: empty string added
[   86.438556][ T4434] device syzkaller0 entered promiscuous mode
[   86.704847][ T4430] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   87.062985][ T1108] cfg80211: failed to load regulatory.db
[   88.936817][ T4430] tipc: Resetting bearer <eth:syzkaller0>
[   89.066333][ T4456] netlink: 'syz.0.28': attribute type 12 has an invalid length.
[   89.131843][ T4456] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   89.831891][ T4229] tipc: Node number set to 1651657705
[   89.885145][ T4444] device syzkaller0 entered promiscuous mode
[   89.904772][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'.
[   89.973315][ T4451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.27'.
[   90.055781][ T4430] tipc: Resetting bearer <eth:syzkaller0>
[   90.146665][ T4430] tipc: Disabling bearer <eth:syzkaller0>
[   92.733920][ T4490] loop3: detected capacity change from 0 to 64
[   92.792517][ T4490] hfs: invalid btree extent records
[   92.798031][ T4490] hfs: unable to open extent tree
[   92.803204][ T4490] hfs: can't find a HFS filesystem on dev loop3
[   94.634603][ T4500] loop0: detected capacity change from 0 to 16
[   95.809906][ T4500] erofs: (device loop0): mounted with root inode @ nid 36.
[   95.825825][ T4500] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[   95.835109][ T4500] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89
[   95.844367][ T4500] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89
[   95.854095][ T4500] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[   95.872504][ T4500] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[   95.881054][ T4500] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[   95.886589][    C1] sched: RT throttling activated
[   95.894420][ T4500] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[   95.902675][ T4500] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[   95.914053][   T26] audit: type=1800 audit(1780460372.279:2): pid=4500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.35" name="file2" dev="loop0" ino=89 res=0 errno=0
[   98.025308][ T4510] device syzkaller0 entered promiscuous mode
[   98.049931][ T4512] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   99.311300][ T4524] loop2: detected capacity change from 0 to 2048
[  101.260873][ T4519] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  102.682875][ T4552] tipc: Started in network mode
[  102.711263][ T4552] tipc: Node identity 363d3f4a349e, cluster identity 4711
[  102.718710][ T4552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.729393][ T4552] device syzkaller0 entered promiscuous mode
[  102.794367][ T4552] tipc: Resetting bearer <eth:syzkaller0>
[  103.826926][ T4550] tipc: Resetting bearer <eth:syzkaller0>
[  103.887057][ T4550] tipc: Disabling bearer <eth:syzkaller0>
[  103.996003][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[  104.015087][ T4575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.53'.
[  104.209779][ T4189] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  105.907438][   T26] audit: type=1326 audit(1780460381.715:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  105.999522][   T26] audit: type=1326 audit(1780460381.725:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  106.032190][   T26] audit: type=1326 audit(1780460381.725:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  106.253452][ T4189] usb 1-1: device not accepting address 2, error -71
[  106.285763][   T26] audit: type=1326 audit(1780460381.725:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  106.335324][   T26] audit: type=1326 audit(1780460381.725:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  107.982391][   T26] audit: type=1326 audit(1780460381.725:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  109.218607][ T4606] loop1: detected capacity change from 0 to 2048
[  109.361360][   T26] audit: type=1326 audit(1780460381.725:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  109.392190][   T26] audit: type=1326 audit(1780460381.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  109.482409][   T26] audit: type=1326 audit(1780460381.736:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  109.520684][   T26] audit: type=1326 audit(1780460381.736:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4590 comm="syz.2.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf3ed1e59 code=0x7ffc0000
[  109.554315][ T4622] loop0: detected capacity change from 0 to 128
[  109.563519][ T4617] device syzkaller0 entered promiscuous mode
[  109.638813][ T4624] netlink: 768 bytes leftover after parsing attributes in process `syz.3.65'.
[  109.911206][ T4606] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.071623][ T4622] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.266063][ T4622] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.815270][ T4677] 9pnet_virtio: no channels available for device 127.0.0.1
[  116.833952][ T4677] loop3: detected capacity change from 0 to 8
[  117.983753][ T4680] loop2: detected capacity change from 0 to 512
[  120.011253][ T4678] syz.0.75 (4678): drop_caches: 2
[  120.013699][ T4682] overlayfs: './file1' not a directory
[  120.027023][ T4680] EXT4-fs (loop2): inline encryption not supported
[  120.034999][ T4680] EXT4-fs: failed to create workqueue
[  120.040881][ T4680] EXT4-fs (loop2): mount failed
[  121.561521][ T4706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.85'.
[  122.046045][ T4716] loop4: detected capacity change from 0 to 4096
[  122.355714][ T4716] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  123.245386][ T4726] ODEBUG: Out of memory. ODEBUG disabled
[  125.556817][ T4738] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  125.563602][ T4738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  125.627254][ T4738] vhci_hcd vhci_hcd.0: Device attached
[  125.763188][ T4731] loop3: detected capacity change from 0 to 32768
[  125.877708][ T4731] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.92 (4731)
[  126.121334][   T13] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  126.443464][ T4740] vhci_hcd: connection closed
[  126.445957][ T4326] vhci_hcd: stop threads
[  126.502524][ T4326] vhci_hcd: release socket
[  126.560209][ T4326] vhci_hcd: disconnect device
[  126.923907][   T13] usb 35-1: enqueue for inactive port 0
[  126.953319][ T4731] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  126.962373][ T4731] BTRFS info (device loop3): enabling disk space caching
[  126.969420][ T4731] BTRFS info (device loop3): force clearing of disk cache
[  126.977067][ T4731] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  126.987112][ T4731] BTRFS info (device loop3): use zstd compression, level 3
[  126.994743][ T4731] BTRFS info (device loop3): disk space caching is enabled
[  127.001949][ T4731] BTRFS info (device loop3): has skinny extents
[  127.037070][   T13] vhci_hcd: vhci_device speed not set
[  127.280415][ T4764] loop1: detected capacity change from 0 to 256
[  128.947796][ T4769] loop4: detected capacity change from 0 to 256
[  129.023513][ T4764] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  129.556486][ T4769] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  130.890761][ T4731] BTRFS error (device loop3): open_ctree failed: -12
[  132.557828][ T4463] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (4463)
[  133.038847][ T4814] Zero length message leads to an empty skb
[  136.095524][ T4834] loop1: detected capacity change from 0 to 256
[  138.203372][ T4834] FAT-fs (loop1): Directory bread(block 64) failed
[  138.210393][ T4834] FAT-fs (loop1): Directory bread(block 65) failed
[  138.217258][ T4834] FAT-fs (loop1): Directory bread(block 66) failed
[  138.224329][ T4834] FAT-fs (loop1): Directory bread(block 67) failed
[  138.231456][ T4834] FAT-fs (loop1): Directory bread(block 68) failed
[  138.238264][ T4834] FAT-fs (loop1): Directory bread(block 69) failed
[  138.244879][ T4834] FAT-fs (loop1): Directory bread(block 70) failed
[  138.251631][ T4834] FAT-fs (loop1): Directory bread(block 71) failed
[  138.258363][ T4834] FAT-fs (loop1): Directory bread(block 72) failed
[  138.264925][ T4834] FAT-fs (loop1): Directory bread(block 73) failed
[  139.232700][ T4195] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  140.161276][ T4850] device syzkaller0 entered promiscuous mode
[  140.985047][ T4861] device syzkaller0 entered promiscuous mode
[  141.129503][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  141.135940][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  141.303146][ T4873] device syzkaller0 entered promiscuous mode
[  141.754063][ T4882] xt_CONNSECMARK: invalid mode: 66
[  144.038315][ T4887] loop2: detected capacity change from 0 to 4096
[  146.823623][ T4898] x_tables: duplicate underflow at hook 3
[  149.009573][ T4913] device syzkaller0 entered promiscuous mode
[  149.520222][ T4913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.582118][ T4911] tipc: Resetting bearer <eth:syzkaller0>
[  149.730037][ T4911] tipc: Disabling bearer <eth:syzkaller0>
[  151.699330][ T4189] Bluetooth: hci4: command 0x0405 tx timeout
[  152.207813][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'.
[  153.795948][ T4950] loop4: detected capacity change from 0 to 256
[  153.881589][ T4950] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  155.590247][ T4976] syz.0.147 uses obsolete (PF_INET,SOCK_PACKET)
[  155.681653][ T4977] Invalid ELF header magic: != ELF
[  155.851168][ T4980] loop1: detected capacity change from 0 to 16
[  157.063947][ T4980] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  157.600486][ T4957] syz.2.143 (4957) used greatest stack depth: 21104 bytes left
[  157.689914][   T23] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  157.712924][   T23] Bluetooth: hci1: Injecting HCI hardware error event
[  157.721924][ T4195] Bluetooth: hci1: hardware error 0x00
[  158.744016][ T5008] overlayfs: failed to clone lowerpath
[  159.203665][ T5013] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  159.222063][ T5013] comedi comedi0: 8255: I/O port conflict (0xffffffff80000003,4)
[  159.247607][ T5013] comedi comedi0: 8255: I/O port conflict (0x6,4)
[  161.422449][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'.
[  161.938590][ T5043] device bond0 entered promiscuous mode
[  161.951330][ T5043] device bond_slave_0 entered promiscuous mode
[  162.216392][ T5043] device bond_slave_1 entered promiscuous mode
[  162.262313][ T5043] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  162.277591][ T5055] loop4: detected capacity change from 0 to 2048
[  163.758124][ T5043] bond1: (slave macvlan0): making interface the new active one
[  163.855454][ T5043] bond1: (slave macvlan0): Enslaving as an active interface with an up link
[  163.867515][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.939704][ T5043] syz.2.157 (5043) used greatest stack depth: 20016 bytes left
[  165.492521][ T4347] Bluetooth: hci5: Frame reassembly failed (-84)
[  166.431251][ T4190] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  167.316995][ T5099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  167.879600][ T5099] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  169.373076][ T5105] loop2: detected capacity change from 0 to 4096
[  174.072796][ T5156] loop3: detected capacity change from 0 to 512
[  174.118554][ T5157] overlayfs: failed to clone upperpath
[  174.213885][ T5156] EXT4-fs (loop3): Ignoring removed oldalloc option
[  174.241353][ T5156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  174.305912][ T5156] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)!
[  174.381689][ T5156] EXT4-fs (loop3): group descriptors corrupted!
[  174.401366][ T5164] loop4: detected capacity change from 0 to 512
[  176.647961][ T5158] loop1: detected capacity change from 0 to 32768
[  176.782438][ T5158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.179 (5158)
[  176.848768][ T5196] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  176.897024][ T5196] VFS: Can't find a romfs filesystem on dev nullb0.
[  176.897024][ T5196] 
[  176.938688][ T5158] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  178.077475][ T5199] loop3: detected capacity change from 0 to 256
[  178.476339][ T5158] BTRFS info (device loop1): enabling auto defrag
[  178.498620][ T5158] BTRFS info (device loop1): use no compression
[  178.645137][ T5158] BTRFS info (device loop1): turning on sync discard
[  179.013468][ T5158] BTRFS info (device loop1): disabling free space tree
[  179.289421][ T5158] BTRFS error (device loop1): cannot disable free space tree
[  179.306400][ T5199] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  179.435678][ T5158] BTRFS error (device loop1): open_ctree failed: -22
[  179.661943][ T4463] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4463)
[  179.732653][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  180.801650][ T5225] loop4: detected capacity change from 0 to 2048
[  181.586229][   T23] usb 4-1: Using ep0 maxpacket: 8
[  182.922903][   T23] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  182.932942][   T23] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  182.941794][   T23] usb 4-1: config 0 has no interface number 0
[  182.948017][   T23] usb 4-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  182.968075][ T5247] loop1: detected capacity change from 0 to 512
[  183.019141][ T5225] EXT4-fs: error -4 creating inode table initialization thread
[  183.095451][ T5225] EXT4-fs (loop4): mount failed
[  183.588929][   T23] usb 4-1: string descriptor 0 read error: -71
[  183.602080][   T23] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[  183.609249][ T5247] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  183.620379][   T23] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[  183.649669][   T23] usb 4-1: config 0 descriptor??
[  183.680753][ T5247] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  183.691394][   T23] usb 4-1: can't set config #0, error -71
[  183.783113][   T23] usb 4-1: USB disconnect, device number 2
[  183.797361][ T5247] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.203: Corrupt directory, running e2fsck is recommended
[  183.822637][ T5261] netlink: 19 bytes leftover after parsing attributes in process `syz.0.206'.
[  183.875801][ T5247] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  183.899874][ T5263] loop2: detected capacity change from 0 to 736
[  183.929482][ T5247] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.203: corrupted in-inode xattr
[  184.065090][ T5247] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.203: couldn't read orphan inode 15 (err -117)
[  184.139414][ T5267] loop4: detected capacity change from 0 to 2048
[  184.192094][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000008,jqfmt=vfsold,nolazytime,usrjquota=.journal_async_commit,grpjquota=,grpjquota=,grpid,,,errors=continue. Quota mode: writeback.
[  184.407387][   T23] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  184.862316][ T5284] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.948973][ T5285] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.961155][ T5285] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  184.971383][ T5285] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.203: Corrupt directory, running e2fsck is recommended
[  185.739270][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64
[  185.885586][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64334, setting to 64
[  186.049275][ T5291] loop1: detected capacity change from 0 to 1024
[  186.091233][   T23] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=d2.87
[  186.111456][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.166286][   T23] usb 4-1: Product: syz
[  186.226033][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[  186.443814][   T23] usb 4-1: Manufacturer: syz
[  186.448754][   T23] usb 4-1: SerialNumber: syz
[  186.466109][ T5301] loop4: detected capacity change from 0 to 256
[  186.482676][   T23] usb 4-1: config 0 descriptor??
[  186.547252][   T23] usb 4-1: can't set config #0, error -71
[  186.570284][   T23] usb 4-1: USB disconnect, device number 3
[  186.626901][ T5301] FAT-fs (loop4): Directory bread(block 64) failed
[  186.634879][ T5301] FAT-fs (loop4): Directory bread(block 65) failed
[  186.656982][ T5301] FAT-fs (loop4): Directory bread(block 66) failed
[  186.719521][ T5301] FAT-fs (loop4): Directory bread(block 67) failed
[  186.784293][ T4229] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  187.740298][ T5301] FAT-fs (loop4): Directory bread(block 68) failed
[  187.746913][ T5301] FAT-fs (loop4): Directory bread(block 69) failed
[  187.753806][ T5301] FAT-fs (loop4): Directory bread(block 70) failed
[  187.764136][ T5301] FAT-fs (loop4): Directory bread(block 71) failed
[  187.770970][ T5301] FAT-fs (loop4): Directory bread(block 72) failed
[  187.777544][ T5301] FAT-fs (loop4): Directory bread(block 73) failed
[  188.178943][ T5320] Cannot find add_set index 0 as target
[  188.290022][ T4229] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  188.298159][ T4229] usb 3-1: config 0 has no interface number 0
[  188.907404][ T4229] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  188.925877][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.934676][ T5334] netlink: 7 bytes leftover after parsing attributes in process `syz.1.227'.
[  188.950477][ T4229] usb 3-1: Product: syz
[  188.954694][ T4229] usb 3-1: Manufacturer: syz
[  188.971691][ T4229] usb 3-1: SerialNumber: syz
[  188.987511][ T4229] usb 3-1: config 0 descriptor??
[  189.016687][ T5334] netlink: 7 bytes leftover after parsing attributes in process `syz.1.227'.
[  189.079725][ T5341] loop3: detected capacity change from 0 to 2048
[  189.132943][ T5345] loop4: detected capacity change from 0 to 16
[  189.199252][ T5345] erofs: (device loop4): mounted with root inode @ nid 36.
[  189.226856][ T5345] attempt to access beyond end of device
[  189.226856][ T5345] loop4: rw=524288, want=1342177304, limit=16
[  189.279572][ T5345] attempt to access beyond end of device
[  189.279572][ T5345] loop4: rw=0, want=1342177280, limit=16
[  189.304519][ T4229] dvb_usb_ec168: probe of 3-1:0.1 failed with error -71
[  189.331369][ T4229] usb 3-1: USB disconnect, device number 2
[  189.406903][   T26] kauditd_printk_skb: 61 callbacks suppressed
[  189.406922][   T26] audit: type=1800 audit(1780460459.203:74): pid=5345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.231" name="file1" dev="loop4" ino=86 res=0 errno=0
[  189.533344][ T5349] loop1: detected capacity change from 0 to 32768
[  189.577919][ T5354] loop4: detected capacity change from 0 to 256
[  189.638295][ T5354] FAT-fs (loop4): Directory bread(block 64) failed
[  189.645082][ T5354] FAT-fs (loop4): Directory bread(block 65) failed
[  189.651780][ T5354] FAT-fs (loop4): Directory bread(block 66) failed
[  189.664053][ T5354] FAT-fs (loop4): Directory bread(block 67) failed
[  189.671112][ T5354] FAT-fs (loop4): Directory bread(block 68) failed
[  189.681197][ T5354] FAT-fs (loop4): Directory bread(block 69) failed
[  189.687161][ T5100] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  189.688211][ T5354] FAT-fs (loop4): Directory bread(block 70) failed
[  189.709888][ T5354] FAT-fs (loop4): Directory bread(block 71) failed
[  189.725073][ T5349] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  189.733952][ T5349] BTRFS info (device loop1): enabling disk space caching
[  189.741029][ T5349] BTRFS info (device loop1): force clearing of disk cache
[  189.748361][ T5349] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  189.758027][ T5349] BTRFS info (device loop1): use zstd compression, level 3
[  189.765515][ T5349] BTRFS info (device loop1): disk space caching is enabled
[  189.772837][ T5349] BTRFS info (device loop1): has skinny extents
[  189.783925][ T5354] FAT-fs (loop4): Directory bread(block 72) failed
[  189.790772][ T5354] FAT-fs (loop4): Directory bread(block 73) failed
[  189.901434][ T5349] BTRFS info (device loop1): enabling ssd optimizations
[  189.915091][ T5349] BTRFS info (device loop1): clearing free space tree
[  189.922490][ T5349] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  189.932753][ T5349] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  190.131459][ T5100] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.185476][ T5100] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.233513][ T5100] usb 4-1: config 0 interface 0 has no altsetting 0
[  190.421510][ T5100] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  190.432979][ T5100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.816382][ T5100] usb 4-1: config 0 descriptor??
[  191.138817][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  191.402771][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.426952][ T4229] usb 3-1: Using ep0 maxpacket: 8
[  191.442774][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.461275][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.512946][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.583001][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.595799][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.603012][ T5100] chicony 0003:04F2:1236.0001: unknown main item tag 0x0
[  191.621361][ T4229] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  191.645642][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.670000][ T5100] chicony 0003:04F2:1236.0001: hidraw0: USB HID vff.fc Device [HID 04f2:1236] on usb-dummy_hcd.3-1/input0
[  191.687401][ T4229] usb 3-1: config 0 descriptor??
[  191.708217][ T5100] usb 4-1: USB disconnect, device number 4
[  191.794673][ T5415] fido_id[5415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  191.952660][ T5398] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  191.964973][ T4279] usb 3-1: USB disconnect, device number 3
[  192.059283][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  192.373414][ T5398] usb 2-1: Using ep0 maxpacket: 8
[  192.492243][ T5417] loop3: detected capacity change from 0 to 32768
[  192.500114][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.533053][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.653352][ T5417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.249 (5417)
[  192.736035][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  192.910474][ T4229] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.112905][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.162065][ T4229] usb 5-1: config 0 descriptor??
[  193.250236][ T5417] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  193.272681][ T5417] BTRFS info (device loop3): using free space tree
[  193.279394][ T5417] BTRFS info (device loop3): has skinny extents
[  193.286911][ T5398] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 170, changing to 7
[  193.294233][ T5100] Bluetooth: hci2: command 0x0406 tx timeout
[  193.348699][ T5100] Bluetooth: hci0: command 0x0406 tx timeout
[  193.364519][ T5100] Bluetooth: hci3: command 0x0406 tx timeout
[  193.468549][ T5417] BTRFS info (device loop3): enabling ssd optimizations
[  193.522717][ T5398] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.532035][ T5398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.538858][ T5456] capability: warning: `syz.0.258' uses deprecated v2 capabilities in a way that may be insecure
[  193.582006][ T5398] usb 2-1: Product: syz
[  193.635528][ T5398] usb 2-1: Manufacturer: syz
[  193.641092][ T5398] usb 2-1: SerialNumber: syz
[  193.699221][ T4229] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  193.756298][ T4229] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  194.897571][ T5468] loop2: detected capacity change from 0 to 8192
[  194.916821][ T5475] netlink: 80 bytes leftover after parsing attributes in process `syz.4.265'.
[  194.919682][ T5398] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc
[  194.939597][ T5474] usb 5-1: USB disconnect, device number 2
[  194.948894][ T5468] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  194.959349][ T5398] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  194.966504][ T5468] REISERFS (device loop2): using ordered data mode
[  194.977898][ T5468] reiserfs: using flush barriers
[  194.978736][ T5470] fido_id[5470]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  195.011662][ T5468] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.052102][ T5468] REISERFS (device loop2): checking transaction log (loop2)
[  195.060115][ T5398] usb 2-1: USB disconnect, device number 2
[  195.087072][ T5468] REISERFS (device loop2): Using r5 hash to sort names
[  195.088629][ T5480] comedi comedi3: multiq3: I/O port conflict (0x100,16)
[  195.123222][ T5468] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  195.511501][ T4521] udevd[4521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.715390][ T5517] overlayfs: failed to clone upperpath
[  198.562440][ T5524] loop3: detected capacity change from 0 to 1024
[  198.677270][ T5524] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  198.906326][ T5534] overlayfs: './file0' not a directory
[  199.035263][ T5474] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  199.145353][ T5545] loop1: detected capacity change from 0 to 128
[  199.186421][ T5545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  199.201252][ T5545] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  199.257758][ T5532] loop4: detected capacity change from 0 to 32768
[  199.284738][ T5398] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  199.409797][ T5532] XFS (loop4): Mounting V5 Filesystem
[  199.718785][ T5398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.799624][ T5398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.969275][ T5398] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  200.129442][ T5398] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  200.138547][ T5398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.180702][ T5532] XFS (loop4): Ending clean mount
[  200.218469][ T5398] usb 4-1: config 0 descriptor??
[  200.378253][ T5474] usb 3-1: unable to get BOS descriptor or descriptor too short
[  200.451998][ T4197] XFS (loop4): Unmounting Filesystem
[  200.460926][ T5568] loop1: detected capacity change from 0 to 4096
[  200.478104][ T5474] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.494838][ T5474] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  200.506567][ T5474] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  200.703722][ T5474] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  200.739723][ T5474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.838121][ T5474] usb 3-1: Product: syz
[  200.883826][ T5474] usb 3-1: Manufacturer: syz
[  200.928257][ T5474] usb 3-1: SerialNumber: syz
[  201.384263][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.399096][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.409680][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.420161][ T5474] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  201.421981][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.436250][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.445176][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.461836][ T5398] steelseries_srws1 0003:1038:1410.0003: unknown main item tag 0x0
[  201.470439][ T5398] steelseries_srws1 0003:1038:1410.0003: missing HID_OUTPUT_REPORT 0
[  201.479933][ T5574] 9pnet: Insufficient options for proto=fd
[  201.516503][ T5474] snd-usb-audio: probe of 3-1:1.1 failed with error -22
[  201.559148][ T5398] usb 4-1: USB disconnect, device number 5
[  201.729539][ T5474] snd-usb-audio: probe of 3-1:1.2 failed with error -22
[  201.775949][ T5474] usb 3-1: USB disconnect, device number 4
[  201.852586][ T4460] udevd[4460]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.998368][ T5596] loop2: detected capacity change from 0 to 512
[  203.039928][ T5596] EXT4-fs (loop2): Ignoring removed nobh option
[  203.065246][ T5596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  203.120065][ T5596] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  203.151212][ T5481] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  203.159824][ T5596] EXT4-fs (loop2): 1 truncate cleaned up
[  203.172964][ T5596] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000066,lazytime,data_err=abort,inode_readahead_blks=0x0000000004000000,nobh,,errors=continue. Quota mode: none.
[  203.178043][ T4279] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  203.278091][   T26] audit: type=1800 audit(1780460472.054:75): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.305" name="file1" dev="loop2" ino=15 res=0 errno=0
[  203.432947][ T5481] usb 2-1: Using ep0 maxpacket: 16
[  203.493278][ T4279] usb 4-1: Using ep0 maxpacket: 16
[  203.562952][ T5481] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.584250][ T5481] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  203.650251][ T4279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.681862][ T4279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.713812][ T4279] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  203.735656][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.764203][ T5481] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  203.774780][ T4279] usb 4-1: config 0 descriptor??
[  203.784488][ T5481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.813504][ T5481] usb 2-1: Product: syz
[  203.817976][ T5481] usb 2-1: Manufacturer: syz
[  203.834823][ T5481] usb 2-1: SerialNumber: syz
[  203.966290][ T5613] loop2: detected capacity change from 0 to 32768
[  204.099489][ T5613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  204.130868][ T5600] loop4: detected capacity change from 0 to 65536
[  204.203273][ T5481] usb 2-1: 0:2 : does not exist
[  204.267250][ T5600] XFS (loop4): Mounting V5 Filesystem
[  204.290470][ T4196] ocfs2: Unmounting device (7,2) on (node local)
[  204.513869][ T4279] apple 0003:05AC:024B.0004: report_id 0 is invalid
[  204.733364][ T4279] apple 0003:05AC:024B.0004: item 0 0 1 8 parsing failed
[  204.958519][ T4279] apple 0003:05AC:024B.0004: parse failed
[  204.993280][ T5600] XFS (loop4): Ending clean mount
[  205.088418][ T4279] apple: probe of 0003:05AC:024B.0004 failed with error -22
[  205.163532][ T5481] usb 2-1: USB disconnect, device number 3
[  205.207057][ T4279] usb 4-1: USB disconnect, device number 6
[  205.318215][ T5398] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x8001 
[  205.358042][ T5398] XFS (loop4): Unmount and run xfs_repair
[  205.371847][ T5398] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  205.385970][ T5398] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00  XAGF..........@.
[  205.414014][ T5398] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  205.445439][ T5398] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  205.548358][ T5398] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00  ......;_..;\....
[  205.626188][ T5398] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  205.710838][ T5398] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  205.791270][ T5398] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  205.878433][ T5398] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  206.184476][ T5600] XFS (loop4): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x8001 len 1 error 74
[  206.313416][ T5642] loop3: detected capacity change from 0 to 1024
[  206.390805][ T4197] XFS (loop4): Unmounting Filesystem
[  206.597086][ T5481] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  207.699920][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  207.706449][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  207.860048][ T5641] loop2: detected capacity change from 0 to 32768
[  207.895665][ T5481] usb 2-1: unable to get BOS descriptor or descriptor too short
[  207.968778][ T5641] XFS (loop2): Mounting V5 Filesystem
[  207.994220][ T5481] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.009810][ T5481] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  208.023772][ T5481] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  208.105994][ T5641] XFS (loop2): Ending clean mount
[  208.150151][ T5650] loop3: detected capacity change from 0 to 32768
[  208.199636][ T5650] XFS: ikeep mount option is deprecated.
[  208.205508][ T5650] XFS: attr2 mount option is deprecated.
[  208.218323][ T5481] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  208.229162][ T5481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.230326][ T5650] XFS: ikeep mount option is deprecated.
[  208.237920][ T5481] usb 2-1: Product: syz
[  208.248129][ T5481] usb 2-1: Manufacturer: syz
[  208.254197][ T5481] usb 2-1: SerialNumber: syz
[  208.263912][ T4196] XFS (loop2): Unmounting Filesystem
[  208.302348][ T5398] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  208.355063][ T5650] XFS (loop3): Mounting V5 Filesystem
[  208.526738][ T5100] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 
[  208.544076][ T5100] XFS (loop3): Unmount and run xfs_repair
[  208.552394][ T5100] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  208.566711][ T5100] 00000000: 58 41 47 46 00 00 10 00 00 00 00 00 00 00 10 00  XAGF............
[  208.583120][ T5100] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  208.594222][ T5100] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  208.609595][ T5481] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  208.618527][ T5100] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[  208.636747][ T5100] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  208.649536][ T5100] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[  208.661747][ T5100] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  208.674315][ T5100] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  208.686713][ T5481] snd-usb-audio: probe of 2-1:1.1 failed with error -22
[  208.700284][ T5650] XFS (loop3): metadata I/O error in "xfs_read_agf+0x252/0x510" at daddr 0x1 len 1 error 74
[  208.718422][ T5650] XFS (loop3): Error -117 reserving per-AG metadata reserve pool.
[  208.731193][ T5398] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  208.743402][ T5650] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1bf/0x1f0 (fs/xfs/xfs_fsops.c:577).  Shutting down filesystem.
[  208.761442][ T5398] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.772667][ T5650] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  208.781792][ T5398] usb 5-1: config 0 interface 0 has no altsetting 0
[  208.789101][ T5398] usb 5-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00
[  208.798657][ T5650] XFS (loop3): Ending clean mount
[  208.800992][ T5481] snd-usb-audio: probe of 2-1:1.2 failed with error -22
[  208.804055][ T5398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.820282][ T5650] XFS (loop3): Failed to initialize disk quotas.
[  208.839565][ T5398] usb 5-1: config 0 descriptor??
[  208.843388][ T4463] udevd[4463]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.869095][ T5481] usb 2-1: USB disconnect, device number 4
[  208.879402][ T4187] XFS (loop3): Unmounting Filesystem
[  209.073992][ T5678] loop2: detected capacity change from 0 to 32768
[  209.282126][ T5678] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.325 (5678)
[  209.306626][ T4460] udevd[4460]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.362571][ T5398] wacom 0003:056A:0144.0005: Unknown device_type for 'HID 056a:0144'. Ignoring.
[  209.741956][ T5678] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  210.048185][ T5398] usb 5-1: USB disconnect, device number 3
[  210.056821][ T5685] loop3: detected capacity change from 0 to 512
[  210.080250][ T5678] BTRFS info (device loop2): force zlib compression, level 3
[  210.158075][ T5678] BTRFS info (device loop2): force clearing of disk cache
[  210.191946][ T5678] BTRFS info (device loop2): setting nodatasum
[  210.213490][ T5685] EXT4-fs (loop3): Ignoring removed oldalloc option
[  210.220365][ T5685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.239744][ T5678] BTRFS info (device loop2): use zlib compression, level 3
[  210.256172][ T5687] loop1: detected capacity change from 0 to 4096
[  210.278812][ T5678] BTRFS info (device loop2): allowing degraded mounts
[  210.296713][ T5685] EXT4-fs (loop3): 1 truncate cleaned up
[  210.303710][ T5678] BTRFS info (device loop2): enabling disk space caching
[  210.311597][ T5685] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none.
[  210.313275][ T5678] BTRFS info (device loop2): disk space caching is enabled
[  210.541286][ T5678] BTRFS info (device loop2): has skinny extents
[  211.231796][ T5703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.310865][ T5687] NILFS (loop1): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  211.343053][ T5712] netlink: 72 bytes leftover after parsing attributes in process `syz.4.332'.
[  211.466189][ T5678] BTRFS info (device loop2): enabling ssd optimizations
[  212.453326][ T5678] BTRFS info (device loop2): clearing free space tree
[  212.523467][ T5678] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  212.695293][ T5678] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.246542][ T5474] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  213.383633][ T5743] loop1: detected capacity change from 0 to 16
[  213.404318][ T5743] erofs: (device loop1): mounted with root inode @ nid 36.
[  213.533036][ T5474] usb 4-1: Using ep0 maxpacket: 32
[  214.568250][ T5474] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.617869][ T5474] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.650049][ T5474] usb 4-1: config 0 interface 0 has no altsetting 0
[  214.668172][ T5757] loop1: detected capacity change from 0 to 1024
[  214.687164][ T5474] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  214.696393][ T5474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.814443][ T5474] usb 4-1: config 0 descriptor??
[  215.849543][ T5766] loop4: detected capacity change from 0 to 1024
[  215.863644][ T5768] loop2: detected capacity change from 0 to 256
[  215.951799][ T5772] loop1: detected capacity change from 0 to 512
[  215.955444][ T5768] FAT-fs (loop2): Directory bread(block 64) failed
[  216.005490][ T5768] FAT-fs (loop2): Directory bread(block 65) failed
[  216.007004][ T5766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.014085][ T5768] FAT-fs (loop2): Directory bread(block 66) failed
[  216.038435][ T5768] FAT-fs (loop2): Directory bread(block 67) failed
[  216.060972][ T5768] FAT-fs (loop2): Directory bread(block 68) failed
[  216.075446][ T5768] FAT-fs (loop2): Directory bread(block 69) failed
[  216.091939][ T5768] FAT-fs (loop2): Directory bread(block 70) failed
[  216.104547][ T5772] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.351: bad orphan inode 11862016
[  216.119384][ T5768] FAT-fs (loop2): Directory bread(block 71) failed
[  216.134395][ T5772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  216.138807][ T5768] FAT-fs (loop2): Directory bread(block 72) failed
[  216.145953][ T5772] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.176300][ T5768] FAT-fs (loop2): Directory bread(block 73) failed
[  216.227003][ T5474] a4tech 0003:09DA:0006.0006: unknown main item tag 0x5
[  216.234645][ T5474] a4tech 0003:09DA:0006.0006: unknown main item tag 0x4
[  216.274645][ T5474] a4tech 0003:09DA:0006.0006: unknown main item tag 0x2
[  216.281847][ T5474] a4tech 0003:09DA:0006.0006: unknown main item tag 0x7
[  216.286509][   T26] audit: type=1800 audit(1780460484.065:76): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="bus" dev="loop2" ino=1048637 res=0 errno=0
[  216.289087][ T5474] a4tech 0003:09DA:0006.0006: unknown main item tag 0x7
[  216.325175][ T5474] a4tech 0003:09DA:0006.0006: hidraw0: USB HID v0.08 Device [HID 09da:0006] on usb-dummy_hcd.3-1/input0
[  216.337793][ T5768] attempt to access beyond end of device
[  216.337793][ T5768] loop2: rw=2049, want=1300, limit=256
[  216.444416][ T5778] loop4: detected capacity change from 0 to 1024
[  216.526637][ T5778] EXT4-fs (loop4): Ignoring removed oldalloc option
[  216.608070][ T4776] usb 4-1: USB disconnect, device number 7
[  216.657317][ T5781] fido_id[5781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  216.680987][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,bsddf,usrjquota=,norecovery,usrquota,discard,oldalloc,sysvgroups,grpjquota=,,errors=continue. Quota mode: writeback.
[  217.948976][ T5780] loop1: detected capacity change from 0 to 32768
[  218.818554][ T5794] loop3: detected capacity change from 0 to 1024
[  219.526627][ T5798] loop2: detected capacity change from 0 to 512
[  219.702281][ T5798] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,barrier=0x000000000000008e,bsddf,errors=remount-ro,init_itable,auto_da_alloc=0x00000000000000eb,quota,. Quota mode: writeback.
[  219.734899][ T5798] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.954966][ T5810] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.363: directory missing '..'
[  221.607561][ T5824] overlayfs: failed to resolve './file1': -2
[  221.807147][ T5827] loop1: detected capacity change from 0 to 8
[  221.834921][ T5825] loop3: detected capacity change from 0 to 1024
[  222.344644][  T144] hfsplus: b-tree write err: -5, ino 8
[  222.387687][ T5835] loop1: detected capacity change from 0 to 512
[  222.398903][ T5800] loop4: detected capacity change from 0 to 32768
[  222.507782][ T4279] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  222.530008][ T5835] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  222.550090][ T5800] XFS (loop4): Mounting V5 Filesystem
[  222.854170][ T5857] overlayfs: failed to resolve './file1': -2
[  222.879049][ T5800] XFS (loop4): Ending clean mount
[  222.975584][ T4279] usb 3-1: Using ep0 maxpacket: 32
[  223.029982][ T5856] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  223.201638][ T4279] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  223.241902][ T4279] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  223.532153][ T4279] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  223.578918][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  223.769993][ T4279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  223.780558][ T4279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  223.791336][ T4279] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  223.801760][ T4279] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  223.822633][ T4279] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  223.838989][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.335959][ T4279] usb 3-1: config 0 descriptor??
[  224.636696][ T5871] loop3: detected capacity change from 0 to 1024
[  224.659587][ T4197] XFS (loop4): Unmounting Filesystem
[  224.838532][ T4279] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  224.926472][   T26] audit: type=1800 audit(1780460492.051:77): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.383" name="file1" dev="loop3" ino=20 res=0 errno=0
[  225.038711][ T4776] usb 3-1: USB disconnect, device number 5
[  225.080617][ T4776] usblp0: removed
[  225.179485][ T5883] tipc: Failed to obtain node identity
[  225.194137][ T5883] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  225.316737][ T5874] loop1: detected capacity change from 0 to 32768
[  225.318651][ T5887] loop4: detected capacity change from 0 to 2048
[  225.371200][ T5874] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.384 (5874)
[  225.376439][ T5887] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  225.622262][ T5874] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  225.661882][ T5874] BTRFS info (device loop1): using free space tree
[  225.725277][ T5874] BTRFS info (device loop1): has skinny extents
[  225.748698][ T5897] overlayfs: failed to resolve './file1': -2
[  226.281057][ T5913] loop3: detected capacity change from 0 to 64
[  226.410292][ T5874] BTRFS info (device loop1): enabling ssd optimizations
[  226.417532][ T5913] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  226.858064][ T5936] netlink: 'syz.0.400': attribute type 9 has an invalid length.
[  226.868525][ T4270] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4270)
[  226.884345][ T5936] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.400'.
[  226.920921][ T5932] loop4: detected capacity change from 0 to 4096
[  227.955169][ T5957] loop1: detected capacity change from 0 to 128
[  228.314345][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  228.363140][ T5957] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  228.495395][ T5965] loop2: detected capacity change from 0 to 512
[  228.561326][ T5957] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.403: No space for directory leaf checksum. Please run e2fsck -D.
[  228.617510][ T5965] EXT4-fs (loop2): orphan cleanup on readonly fs
[  228.648822][ T5961] overlayfs: failed to resolve './file1': -2
[  228.656713][ T5957] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.403: checksumming directory block 0
[  228.669101][ T5940] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  228.688608][ T5965] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.408: ea_inode file size=4 entry size=6
[  228.702282][ T5965] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  228.719623][ T5965] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.408: corrupted inode contents
[  228.767544][ T5965] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.408: mark_inode_dirty error
[  228.788131][ T5957] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.403: No space for directory leaf checksum. Please run e2fsck -D.
[  228.841826][ T5966] loop3: detected capacity change from 0 to 4096
[  228.851221][ T5965] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.408: corrupted inode contents
[  228.897045][ T5957] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.403: checksumming directory block 0
[  228.935577][ T5966] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  228.966839][ T5965] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2954: inode #15: comm syz.2.408: mark_inode_dirty error
[  229.024444][ T5965] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2957: inode #15: comm syz.2.408: mark inode dirty (error -117)
[  229.043054][ T5965] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117)
[  229.053882][ T5965] EXT4-fs (loop2): 1 orphan inode deleted
[  229.055168][ T5957] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.403: No space for directory leaf checksum. Please run e2fsck -D.
[  229.059754][ T5965] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  229.120125][ T5957] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.403: Directory block failed checksum
[  229.138840][ T5966] ntfs3: loop3: Failed to load $Extend.
[  229.148007][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.164999][ T5940] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  229.188561][ T5940] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  229.332274][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  229.348704][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  229.357775][ T5940] usb 5-1: SerialNumber: syz
[  229.413262][ T5940] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  229.425702][ T5940] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  229.437507][ T5940] cdc_acm: probe of 5-1:1.0 failed with error -22
[  229.786955][ T5940] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  230.123372][ T5940] usb 4-1: Using ep0 maxpacket: 16
[  230.265544][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.414633][ T5940] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.424856][ T5940] usb 4-1: config 0 interface 0 has no altsetting 0
[  230.431632][ T5940] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  230.440864][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.447532][ T4176] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  230.451596][ T5940] usb 4-1: config 0 descriptor??
[  230.465400][ T5398] usb 5-1: USB disconnect, device number 4
[  230.674992][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  231.055143][ T5940] hid (null): bogus close delimiter
[  231.065323][ T5939] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  231.097195][ T5939] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  231.233684][ T5939] usb 3-1: config 220 has no interface number 2
[  231.352525][ T5940] usb 4-1: USB disconnect, device number 8
[  231.422390][ T5939] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  231.515231][ T5939] usb 3-1: config 220 interface 0 has no altsetting 0
[  231.539020][ T5939] usb 3-1: config 220 interface 76 has no altsetting 0
[  231.628316][ T4176] usb 2-1: Using ep0 maxpacket: 32
[  231.678685][ T5939] usb 3-1: config 220 interface 1 has no altsetting 0
[  231.821375][ T5990] overlayfs: failed to clone upperpath
[  231.867408][ T5939] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  231.934172][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.026124][ T5939] usb 3-1: Product: syz
[  232.070097][ T5939] usb 3-1: Manufacturer: syz
[  232.116885][ T5939] usb 3-1: SerialNumber: syz
[  232.700713][ T4176] usb 2-1: unable to read config index 0 descriptor/all
[  232.708198][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  232.726878][ T4176] usb 2-1: can't read configurations, error -71
[  232.820971][ T5939] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  232.827535][ T5939] usb 3-1: No valid video chain found.
[  233.145157][ T4228] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.156885][ T4176] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  233.226631][ T4228] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.402966][ T4228] usb 5-1: config 0 interface 0 has no altsetting 0
[  233.545036][ T4228] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00
[  233.577907][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.643198][ T4176] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  233.652811][ T5939] usb 3-1: selecting invalid altsetting 0
[  233.695828][ T4228] usb 5-1: config 0 descriptor??
[  233.712033][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  233.751462][ T4176] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  233.763254][ T5939] usb 3-1: selecting invalid altsetting 0
[  233.769274][ T5939] usbtest: probe of 3-1:220.1 failed with error -22
[  233.782560][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.792971][ T5939] usb 3-1: USB disconnect, device number 6
[  233.867201][ T4176] usb 2-1: config 0 descriptor??
[  234.170326][ T4176] usb 2-1: USB disconnect, device number 6
[  234.215674][ T6004] loop3: detected capacity change from 0 to 32768
[  234.265934][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  234.627144][ T6004] XFS (loop3): Mounting V5 Filesystem
[  235.102625][ T6004] XFS (loop3): Ending clean mount
[  235.167873][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.200317][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.207966][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.220061][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.242397][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.259073][ T6004] XFS (loop3): Quotacheck needed: Please wait.
[  235.296400][ T4228] wacom 0003:056A:00CC.0008: unknown main item tag 0x0
[  235.314277][ T4228] wacom 0003:056A:00CC.0008: hidraw0: USB HID v1.01 Device [HID 056a:00cc] on usb-dummy_hcd.4-1/input0
[  235.366718][ T4228] usb 5-1: USB disconnect, device number 5
[  235.416418][ T6030] usb usb7: usbfs: process 6030 (syz.1.428) did not claim interface 0 before use
[  235.582634][ T6034] overlayfs: failed to resolve './file0': -2
[  235.771307][ T6032] fido_id[6032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  235.946063][ T6004] XFS (loop3): Quotacheck: Done.
[  236.207986][ T4187] XFS (loop3): Unmounting Filesystem
[  237.220577][ T6059] loop4: detected capacity change from 0 to 512
[  237.312074][ T6059] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  237.405835][ T6059] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.439: corrupted in-inode xattr
[  237.455978][ T6059] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.439: couldn't read orphan inode 15 (err -117)
[  237.497771][ T6067] loop1: detected capacity change from 0 to 4096
[  237.500737][ T6059] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none.
[  237.561021][ T6067] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  237.599474][ T6067] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  237.657376][ T6067] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  237.702380][ T6069] device syzkaller1 entered promiscuous mode
[  237.734837][ T6067] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  237.840972][ T6067] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  237.897030][ T6067] ntfs: volume version 3.1.
[  237.908298][ T6076] loop4: detected capacity change from 0 to 256
[  237.918401][ T6075] loop3: detected capacity change from 0 to 1024
[  237.933584][ T6067] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  237.982287][ T6067] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  238.019988][ T6067] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  238.076357][ T6067] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  238.115499][ T6067] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  238.157078][ T4403] hfsplus: b-tree write err: -5, ino 25
[  238.167641][ T4403] hfsplus: b-tree write err: -5, ino 4
[  238.262536][ T4403] hfsplus: b-tree write err: -5, ino 2
[  239.364631][ T6098] loop4: detected capacity change from 0 to 512
[  239.399124][ T6098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.454: inode #1: comm syz.4.454: iget: illegal inode #
[  239.415384][ T6098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.454: error while reading EA inode 1 err=-117
[  239.437044][ T6098] EXT4-fs (loop4): 1 orphan inode deleted
[  239.455952][ T6098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  239.589652][ T5398] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  239.633034][ T4176] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  239.850571][ T5398] usb 2-1: Using ep0 maxpacket: 32
[  239.921269][ T4176] usb 4-1: Using ep0 maxpacket: 16
[  239.990657][ T5398] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023
[  240.001082][ T5398] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  240.001271][ T5939] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  240.022867][ T5398] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 126, changing to 10
[  240.240370][ T5398] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40
[  240.288400][ T5398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.315733][ T5939] usb 5-1: Using ep0 maxpacket: 32
[  240.382071][ T5398] usb 2-1: Product: syz
[  240.425212][ T5398] usb 2-1: Manufacturer: syz
[  240.446231][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0
[  240.466041][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  240.495193][ T5398] usb 2-1: SerialNumber: syz
[  240.566727][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.687465][ T6089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  240.754987][ T5939] usb 5-1: config 0 descriptor??
[  240.789292][ T4176] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.800793][ T4176] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  240.831904][ T4176] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  240.842919][ T4176] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  240.949646][ T4176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  240.964105][ T4176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  240.983644][ T4176] usb 4-1: SerialNumber: syz
[  241.033643][ T6093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  241.047693][ T6093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  241.074424][ T4176] hub 4-1:1.0: bad descriptor, ignoring hub
[  241.085068][ T4176] hub: probe of 4-1:1.0 failed with error -5
[  241.149663][ T5398] usb 2-1: MIDIStreaming interface descriptor not found
[  241.156775][ T5398] usb 2-1: too many endpoints
[  241.187619][ T5398] usb 2-1: USB disconnect, device number 7
[  241.251217][ T4464] udevd[4464]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.297131][ T6093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  241.305231][ T6093] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  241.335533][ T5939] logitech 0003:046D:C287.0009: unknown main item tag 0xe
[  241.342758][ T5939] logitech 0003:046D:C287.0009: unknown main item tag 0xd
[  241.350677][ T5939] logitech 0003:046D:C287.0009: unknown main item tag 0x1
[  241.360986][ T5939] logitech 0003:046D:C287.0009: hidraw0: USB HID v0.04 Device [HID 046d:c287] on usb-dummy_hcd.4-1/input0
[  241.372694][ T5939] logitech 0003:046D:C287.0009: no inputs found
[  241.583143][ T5474] usb 5-1: USB disconnect, device number 6
[  241.693327][ T6136] loop1: detected capacity change from 0 to 4096
[  241.721197][ T6136] EXT4-fs (loop1): Test dummy encryption mode enabled
[  241.750163][ T6136] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,auto_da_alloc=0x0000000000000002,nodiscard,data_err=ignore,data_err=abort,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  241.856141][ T4176] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  241.961827][ T6136] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  242.222018][ T5398] usb 4-1: USB disconnect, device number 9
[  242.229308][ T5398] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  242.248172][ T6151] netlink: 'syz.0.473': attribute type 9 has an invalid length.
[  243.326716][ T4176] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  243.793315][ T4176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.898021][ T4176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.182593][ T4176] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  244.248539][ T4176] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  244.860735][ T4176] usb 3-1: Manufacturer: syz
[  244.931186][ T4176] usb 3-1: config 0 descriptor??
[  244.989318][ T6212] loop4: detected capacity change from 0 to 256
[  245.104060][ T6212] exfat: Deprecated parameter 'namecase'
[  245.120992][ T6212] exfat: Unknown parameter 'keep_last_dots'
[  245.356017][ T6209] loop1: detected capacity change from 0 to 131072
[  245.477608][ T6209] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  245.486347][ T6209] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  245.499067][ T6209] F2FS-fs (loop1): invalid crc value
[  245.870565][ T6209] F2FS-fs (loop1): Found nat_bits in checkpoint
[  245.987448][ T6209] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  245.994894][ T6209] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  246.525206][ T6232] loop4: detected capacity change from 0 to 256
[  246.546586][ T4176] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input13
[  246.555187][ T6234] loop3: detected capacity change from 0 to 256
[  246.593552][ T6232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  246.663556][ T4176] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000A/input/input14
[  246.703869][ T6232] exFAT-fs (loop4): error, invalid size(size(31196) > aligned(9223372036854777344)
[  246.703869][ T6232] 
[  246.741952][ T4176] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0
[  246.775358][ T6232] exFAT-fs (loop4): Filesystem has been set read-only
[  246.803796][ T4176] usb 3-1: USB disconnect, device number 7
[  246.833821][ T6237] exFAT-fs (loop4): error, invalid size(size(31196) > aligned(9223372036854777344)
[  246.833821][ T6237] 
[  246.991341][ T6238] fido_id[6238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  248.384424][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  248.384440][   T26] audit: type=1326 audit(1780460513.700:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6255 comm="syz.0.500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6af2885e59 code=0x0
[  249.834646][ T6246] loop3: detected capacity change from 0 to 40427
[  249.889895][ T6246] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  249.954138][ T6246] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  250.098401][ T6246] F2FS-fs (loop3): Found nat_bits in checkpoint
[  250.303302][ T6246] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  250.345756][ T6246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  251.352469][ T6265] loop4: detected capacity change from 0 to 32768
[  252.283046][ T6296] netlink: 'syz.1.511': attribute type 3 has an invalid length.
[  252.426433][ T6296] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.511'.
[  252.449741][ T6265] ialloc: diAlloc returned -5!
[  253.587016][ T6322] tipc: Enabled bearer <udp:s>, priority 10
[  253.807889][ T6331] loop3: detected capacity change from 0 to 1024
[  253.957934][ T6331] EXT4-fs (loop3): Ignoring removed bh option
[  254.289398][ T6331] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  254.811683][ T4176] tipc: Node number set to 44253002
[  254.831891][ T6348] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  254.890629][ T6308] loop1: detected capacity change from 0 to 32768
[  254.991145][ T6308] XFS (loop1): Mounting V5 Filesystem
[  255.097269][ T6308] XFS (loop1): Ending clean mount
[  255.148187][ T6354] loop4: detected capacity change from 0 to 128
[  255.290397][ T6370] overlayfs: failed to clone upperpath
[  255.431184][ T4188] XFS (loop1): Unmounting Filesystem
[  256.619316][ T6392] loop4: detected capacity change from 0 to 256
[  256.901045][ T6392] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  257.647472][ T6432] overlayfs: failed to clone upperpath
[  257.652839][ T6434] loop1: detected capacity change from 0 to 1024
[  257.928899][ T6434] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  257.984464][ T6434] hfsplus: xattr searching failed
[  258.259281][  T144] hfsplus: b-tree write err: -5, ino 25
[  258.275556][  T144] hfsplus: b-tree write err: -5, ino 4
[  258.354109][  T144] hfsplus: b-tree write err: -5, ino 2
[  260.853597][ T6476] loop1: detected capacity change from 0 to 32768
[  260.878710][ T6476] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.563 (6476)
[  260.932922][ T6476] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  260.950902][ T6476] BTRFS info (device loop1): using free space tree
[  260.965593][ T6476] BTRFS info (device loop1): has skinny extents
[  261.111021][ T6493] loop4: detected capacity change from 0 to 32768
[  261.112636][ T6476] BTRFS info (device loop1): enabling ssd optimizations
[  261.216196][ T6493] JBD2: Ignoring recovery information on journal
[  261.285364][ T6493] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  261.447313][ T4200] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  261.544549][ T6524] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  261.571101][ T6524] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  261.718272][ T4197] ocfs2: Unmounting device (7,4) on (node local)
[  261.751632][ T4200] usb 3-1: Using ep0 maxpacket: 8
[  262.028499][ T4200] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  262.037355][ T4200] usb 3-1: config 179 has no interface number 0
[  262.043878][ T4200] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  262.057045][ T4200] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  262.068947][ T4200] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  262.084839][ T4200] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  262.097934][ T4200] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  262.379961][ T5940] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  262.581848][ T6553] fuse: Bad value for 'fd'
[  262.813386][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  262.834666][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  262.915046][ T4200] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  262.924738][ T4200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.956834][ T6556] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  262.965366][ T6519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  262.979159][ T6556] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  263.030132][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  263.039993][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.049437][ T5940] usb 5-1: Product: syz
[  263.055353][ T5940] usb 5-1: Manufacturer: syz
[  263.059979][ T5940] usb 5-1: SerialNumber: syz
[  263.288354][ T4200] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15
[  263.482564][ T6535] usb 3-1: USB disconnect, device number 8
[  263.488650][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  263.488816][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  263.499155][ T6570] loop3: detected capacity change from 0 to 32768
[  263.510427][ T6535] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  263.589645][ T5398] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  263.592206][ T6570] XFS (loop3): Mounting V5 Filesystem
[  263.614923][ T5940] usb 5-1: cannot find UAC_HEADER
[  263.628658][ T6570] XFS (loop3): Ending clean mount
[  263.667867][ T5940] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  263.748015][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.775917][ T4187] XFS (loop3): Unmounting Filesystem
[  263.852619][ T5940] usb 5-1: USB disconnect, device number 7
[  263.916169][ T5398] usb 2-1: Using ep0 maxpacket: 8
[  264.048430][ T5398] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  264.063589][ T5398] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  264.079861][ T5398] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  264.090864][ T5398] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  264.107804][ T5398] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  264.121846][ T5398] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  264.166666][ T5398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.452280][ T6599] device veth0 entered promiscuous mode
[  264.471348][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'.
[  264.687166][ T5398] usb 2-1: usb_control_msg returned -32
[  264.693276][ T5398] usbtmc 2-1:16.0: can't read capabilities
[  264.924366][ T6535] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  264.957342][ T5398] usb 2-1: USB disconnect, device number 8
[  267.060288][ T6535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.097720][ T6535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.123634][ T6535] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  267.152350][ T6535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.186787][ T6535] usb 5-1: config 0 descriptor??
[  268.370070][ T6535] hid-led: probe of 0003:27B8:01ED.000B failed with error -71
[  268.401347][ T6535] usb 5-1: USB disconnect, device number 8
[  270.212831][ T6662] loop1: detected capacity change from 0 to 32768
[  270.227453][ T6666] loop3: detected capacity change from 0 to 32768
[  270.258015][ T6662] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.619 (6662)
[  270.353927][ T6666] JBD2: Ignoring recovery information on journal
[  270.367111][ T6662] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  270.434235][ T6666] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  270.471597][ T6662] BTRFS info (device loop1): setting nodatacow, compression disabled
[  270.501846][ T6662] BTRFS info (device loop1): force clearing of disk cache
[  270.509532][ T6662] BTRFS info (device loop1): enabling ssd optimizations
[  270.516942][ T6662] BTRFS info (device loop1): using spread ssd allocation scheme
[  270.524857][ T6662] BTRFS info (device loop1): turning off barriers
[  270.543297][ T6662] BTRFS info (device loop1): disabling free space tree
[  270.550623][ T6662] BTRFS info (device loop1): not using ssd optimizations
[  270.557810][ T6662] BTRFS info (device loop1): not using spread ssd allocation scheme
[  270.566556][ T6662] BTRFS info (device loop1): has skinny extents
[  270.599998][ T6666] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  270.633808][ T4279] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  270.659703][ T6666] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.670561][ T6666] OCFS2: File system is now read-only.
[  270.676147][ T6666] (syz.3.621,6666,1):ocfs2_search_chain:1761 ERROR: status = -30
[  270.684938][ T6666] (syz.3.621,6666,1):ocfs2_search_chain:1871 ERROR: status = -30
[  270.693378][ T6666] (syz.3.621,6666,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  270.714969][ T6666] (syz.3.621,6666,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  270.724097][ T6666] (syz.3.621,6666,1):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  270.733253][ T6666] (syz.3.621,6666,1):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  270.742392][ T6666] (syz.3.621,6666,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  270.755476][ T6666] (syz.3.621,6666,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  270.813724][ T6666] (syz.3.621,6666,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  270.838775][ T6666] (syz.3.621,6666,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  270.839232][ T6714] (syz.3.621,6714,1):ocfs2_group_add:491 ERROR: The disk is too old and small. Force to do offline resize.
[  270.857941][ T6666] (syz.3.621,6666,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  270.858223][ T6727] 9pnet: bogus RWRITE count (2 > 1)
[  270.871930][ T6666] (syz.3.621,6666,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  270.899752][ T6666] (syz.3.621,6666,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  270.912008][ T6666] (syz.3.621,6666,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  270.925399][ T6666] (syz.3.621,6666,0):ocfs2_lock_allocators:2682 ERROR: status = -30
[  270.933175][ T6662] BTRFS info (device loop1): clearing free space tree
[  270.934215][ T6666] (syz.3.621,6666,0):ocfs2_write_begin_nolock:1747 ERROR: status = -30
[  270.951846][ T6666] (syz.3.621,6666,0):ocfs2_write_begin:1910 ERROR: status = -30
[  270.962257][ T6662] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  270.978595][ T6662] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  270.999370][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  271.207937][ T4279] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  271.237761][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.257298][ T4279] usb 3-1: Product: syz
[  271.266276][ T4279] usb 3-1: Manufacturer: syz
[  271.279940][ T4279] usb 3-1: SerialNumber: syz
[  271.317275][ T4279] usb 3-1: config 0 descriptor??
[  272.063686][ T4279] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  272.074010][ T4279] usb 3-1: Firmware version (0.0) predates our first public release.
[  272.082428][ T4279] usb 3-1: Please update to version 0.2 or newer
[  272.289588][ T4279] usb 3-1: Firmware: build 00000000
[  272.295827][ T4279] usb 3-1: atusb_probe: initialization failed, error = -32
[  272.304398][ T4279] atusb: probe of 3-1:0.0 failed with error -32
[  273.360867][ T6771] kvm: pic: non byte write
[  273.441170][ T6769] loop1: detected capacity change from 0 to 4096
[  273.539332][ T6769] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  273.814084][ T6782] tipc: Started in network mode
[  273.840031][ T6782] tipc: Node identity ceeac6504329, cluster identity 4711
[  273.847454][ T6782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.940614][ T6787] device syzkaller0 entered promiscuous mode
[  273.993685][ T6781] tipc: Resetting bearer <eth:syzkaller0>
[  274.090411][ T6792] overlayfs: failed to clone upperpath
[  274.122091][ T6781] tipc: Disabling bearer <eth:syzkaller0>
[  274.232235][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  274.239850][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  274.292183][ T4228] usb 3-1: USB disconnect, device number 9
[  274.743150][ T6803] fuse: Bad value for 'fd'
[  274.815044][ T4279] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  275.205086][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.226850][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.259085][ T4279] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  275.299517][ T4279] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  275.334450][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.361346][ T6779] loop3: detected capacity change from 0 to 65536
[  275.373181][ T4279] usb 5-1: config 0 descriptor??
[  275.485481][ T6779] XFS (loop3): Mounting V5 Filesystem
[  275.654864][ T6779] XFS (loop3): Ending clean mount
[  275.760006][ T6805] loop1: detected capacity change from 0 to 32768
[  275.933035][ T6805] XFS (loop1): Mounting V5 Filesystem
[  275.933252][ T4279] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  276.004689][ T4279] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  276.173442][ T6805] XFS (loop1): Ending clean mount
[  276.198224][ T6805] XFS (loop1): Quotacheck needed: Please wait.
[  276.412585][ T6805] XFS (loop1): Quotacheck: Done.
[  276.440565][    C0] plantronics 0003:047F:FFFF.000C: hid_field_extract() called with n (132) > 32! (syz.3.650)
[  276.680027][ T4228] usb 5-1: USB disconnect, device number 9
[  277.941991][ T6854] loop4: detected capacity change from 0 to 512
[  277.967725][ T4187] XFS (loop3): Unmounting Filesystem
[  278.029252][   T26] audit: type=1804 audit(1780460541.063:79): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.662" name="/newroot/112/file0/bus" dev="loop1" ino=9290 res=1 errno=0
[  278.077030][ T6854] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.311093][ T4188] XFS (loop1): Unmounting Filesystem
[  281.310937][ T6904] input: syz1 as /devices/virtual/input/input17
[  282.169749][   T26] audit: type=1800 audit(1780460544.867:80): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.691" name="/" dev="fuse" ino=2 res=0 errno=0
[  282.378910][ T6927] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  282.711592][ T6529] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  283.047134][ T6529] usb 3-1: Using ep0 maxpacket: 16
[  283.188399][ T6529] usb 3-1: config 8 has an invalid interface number: 2 but max is 0
[  283.230117][ T6529] usb 3-1: config 8 has no interface number 0
[  283.341418][ T6529] usb 3-1: config 8 interface 2 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  283.638667][ T6529] usb 3-1: New USB device found, idVendor=1cd7, idProduct=0217, bcdDevice=44.7e
[  283.670322][ T6529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.703964][ T6529] usb 3-1: Product: syz
[  283.721070][ T6529] usb 3-1: Manufacturer: syz
[  283.767423][ T6529] usb 3-1: SerialNumber: syz
[  284.922429][ T6529] ftdi_sio 3-1:8.2: FTDI USB Serial Device converter detected
[  284.931322][ T6529] usb 3-1: Detected FT-X
[  285.007799][ T6529] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  285.205246][ T6529] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  285.238857][ T6529] ftdi_sio 3-1:8.2: GPIO initialisation failed: -71
[  285.690146][ T4279] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  285.826218][ T6529] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  285.841470][ T6529] usb 3-1: USB disconnect, device number 10
[  285.852388][ T6529] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  285.862578][ T6529] ftdi_sio 3-1:8.2: device disconnected
[  286.021563][ T4279] usb 5-1: Using ep0 maxpacket: 32
[  286.156169][ T4279] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  286.165857][ T4279] usb 5-1: config 0 has no interface number 0
[  286.179150][ T4279] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  286.546013][ T4279] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  286.786654][ T6981] loop1: detected capacity change from 0 to 2048
[  288.170322][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.702392][ T6981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.907910][ T4279] usb 5-1: Product: syz
[  288.912231][ T4279] usb 5-1: Manufacturer: syz
[  288.916864][ T4279] usb 5-1: SerialNumber: syz
[  288.950260][ T4279] usb 5-1: config 0 descriptor??
[  289.053359][ T4279] usb 5-1: can't set config #0, error -71
[  289.060407][ T4279] usb 5-1: USB disconnect, device number 10
[  289.297178][ T7003] loop4: detected capacity change from 0 to 256
[  289.557225][ T7003] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  289.637744][ T7003] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  289.725790][ T7003] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  290.003155][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'.
[  290.031919][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.722'.
[  293.229776][ T7067] fuse: Bad value for 'fd'
[  293.306549][ T7070] binder: 7069:7070 ioctl c0306201 200000000080 returned -14
[  293.340573][ T7070] binder: 7069:7070 ioctl c0306201 2000000003c0 returned -14
[  293.380728][ T4279] Bluetooth: hci4: command 0x0407 tx timeout
[  293.698621][ T7081] loop3: detected capacity change from 0 to 4096
[  293.802727][ T7087] device syzkaller0 entered promiscuous mode
[  293.852034][ T7081] EXT4-fs (loop3): Test dummy encryption mode enabled
[  293.901674][ T7081] EXT4-fs (loop3): Ignoring removed bh option
[  293.921979][ T7081] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  294.173372][ T7081] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,nombcache,test_dummy_encryption,bsdgroups,bh,delalloc,jqfmt=vfsv0,. Quota mode: writeback.
[  295.644723][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  295.937237][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  296.121930][ T1108] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.231248][ T1108] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.443871][ T1108] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  296.508829][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.088537][ T1108] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  297.316297][ T7102] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  297.328106][ T7102] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  297.336550][ T7102] CPU: 0 PID: 7102 Comm: syz.1.752 Not tainted syzkaller #0
[  297.343864][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  297.354041][ T7102] RIP: 0010:mcp_smbus_xfer+0x59/0x1070
[  297.359644][ T7102] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 76 55 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 58 55 55 fa 4c 8b 3b 4d 8d a7 78
[  297.379276][ T7102] RSP: 0018:ffffc9000342f9a0 EFLAGS: 00010246
[  297.385361][ T7102] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  297.393475][ T7102] RDX: ffffc90004a59000 RSI: 0000000000002141 RDI: 0000000000002142
[  297.401466][ T7102] RBP: 00000000000000f4 R08: 00000000000000f4 R09: 0000000000000005
[  297.409598][ T7102] R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000
[  297.417606][ T7102] R13: 0000000000000001 R14: 0000000000000005 R15: dffffc0000000000
[  297.425764][ T7102] FS:  00007f01c9fe46c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  297.434844][ T7102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.441461][ T7102] CR2: 000000110c383d3e CR3: 0000000052a17000 CR4: 00000000003506f0
[  297.449453][ T7102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  297.457768][ T7102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  297.465779][ T7102] Call Trace:
[  297.469109][ T7102]  <TASK>
[  297.472069][ T7102]  __i2c_smbus_xfer+0x7b4/0x1dc0
[  297.477054][ T7102]  ? mcp_i2c_xfer+0x420/0x420
[  297.481785][ T7102]  ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0
[  297.488203][ T7102]  ? rt_mutex_lock_nested+0x1a4/0x210
[  297.493625][ T7102]  ? i2c_smbus_xfer+0x120/0x3b0
[  297.498516][ T7102]  ? rwsem_down_read_slowpath+0x9d0/0x9d0
[  297.504271][ T7102]  ? preempt_schedule_irq+0xe6/0x160
[  297.509685][ T7102]  ? lock_chain_count+0x20/0x20
[  297.515034][ T7102]  i2c_smbus_xfer+0x272/0x3b0
[  297.519989][ T7102]  ? i2c_smbus_read_byte+0x1d0/0x1d0
[  297.525313][ T7102]  i2cdev_ioctl_smbus+0x432/0x680
[  297.530548][ T7102]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  297.536660][ T7102]  ? i2cdev_ioctl_rdwr+0x6d0/0x6d0
[  297.541972][ T7102]  ? __might_fault+0xb3/0x110
[  297.546720][ T7102]  ? _copy_from_user+0x111/0x170
[  297.551776][ T7102]  i2cdev_ioctl+0x583/0x7b0
[  297.556534][ T7102]  ? i2cdev_write+0x120/0x120
[  297.561341][ T7102]  ? bpf_lsm_file_ioctl+0x5/0x10
[  297.566318][ T7102]  ? __sanitizer_cov_trace_pc+0x55/0x60
[  297.571893][ T7102]  ? bpf_lsm_file_ioctl+0x5/0x10
[  297.576857][ T7102]  ? security_file_ioctl+0x7c/0xa0
[  297.582100][ T7102]  ? i2cdev_write+0x120/0x120
[  297.586806][ T7102]  __se_sys_ioctl+0xfa/0x170
[  297.591422][ T7102]  do_syscall_64+0x4c/0xa0
[  297.595863][ T7102]  ? clear_bhb_loop+0x30/0x80
[  297.600677][ T7102]  ? clear_bhb_loop+0x30/0x80
[  297.605399][ T7102]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  297.611448][ T7102] RIP: 0033:0x7f01cbd8ae59
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  297.615888][ T7102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.615956][ T7133] chnl_net:caif_netlink_parms(): no params data found
[  297.635595][ T7102] RSP: 002b:00007f01c9fe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  297.635620][ T7102] RAX: ffffffffffffffda RBX: 00007f01cc003fa0 RCX: 00007f01cbd8ae59
[  297.635635][ T7102] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004
[  297.635647][ T7102] RBP: 00007f01cbe20d6f R08: 0000000000000000 R09: 0000000000000000
[  297.635658][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  297.635670][ T7102] R13: 00007f01cc004038 R14: 00007f01cc003fa0 R15: 00007ffd55accd88
[  297.635691][ T7102]  </TASK>
[  297.635697][ T7102] Modules linked in:
[  297.707548][ T7102] ---[ end trace ce74bf4e587ebc5f ]---
[  297.821287][ T7102] RIP: 0010:mcp_smbus_xfer+0x59/0x1070
[  297.827380][ T7102] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 76 55 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 58 55 55 fa 4c 8b 3b 4d 8d a7 78
[  297.848569][ T7102] RSP: 0018:ffffc9000342f9a0 EFLAGS: 00010246
[  297.873803][ T7102] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000
[  297.895304][ T7102] RDX: ffffc90004a59000 RSI: 0000000000002141 RDI: 0000000000002142
[  297.921365][ T7102] RBP: 00000000000000f4 R08: 00000000000000f4 R09: 0000000000000005
[  297.929505][ T7102] R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000
[  297.948005][ T7102] R13: 0000000000000001 R14: 0000000000000005 R15: dffffc0000000000
[  297.956356][ T7102] FS:  00007f01c9fe46c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  297.965687][ T7102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  297.972399][ T7102] CR2: 00007f6af0abdff8 CR3: 0000000052a17000 CR4: 00000000003506e0
[  297.982343][ T7102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  297.990924][ T7102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  298.000795][ T7102] Kernel panic - not syncing: Fatal exception
[  298.007266][ T7102] Kernel Offset: disabled
[  298.011600][ T7102] Rebooting in 86400 seconds..