last executing test programs:

54m13.437098717s ago: executing program 32 (id=58):
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000180001000000000000000000020000000000000900000000060015000500000028001680240001"], 0x4c}}, 0x0)

53m18.680188663s ago: executing program 33 (id=652):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}, 0x2000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b)

53m12.327362329s ago: executing program 34 (id=682):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x21, 0x7, 0x18}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x0, 0x77}, {@remote, 0x4e20, 0x1, 0x6, 0x1}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

53m7.174329751s ago: executing program 35 (id=738):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48)

53m4.047946953s ago: executing program 36 (id=755):
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0)

53m1.634144167s ago: executing program 37 (id=760):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0)

52m50.777489808s ago: executing program 38 (id=824):
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

52m46.953896038s ago: executing program 39 (id=857):
r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1)
dup(r0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '})

52m36.781063267s ago: executing program 40 (id=983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1000004}}}, 0x24}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000003000)=ANY=[@ANYBLOB="ffffffffffffaabbccddee0388ca5bf0004c47ff123400000000010000010000126700000001aabbccddee0300000000000000000000000000000000000000000000000000000000000033333333333333333333333333333333"], 0x0)

52m17.453812605s ago: executing program 41 (id=1201):
syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0))

52m10.253459955s ago: executing program 42 (id=1246):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="886c75", 0x3}], 0x1}, 0x45)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4)
sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='c', 0x1}], 0x1}, 0x0)
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)

51m40.873784996s ago: executing program 0 (id=1446):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x14)

51m40.745825717s ago: executing program 0 (id=1448):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x48080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)

51m39.924829483s ago: executing program 0 (id=1451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x3}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000002740)=""/72, 0x48}], 0x5}, 0x900000}], 0x7, 0x0, 0x0)

51m38.976318997s ago: executing program 0 (id=1459):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2814800, &(0x7f0000000100)=ANY=[], 0x3, 0x6c2, &(0x7f0000001600)="$eJzs3ctvHVcdB/DvXD9ip23ipkkbUKVajQSIiMSOlYLZEBBCRqoQKgvWVuI0Vm7S4rjIrRB1eIpdF/0DuskGsUJixSZSy6Ib2HWHvKyExKYbzGrQ3Dv3kevXbR6+Sfl8ornnzDlzzvzmNzP3FVk3wP+tpbMZv5siS2df3ajWt+4sNLfuLNzo1JMcSbKZjCdpJCn+U5blh8mlpOhOUwyUO7y/uvjaJ59tfdpeG6+X1vaN/cYNqLfbHGje7LTNJhmrywdwz3yXH3i+ohv5pSRn6hJGbiJJWU6k7PrZx093e6rO4+1yerfRU4cXKPDIFO3XzerFuNHfPpMcrW/06n1A55W3MZIgh3BkyO0G30EAAADAk2aYz8DHt7OdjeLYIYQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwibvd//L+ql0anPpuj8/v9k3Za6/nh56fNtfvdRxQEAAAAAAAAAh+il7WxnI8c662XR+j//l1srJ1uPT+Wt3MpK1nIuG1nOetazlvkkM30TTW4sr6+vzQ8x8sKuIy8cEOiRupx+OMcNAAAAAAAAAF8wv8pS7///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcVAkY+0ixe2+5pk0xpNMJZmsGjaTf3TqT7K7ow4AAAAADsHx7WxnI8c662WRk0meb30HMJW3cjPrWc16mlnJldb3Au1P/Y2tOwvNrTsLN6pl57zf/fc9q1MHhNGaMe3vHnbf8+nWFtO5mtVWy7lczhtp5koarZGV03U8nVkH4rpdxVR8pzZkgq7UZXXk79XlDu8OOdn+Br9Mmd7/C5aZVkYmuhmZq2OrsvFs58zsfoYGzs5BBvc0n0Y3sJMDe+oL+OM/3GfOj9ZldTy/2yvnIzGYiQt9V9/z++c8+epf/vTTubr++BzScMbqsmw9Tu/MxEKjl4kXhsnEtebN69eu3jr7pGVih7lWJk5115fyg/wkZzObH2ctq/l5lrOelczm+63acn3yi77be49MXWoXE7vtdqmXuE7eJ+srdKxu/Twxvdwaeyyr+VHeyJWs5JXWvwuZzzdzMRez2Hetn9r/DLfu+sY9d33vFaB8Ztc0nvlaXame9n5fl7vas+NRqfL6bF9e+59zZ1p9/S29LJ04OEtVWu55bvzr/qGMf7muVPv4dd+5H73BTMz3ZeK5/TLRuZBvNW9eX7u2/OZwuzvxXt/w3z5WT6nV9XKiOlnpnKDe1VH1PdfpG8hX1Xey29fY0Xeq29e+Uzf3vFMn6/dwO2e60Op7Yde+hVbf6b6+3d5vHfxuDoARO/r1o5PT/5r++/QH07+Zvjb96tT3jnzryIuTmfho4tvjc2NfabxY/Dkf5Je9z/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD9u/X2O9eXm82VtYFKWZbv7tHVLI8ne3TdX6WxZxhVZfyAUHdUMvvPp6oBnZYy3a7Oz5k9xOAPqnzp6WT4UfUv8KTdMv5w8zzCyn/Lsqxbij22+ePfdibqmaFSNzn8tXFAZaozYVKWZflYpK6ujB/yTkf0hAQcmvPrN948f+vtd76xemP59ZXXV24uXry4OLd48ZWF81dXmytz7cdRRwk8Cr0X/VFHAgAAAAAAAAAAAAxrqL8H+CjJA/w5waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyLZ3N+N0UmZ87N1etb91ZaFZLp97bcjxJI0nxi6T4MLmU9pKZvumKvfbz/uria598tvVpb65qyQ8vHzBuOJv1ktkkY+3y9sOa73Jd7qvY7xCK7hFWCTvTSRyM2v8CAAD//9NF+gI=")
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000001880)={[{@discard}, {@namecase}, {@utf8}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_remount}, {@keep_last_dots}, {@keep_last_dots}, {@discard}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000000340)="$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")
chmod(&(0x7f0000000080)='./file0\x00', 0x1db)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x8)
setxattr$incfs_size(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1)
pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = getpid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@noload}, {}, {@data_err_ignore}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@auto_da_alloc}, {@usrquota}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
r1 = open(&(0x7f0000000280)='./file1\x00', 0x54927e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000)
fallocate(r1, 0x0, 0x0, 0x8800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x2000, 0x20)
r3 = syz_pidfd_open(r0, 0x0)
setns(r3, 0x24020000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

51m38.143812862s ago: executing program 0 (id=1466):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x804}, 0x8)

51m37.909784572s ago: executing program 0 (id=1469):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x40)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

51m37.556143267s ago: executing program 43 (id=1469):
r0 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2, 0x1ff}, 0x1c, 0x0}}], 0x1, 0x40)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

49m32.82793091s ago: executing program 4 (id=2799):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0)
r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

49m31.512372745s ago: executing program 4 (id=2814):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x104)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = epoll_create1(0x80000)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})

49m31.298293511s ago: executing program 4 (id=2817):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x3a)

49m31.260487794s ago: executing program 4 (id=2819):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80cc06, &(0x7f0000000040)={[{@errors_continue}, {@umask={'umask', 0x3d, 0xe845}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@time_offset={'time_offset', 0x3d, 0xb}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0)

49m31.128459708s ago: executing program 4 (id=2822):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000080)={0x18, r1, 0x8})

49m30.927108204s ago: executing program 4 (id=2826):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=""/121, &(0x7f00000000c0), &(0x7f0000000180), 0x1, r0}, 0x38)

49m30.740627515s ago: executing program 44 (id=2826):
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000001800470001"], 0x17)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=""/121, &(0x7f00000000c0), &(0x7f0000000180), 0x1, r0}, 0x38)

48m13.887455849s ago: executing program 2 (id=3824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

48m13.437956629s ago: executing program 2 (id=3828):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0xea)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4", 0x34}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x1e1)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074")
write(0xffffffffffffffff, &(0x7f0000000138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00mirror\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00core 2 1024 nosync ', 0x3b)
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="040000000000000000000000a00100003801000001")

48m13.331282165s ago: executing program 2 (id=3830):
symlink(&(0x7f00000033c0)='./file0/file0\x00', &(0x7f0000003400)='./file0\x00')
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)

48m12.053197902s ago: executing program 2 (id=3833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0)
r0 = syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x2, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

48m11.991232112s ago: executing program 2 (id=3834):
r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

48m10.827817972s ago: executing program 2 (id=3837):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), 0x4)

48m10.620452764s ago: executing program 45 (id=3837):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), 0x4)

47m52.256126236s ago: executing program 7 (id=3977):
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)

47m52.255860068s ago: executing program 7 (id=3978):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4)
sendmmsg$inet(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}], 0x4, 0x40488c1)

47m52.214118966s ago: executing program 7 (id=3979):
io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x4)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvfrom$inet_nvme(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0)

47m51.325722366s ago: executing program 7 (id=3985):
mkdir(&(0x7f0000000400)='./file0\x00', 0x114)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20)
umount2(&(0x7f0000000180)='./file0\x00', 0xa)

47m51.325417079s ago: executing program 7 (id=3986):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x4b, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800)

47m50.414827473s ago: executing program 7 (id=3989):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x7)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)

47m50.191021712s ago: executing program 46 (id=3989):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x7)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0)

46m16.673051969s ago: executing program 5 (id=4998):
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="1d1a7b", 0x3}], 0x1}, 0x49cf75490397e68f)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}})

46m16.596209365s ago: executing program 5 (id=5000):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x4, {[@global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

46m16.046450773s ago: executing program 5 (id=5006):
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000001340)={0x1c, 0x0, 0x0, 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x2})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

46m14.816715872s ago: executing program 5 (id=5014):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@discard}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x563, &(0x7f0000001240)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

46m14.502627042s ago: executing program 5 (id=5018):
symlink(&(0x7f00000033c0)='./file0/file0\x00', &(0x7f0000003400)='./file0\x00')
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
execve(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)={[&(0x7f00000006c0)='&.\x00']}, &(0x7f0000000800))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f000072d000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x7, 0x1)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x400, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ix\x00\x00\x00\b\x00')
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38)

46m14.215551104s ago: executing program 5 (id=5022):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x4}, 0x94)

46m14.040704568s ago: executing program 47 (id=5022):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0, 0x4}, 0x94)

13m41.713019812s ago: executing program 6 (id=26175):
syz_open_dev$hiddev(&(0x7f0000000080), 0x10001, 0x440920)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
listen(r0, 0x5)
accept(r0, 0x0, 0x0)

13m39.197836669s ago: executing program 6 (id=26209):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

13m39.136198392s ago: executing program 6 (id=26211):
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002700)={{{@in=@empty, @in6=@remote, 0x4e22, 0xfffb, 0x4e21, 0x1, 0x2, 0x20, 0x0, 0x62}, {0x1, 0x7, 0x0, 0x5, 0x7fff, 0x7, 0xfff, 0x70}, {0x8, 0x3, 0x8, 0x2cc}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d5, 0x32}, 0x2, @in=@loopback, 0x0, 0x4, 0x0, 0xf8, 0x6, 0x6, 0xaec3}}, 0xe8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r0=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

13m39.061664867s ago: executing program 6 (id=26213):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES32], 0x11, 0x5e7, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
fstat(r0, &(0x7f0000002e00))

13m38.984781034s ago: executing program 6 (id=26215):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2000}, 0x4)

13m37.821343697s ago: executing program 6 (id=26221):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x7)

13m37.484289003s ago: executing program 48 (id=26221):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001080), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x7)

1m59.594379698s ago: executing program 9 (id=32992):
creat(&(0x7f0000000180)='./file0\x00', 0x1c4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
creat(&(0x7f0000000180)='./file0\x00', 0x18b)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
accept$inet(r2, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x5b2, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000000, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x36e1, 0x8000, 0x1, 0x3a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6a8, 0x400, 0x0, 0x26d}}], 0x1, 0x0, 0x0)

1m58.650012192s ago: executing program 9 (id=33012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m58.557375796s ago: executing program 9 (id=33014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000007b00)={@random="4b2a97745d78", @random="81a53bd1ce72", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x28, 0x1c, 0x68, 0x0, 0x9, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @empty}, {0x16, 0x8, 0x0, @loopback}}}}}, 0x0)

1m58.481706371s ago: executing program 9 (id=33016):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$eJzs3L9vG1UcAPDvOXFCaCGhlF8tPwIFUSFImrZABwZAIDEUgQQDjFYSqtK0oCZItIpEylAmVCGxI0b+BSZYEGJCYgVmVFGhLG2ZjM53l9iu7eaHY5f685GcfN/d2e997+45z/dyDmBgTaY/kojdEfF7RIxnxcYNJrNf11aXZ6+vLs8mUa2+809S2+7q6vJssWnxvF31hUhif4t6F8+dP1VZWJg/m5enl05/PL147vxzJ09XTsyfmD9z+Nixo0dmXnzh8PPbyG4sIva8lcWlfNkb73/15vEvG/JvyqNLJjutfKpa7XJ1/XVXXTzcx3awOUP58SrX+v94DNUdvfF4/fO1wmd9aiCwY6rVanVX+9UrVeA2lkRjWZeHQVH8oS8+/+a/R+sHAS/v6Aikv668kn0ASvO+lj+yNcNrVwzKTZ9vu2kyIt5b+feb9BEdr0MkO9QCAGDQ/JCOf55NRzvLs+nYY338UYr767a7O58bmoiIeyJiT0TcG2dib0TcF1Hb9oGIeHCT9ddNktSGmVdXR5rGP6XLW05uA9Lx30v53Fbj+K8Y/cXEUK10LitEOfng5ML8oXyfHIzyaFqe6VDHj6/9dqnduvrxX/pI6y/Ggnk7Lg+PNj5nrrJU2XrGja5ciNg33Cr/ZG0mIB15PhQR+1q9QOnmdZx85ruH2627ef4ddGGiqfptxNPZ8V+JpvwLSef5yek7YmH+0HRxVtzol18vvt2u/m3l3wXp8b+z5fm/lv9EUj9fu7j5Oi7+8UXbudXJch5s4vxfqSxVRpJ3a/FIvuzTytLS2ZmIkeR41uj65YfXn1uUi+3T/A8eaN3/98T6ntgfEelJ/EhEPBoRj+XH7vGIeCIiDnTI/+dXn/ywedlYkf8tcPznNnX814ORaFxSarFNGgyd+un7hkon1sM8/+ud3/+O1qKD+ZKNvP/d2IrWwXb3HwAAAPwflCJidySlqbW4VJqayv6Hf2829Z365Mxcdo/ARJRLxZWu8brroTP5x/qsfCEisn8tKNYfiVLtuvHXQ2O18tTsRwtzfc0c2NWm/6f+Gup364Ad54YtGFz6Pwyujv2/3Lt2AL13Q//v2OdHd7QtQG+1+Ps/1o92AL3Xavzv+35gMDT1f9N+MEBc/4fBpf/D4NrAPfzA7WdxLG5+k/xaUI6I5lXFK23g6VsJxiM208LtB8U3I273daLcuzb3I4hSd17nz3x/t1g10v7U+vtSxC2wE1oHyc51h94F/XtPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kb/AgAA//8GT9U6")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1m57.668121402s ago: executing program 9 (id=33021):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setns(0xc9, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900), 0x0)
socket$alg(0x26, 0x5, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m56.707677721s ago: executing program 9 (id=33024):
r0 = socket$netlink(0x10, 0x3, 0xb)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000", 0x12}], 0x1)

1m56.378375492s ago: executing program 49 (id=33024):
r0 = socket$netlink(0x10, 0x3, 0xb)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000", 0x12}], 0x1)

3.782900491s ago: executing program 3 (id=34197):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)

3.706528315s ago: executing program 3 (id=34199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x45, 0x1, 0x80002, 0x25dfdbfd, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094)

3.632592599s ago: executing program 3 (id=34201):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x1f26bb96f9fc54ab, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c004}, 0x4000)

3.546576799s ago: executing program 3 (id=34203):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)

3.472816753s ago: executing program 3 (id=34205):
r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffff7}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xe, 0x1a, 'syzkaller\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9c99}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x30002041}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x1, 0x0, 'client0\x00', 0x4000000c, "0dc10165c835f68d", "e440ace1dbb8539e525bbb21f8cd613a397a23df49fb87df49793f264cebbe36", 0x401, 0xffd0})
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x10, 0x40, 0x64, 0x0, 0xff, 0x6, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x9, 0x4, 0x4, 0x4e21, 0x4e21, 0x1, 0x1}}}}}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x1, 0x2, 0x6, 0xdc}, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0x2000003, 0x2f4, 0x5}, 0x41)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000480))
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0xd}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x6, 0x2, 0x20, 0xfc}, 0xb, &(0x7f0000000140)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0x8b, &(0x7f0000000540)=@string={0x8b, 0x3, "03eba8c34f871f95dd023a0787d7e6a5b570c70c4263e7c5a5a5fa9ba83657ae7ca7cc09a8f018131d3f49cb368c3553709e5e9a96ffd28828c5746a9716d9fdb8a84be25313b69f1653fd9098ab49ad0661a5676cffb4a37e849242c27348a46cbc17e4a3d0331b43521414401d0014dc99621fa23a3d7f5c5de73f5faa376bd59fa8dafebe056549"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x401}}]})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x50)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0)
read$FUSE(r3, 0x0, 0x0)
fcntl$setflags(r2, 0x2, 0x0)
ioperm(0x0, 0x7c9, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000280)=@framed={{}, [@jmp={0x5, 0x1, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$kcm(0x10, 0x7, 0x4)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1000000000000053}, 0xff0f000020000080)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3)

2.691566924s ago: executing program 8 (id=34219):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})

2.573813936s ago: executing program 8 (id=34221):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r0, 0x6)
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')

2.440735706s ago: executing program 8 (id=34224):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "b575c2c1c3a227b7", "799298c9493f4cbdfb5868d41337f3a2", '\b\x00', 'H\x00'}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)

1.804564033s ago: executing program 8 (id=34227):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30)
socket$inet(0x2, 0x2, 0x0)

1.740387317s ago: executing program 8 (id=34228):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

841.685464ms ago: executing program 8 (id=34229):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = eventfd2(0x2, 0x1)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="fdffffffffffffff", 0x8}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

743.719749ms ago: executing program 1 (id=34230):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x20040040)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/file0\x00', 0x20)

629.02533ms ago: executing program 1 (id=34231):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50)
socket(0x10, 0x803, 0x0)
mkdir(&(0x7f0000000140)='./sys\x00', 0x14a)
mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0)
write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7)

552.404968ms ago: executing program 1 (id=34232):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x1, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)

458.388329ms ago: executing program 1 (id=34233):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x10840, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95,uni_xlate=1,shortname=lower,shortname=winnt,shortname=win95,uni_xlate=0,rodir,nonumtail=0,shortname=mixed,\x00rrors=remount-ro,\x00'], 0x1, 0x271, &(0x7f0000000b80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000001080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xce04, 0x0, 0x1, 0x0, &(0x7f00000007c0))

373.037708ms ago: executing program 1 (id=34234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
close(r0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000080), 0xff, 0x249, &(0x7f0000000880)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040))
write(0xffffffffffffffff, &(0x7f0000000500), 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010002000000fedbdf2502000000000000000800"], 0x24}}, 0x0)

287.276744ms ago: executing program 1 (id=34235):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@init_itable}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@quota}, {@journal_path={'journal_path', 0x3d, './file1'}}]}, 0x4, 0x500, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setns(0xc9, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0)

0s ago: executing program 3 (id=34236):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="68000000140001002bbd7000fbdbdf2500000000000000000000000000000000ac14141400000000000000000000000000000080000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000020000000c00080008000800010000e90c0015"], 0x68}}, 0x4004040)

kernel console output (not intermixed with test programs):

n async discard
[ 2992.716451][T15248] BTRFS info (device loop9): enabling free space tree
[ 2992.852085][ T4051] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2993.391342][ T2680] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 2993.450204][T15305] netlink: 'syz.8.30915': attribute type 1 has an invalid length.
[ 2993.835579][T15315] xt_hashlimit: size too large, truncated to 1048576
[ 2994.048739][T15307] loop9: detected capacity change from 0 to 32768
[ 2994.058605][T15307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.30916 (15307)
[ 2994.077901][T15307] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2994.077929][T15307] BTRFS info (device loop9): using crc32c checksum algorithm
[ 2994.262488][T15307] BTRFS info (device loop9): enabling ssd optimizations
[ 2994.262504][T15307] BTRFS info (device loop9): turning on flush-on-commit
[ 2994.262511][T15307] BTRFS info (device loop9): enabling free space tree
[ 2994.262517][T15307] BTRFS info (device loop9): enabling auto defrag
[ 2994.262525][T15307] BTRFS info (device loop9): use lzo compression, level 1
[ 2994.262533][T15307] BTRFS info (device loop9): max_inline set to 0
[ 2995.213347][ T4051] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2995.597828][T15361] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[ 2995.597875][T15361] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 2995.597882][T15361] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[ 2996.315454][T15378] loop9: detected capacity change from 0 to 128
[ 2996.325483][T15378] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[ 2997.896943][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.9.30965'.
[ 2997.896964][T15435] netlink: 24 bytes leftover after parsing attributes in process `syz.9.30965'.
[ 2997.974890][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30966'.
[ 2998.418841][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30976'.
[ 2998.431393][T15458] vlan3: entered promiscuous mode
[ 2998.462296][T15458] netlink: 'syz.1.30976': attribute type 10 has an invalid length.
[ 2998.475388][T15458] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2998.516606][T15458] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[ 2998.516685][T15458] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[ 2998.527801][T15458] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 2999.245470][   T34] audit: type=1326 audit(1791037915.242:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15471 comm="syz.9.30983" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43839e159 code=0x0
[ 2999.942872][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.8.30993'.
[ 3000.462263][T10714] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9
[ 3000.462282][T10714] Bluetooth: hci1: unexpected event for opcode 0x1407
[ 3000.713617][T24502] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 3000.873376][T24502] usb 10-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00
[ 3000.879037][T24502] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3000.879058][T24502] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[ 3000.879083][T24502] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3001.129495][T24740] usb 10-1: USB disconnect, device number 41
[ 3002.052067][T15539] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 3004.538257][T10714] Bluetooth: unknown link type 162
[ 3004.538287][T10714] Bluetooth: hci1: connection err: -111
[ 3004.964780][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31041'.
[ 3005.339196][ T5845] IPVS: starting estimator thread 0...
[ 3005.992465][T15621] IPVS: using max 90 ests per chain, 216000 per kthread
[ 3007.413473][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31060'.
[ 3007.420946][T15654] netlink: 'syz.1.31060': attribute type 10 has an invalid length.
[ 3007.656101][T15663] xt_l2tp: v2 tid > 0xffff: 262144
[ 3008.350159][T15687] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[ 3009.075226][T15709] netlink: 'syz.9.31087': attribute type 23 has an invalid length.
[ 3010.845986][T24740] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 3011.007300][T24740] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 3011.008182][T24740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 3011.008196][T24740] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3011.008213][T24740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3011.009426][T24740] usb 10-1: config 0 descriptor??
[ 3011.469440][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.469466][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471776][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471796][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471810][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471850][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471867][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471882][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471896][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.471910][T24740] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[ 3011.516422][T24740] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0
[ 3013.153974][T24740] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device
[ 3013.154017][T24740] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse
[ 3013.165169][T24740] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -71
[ 3013.243467][T24740] usb 10-1: USB disconnect, device number 42
[ 3013.579712][T15776] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[ 3013.579819][T15776] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 3013.579827][T15776] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[ 3014.052304][T15792] loop9: detected capacity change from 0 to 512
[ 3014.061970][T15792] EXT4-fs (loop9): external journal device major/minor numbers have changed
[ 3015.130877][T15792] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 3015.131152][T15792] block device autoloading is deprecated and will be removed.
[ 3015.313276][T15792] EXT4-fs (loop9): couldn't read superblock of external journal
[ 3016.875326][T15850] tipc: Started in network mode
[ 3016.875341][T15850] tipc: Node identity ac14140f, cluster identity 4711
[ 3016.875461][T15850] tipc: New replicast peer: 255.255.255.255
[ 3016.875889][T15850] tipc: Enabled bearer <udp:syz2>, priority 4
[ 3016.876958][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.9.31150'.
[ 3017.307945][T15864] 9p: Bad value for 'wfdno'
[ 3017.807092][T15879] netlink: 'syz.9.31164': attribute type 1 has an invalid length.
[ 3017.847962][T15879] 8021q: adding VLAN 0 to HW filter on device bond5
[ 3017.985258][T15879] bond5: (slave geneve3): making interface the new active one
[ 3018.025487][T15879] bond5: (slave geneve3): Enslaving as an active interface with an up link
[ 3018.168507][T24502] tipc: Node number set to 2886997007
[ 3018.312844][T15888] loop9: detected capacity change from 0 to 512
[ 3018.326728][T15888] EXT4-fs (loop9): external journal device major/minor numbers have changed
[ 3018.326956][T15888] EXT4-fs (loop9): couldn't read superblock of external journal
[ 3019.491623][T15927] netlink: 16 bytes leftover after parsing attributes in process `syz.8.31186'.
[ 3019.491637][T15927] netlink: 16 bytes leftover after parsing attributes in process `syz.8.31186'.
[ 3020.394343][T10714] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9
[ 3020.394362][T10714] Bluetooth: hci1: unexpected event for opcode 0x1407
[ 3021.154081][T15974] LUN: removable file: (no medium)
[ 3024.246831][T16044] 9p: Bad value for 'rfdno'
[ 3024.404830][T16049] trusted_key: encrypted_key: keyword 'nea' not recognized
[ 3026.044585][T16078] netlink: 'syz.1.31247': attribute type 1 has an invalid length.
[ 3026.332389][T16097] trusted_key: encrypted_key: insufficient parameters specified
[ 3026.473376][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.9.31257'.
[ 3026.545515][ T5843] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3026.567788][T16105] 9p: Bad value for 'rfdno'
[ 3026.825103][T16115] netlink: 'syz.8.31264': attribute type 1 has an invalid length.
[ 3026.863380][T16115] 8021q: adding VLAN 0 to HW filter on device bond30
[ 3027.783202][T16126] 9p: Bad value for 'rfdno'
[ 3027.875746][T12782] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 3028.037070][T12782] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[ 3028.038010][T12782] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[ 3028.038025][T12782] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3028.038054][T12782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3028.040738][T12782] usb 10-1: config 0 descriptor??
[ 3028.528570][T12782] usbhid 10-1:0.0: can't add hid device: -71
[ 3028.528681][T12782] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 3028.546385][T12782] usb 10-1: USB disconnect, device number 43
[ 3030.089932][T12782] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 3030.247788][T12782] usb 10-1: Using ep0 maxpacket: 16
[ 3030.253535][T12782] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 3030.253561][T12782] usb 10-1: New USB device found, idVendor=0e8d, idProduct=7102, bcdDevice=93.12
[ 3030.254487][T12782] usb 10-1: config 7 has an invalid interface number: 201 but max is 0
[ 3030.254504][T12782] usb 10-1: config 7 has no interface number 0
[ 3030.257155][T12782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.257173][T12782] usb 10-1: Product: syz
[ 3030.257183][T12782] usb 10-1: Manufacturer: syz
[ 3030.257192][T12782] usb 10-1: SerialNumber: syz
[ 3030.524338][T12782] option 10-1:7.201: GSM modem (1-port) converter detected
[ 3030.535057][T12782] usb 10-1: USB disconnect, device number 44
[ 3030.541078][T12782] option 10-1:7.201: device disconnected
[ 3030.611883][T16195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.31300'.
[ 3031.990266][T16243] loop9: detected capacity change from 0 to 8192
[ 3032.371327][T16261] loop9: detected capacity change from 0 to 1024
[ 3034.206149][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.9.31341'.
[ 3034.206235][T16284] vlan0: entered promiscuous mode
[ 3034.206245][T16284] bond5: entered promiscuous mode
[ 3034.206251][T16284] geneve3: entered promiscuous mode
[ 3034.598092][T12782] usb 10-1: new full-speed USB device number 45 using dummy_hcd
[ 3035.100611][T16306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31350'.
[ 3035.599261][T12782] usb 10-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[ 3035.606636][T12782] usb 10-1: config 8 has an invalid interface number: 188 but max is 0
[ 3035.606648][T12782] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 3035.606656][T12782] usb 10-1: config 8 has no interface number 0
[ 3035.606673][T12782] usb 10-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[ 3035.606683][T12782] usb 10-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3035.609226][T12782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3035.609238][T12782] usb 10-1: Product: syz
[ 3035.609244][T12782] usb 10-1: Manufacturer: syz
[ 3035.609250][T12782] usb 10-1: SerialNumber: syz
[ 3035.984863][T12782] vmk80xx 10-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[ 3036.001908][T12782] usb 10-1: USB disconnect, device number 45
[ 3037.155486][T16348] loop9: detected capacity change from 0 to 128
[ 3037.169222][T16348] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 3037.184856][T16348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3038.028465][T16379] netlink: 'syz.1.31383': attribute type 1 has an invalid length.
[ 3038.322436][T16392] loop9: detected capacity change from 0 to 512
[ 3038.437516][T16392] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 3038.437571][T16392] ext4 filesystem being mounted at /1345/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 3039.600055][ T4051] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3040.675499][T16440] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[ 3040.675539][T16440] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 3040.675544][T16440] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[ 3041.397429][T16463] loop9: detected capacity change from 0 to 128
[ 3041.420475][T16463] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 3041.422783][T16463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3041.675885][T16470] netlink: 'syz.9.31414': attribute type 1 has an invalid length.
[ 3041.776174][T10714] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255
[ 3041.828293][T16474] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x88d7 instead
[ 3041.828330][T16474] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 3041.828334][T16474] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32
[ 3042.353787][T16486] overlayfs: failed to clone upperpath
[ 3043.224537][T24502] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 3043.385125][T24502] usb 10-1: Using ep0 maxpacket: 8
[ 3043.388379][T24502] usb 10-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40
[ 3043.389592][T24502] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10
[ 3043.389615][T24502] usb 10-1: config 1 interface 0 has no altsetting 0
[ 3043.391845][T24502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3043.391863][T24502] usb 10-1: Product: syz
[ 3043.391872][T24502] usb 10-1: Manufacturer: syz
[ 3043.391882][T24502] usb 10-1: SerialNumber: syz
[ 3043.643230][T24502] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input27
[ 3043.665047][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3043.665523][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3043.692273][T24502] usb 10-1: USB disconnect, device number 46
[ 3043.701177][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3043.701468][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3043.827269][T16124] udevd[16124]: Error opening device "/dev/input/event3": No such device
[ 3043.827323][T16124] udevd[16124]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3043.827372][T16124] udevd[16124]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3043.827432][T16124] udevd[16124]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3043.827474][T16124] udevd[16124]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3044.836893][T16571] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12
[ 3045.245309][T16589] netlink: 64 bytes leftover after parsing attributes in process `syz.8.31469'.
[ 3045.380861][T16596] loop9: detected capacity change from 0 to 16
[ 3045.381526][T16596] MTD: Attempt to mount non-MTD device "/dev/loop9"
[ 3046.473965][T24740] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 3046.634705][T24740] usb 10-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=ca.32
[ 3046.635618][T24740] usb 10-1: config 127 has an invalid interface number: 136 but max is 0
[ 3046.635630][T24740] usb 10-1: config 127 has an invalid interface number: 89 but max is 0
[ 3046.635638][T24740] usb 10-1: config 127 has 2 interfaces, different from the descriptor's value: 1
[ 3046.635646][T24740] usb 10-1: config 127 has no interface number 0
[ 3046.635652][T24740] usb 10-1: config 127 has no interface number 1
[ 3046.635674][T24740] usb 10-1: too many endpoints for config 127 interface 89 altsetting 231: 126, using maximum allowed: 30
[ 3046.635688][T24740] usb 10-1: config 127 interface 89 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 126
[ 3046.635698][T24740] usb 10-1: config 127 interface 136 has no altsetting 0
[ 3046.635706][T24740] usb 10-1: config 127 interface 89 has no altsetting 0
[ 3046.637522][T24740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3046.637533][T24740] usb 10-1: Product: syz
[ 3046.637539][T24740] usb 10-1: Manufacturer: syz
[ 3046.637544][T24740] usb 10-1: SerialNumber: syz
[ 3046.887287][T24740] usb 10-1: USB disconnect, device number 47
[ 3047.339490][T16631] netlink: 64 bytes leftover after parsing attributes in process `syz.8.31488'.
[ 3047.388506][   T34] audit: type=1326 audit(1791037960.286:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.390255][   T34] audit: type=1326 audit(1791037960.286:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.391157][   T34] audit: type=1326 audit(1791037960.286:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.391313][   T34] audit: type=1326 audit(1791037960.286:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.391425][   T34] audit: type=1326 audit(1791037960.286:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.391506][   T34] audit: type=1326 audit(1791037960.286:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.391592][   T34] audit: type=1326 audit(1791037960.286:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.392290][   T34] audit: type=1326 audit(1791037960.286:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3047.392400][   T34] audit: type=1326 audit(1791037960.286:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16632 comm="syz.8.31489" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3048.348460][T16660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.31502'.
[ 3049.784602][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31516'.
[ 3050.163888][T16701] xt_hashlimit: max too large, truncated to 1048576
[ 3050.163966][T16701] No such timeout policy "syz1"
[ 3050.198625][T16700] gretap1: entered promiscuous mode
[ 3051.253654][T16749] loop9: detected capacity change from 0 to 256
[ 3051.278490][T16749] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 3051.860640][   T34] audit: type=1326 audit(1791037964.459:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16776 comm="syz.1.31554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3051.958058][T16779] loop9: detected capacity change from 0 to 764
[ 3051.972755][T16779] rock: directory entry would overflow storage
[ 3051.972765][T16779] rock: sig=0x5245, size=8, remaining=5
[ 3054.393176][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31598'.
[ 3055.468615][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[ 3055.468673][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[ 3055.468987][ T1380] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 3055.650023][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31611'.
[ 3055.760587][T16912] geneve1: entered promiscuous mode
[ 3056.435443][T16934] netlink: 'syz.9.31622': attribute type 4 has an invalid length.
[ 3056.435457][T16934] netlink: 152 bytes leftover after parsing attributes in process `syz.9.31622'.
[ 3056.466437][T16934] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 3056.791535][T16951] loop9: detected capacity change from 0 to 256
[ 3056.829757][T16951] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[ 3057.072201][T16963] gretap1: entered promiscuous mode
[ 3057.702106][T16982] geneve1: entered promiscuous mode
[ 3058.329478][T16988] fuse: fd is not a fuse device
[ 3059.116480][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31664'.
[ 3059.116508][T17024] netlink: 'syz.1.31664': attribute type 26 has an invalid length.
[ 3059.587153][T17047] afs: Bad value for 'source'
[ 3059.709431][ T6002] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3060.349154][T24502] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 3060.509614][T24502] usb 10-1: Using ep0 maxpacket: 8
[ 3060.511242][T24502] usb 10-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40
[ 3060.512126][T24502] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10
[ 3060.512139][T24502] usb 10-1: config 1 interface 0 has no altsetting 0
[ 3060.513905][T24502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3060.513915][T24502] usb 10-1: Product: syz
[ 3060.513920][T24502] usb 10-1: Manufacturer: syz
[ 3060.513926][T24502] usb 10-1: SerialNumber: syz
[ 3060.769103][T24502] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input28
[ 3060.770087][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3060.770851][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3060.775321][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3060.793794][T24502] usb 10-1: USB disconnect, device number 48
[ 3060.807880][ T5028] bcm5974 10-1:1.0: could not read from device
[ 3060.899806][T17072] udevd[17072]: Error opening device "/dev/input/event3": No such file or directory
[ 3060.899894][T17072] udevd[17072]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3060.899956][T17072] udevd[17072]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3060.900013][T17072] udevd[17072]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3060.900079][T17072] udevd[17072]: Unable to EVIOCGABS device "/dev/input/event3"
[ 3061.334403][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31696'.
[ 3061.334417][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31696'.
[ 3061.544501][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31696'.
[ 3061.544513][T17112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31696'.
[ 3061.546113][ T5662] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546139][ T5662] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546152][ T5662] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546171][ T5662] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546211][ T5662] netdevsim netdevsim0 eth13: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546230][ T5662] netdevsim netdevsim0 eth14: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546248][ T5662] netdevsim netdevsim0 eth15: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546266][ T5662] netdevsim netdevsim0 eth16: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546279][ T5662] netdevsim netdevsim4 eth17: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546290][ T5662] netdevsim netdevsim4 eth18: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546302][ T5662] netdevsim netdevsim4 eth19: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546314][ T5662] netdevsim netdevsim4 eth20: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546327][ T5662] netdevsim netdevsim7 eth21: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546338][ T5662] netdevsim netdevsim7 eth22: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546350][ T5662] netdevsim netdevsim7 eth23: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.546362][ T5662] netdevsim netdevsim7 eth24: set [0, 0] type 1 family 0 port 8472 - 0
[ 3061.833504][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31700'.
[ 3062.594960][T17141] netlink: 'syz.1.31704': attribute type 2 has an invalid length.
[ 3062.626249][T24740] lo speed is unknown, defaulting to 1000
[ 3062.626266][T24740] syz_device_name_32_chars_1234567: Port: 1 Link DOWN
[ 3064.992611][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31730'.
[ 3064.992630][T17201] netlink: 'syz.8.31730': attribute type 26 has an invalid length.
[ 3065.225112][T24740] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[ 3065.385911][T24740] usb 10-1: Using ep0 maxpacket: 16
[ 3065.386811][T24740] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 3065.387689][T24740] usb 10-1: config index 0 descriptor too short (expected 65, got 36)
[ 3065.387709][T24740] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3065.387720][T24740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 3065.387730][T24740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3065.387740][T24740] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3065.387756][T24740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3065.389055][T24740] usb 10-1: config 0 descriptor??
[ 3065.389531][T17200] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 3065.446887][T24740] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input29
[ 3065.705227][T24502] usb 10-1: USB disconnect, device number 49
[ 3065.710791][ T5028] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[ 3065.710948][ T5028] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[ 3065.711080][ T5028] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[ 3065.711430][ T5028] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[ 3066.172305][T17227] netlink: 76 bytes leftover after parsing attributes in process `syz.8.31740'.
[ 3066.470738][T17229] netlink: 'syz.8.31741': attribute type 2 has an invalid length.
[ 3067.808798][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31757'.
[ 3068.169431][T17279] 8021q: adding VLAN 0 to HW filter on device eth0
[ 3068.177837][T17279] 8021q: adding VLAN 0 to HW filter on device bond1
[ 3068.214655][T17279] 8021q: adding VLAN 0 to HW filter on device bond3
[ 3068.215453][T17279] 8021q: adding VLAN 0 to HW filter on device bond4
[ 3068.232186][T17279] syz_tun: entered promiscuous mode
[ 3070.501594][T17344] netlink: 'syz.8.31786': attribute type 2 has an invalid length.
[ 3070.717716][T17358] loop9: detected capacity change from 0 to 128
[ 3070.745406][T17358] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3070.747757][T17358] ext4 filesystem being mounted at /1447/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 3071.206584][T17358] EXT4-fs (loop9): shut down requested (2)
[ 3071.371944][ T4051] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3072.672339][T17403] netlink: 'syz.8.31809': attribute type 1 has an invalid length.
[ 3072.714678][T17403] bond31: entered promiscuous mode
[ 3072.719400][T17403] 8021q: adding VLAN 0 to HW filter on device bond31
[ 3072.830284][T17403] macvtap1: entered allmulticast mode
[ 3072.993997][T17403] bond31: (slave bridge10): making interface the new active one
[ 3072.994122][T17403] bridge10: entered promiscuous mode
[ 3073.002648][T17403] bond31: (slave bridge10): Enslaving as an active interface with an up link
[ 3073.424556][T17428] netlink: 104 bytes leftover after parsing attributes in process `syz.8.31819'.
[ 3074.166641][T17461] FAULT_INJECTION: forcing a failure.
[ 3074.166641][T17461] name failslab, interval 1, probability 0, space 0, times 0
[ 3074.166662][T17461] CPU: 0 UID: 0 PID: 17461 Comm: syz.9.31830 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3074.166675][T17461] Tainted: [L]=SOFTLOCKUP
[ 3074.166679][T17461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3074.166684][T17461] Call Trace:
[ 3074.166689][T17461]  <TASK>
[ 3074.166693][T17461]  dump_stack_lvl+0xe8/0x150
[ 3074.166708][T17461]  should_fail_ex+0x410/0x560
[ 3074.166721][T17461]  should_failslab+0xa8/0x100
[ 3074.166732][T17461]  ? alloc_empty_file+0x5b/0x1d0
[ 3074.166743][T17461]  kmem_cache_alloc_noprof+0xa1/0x600
[ 3074.166751][T17461]  ? stack_depot_save_flags+0x33/0x7f0
[ 3074.166760][T17461]  ? alloc_empty_file+0x5b/0x1d0
[ 3074.166770][T17461]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 3074.166780][T17461]  alloc_empty_file+0x5b/0x1d0
[ 3074.166790][T17461]  path_openat+0xa2/0x1d60
[ 3074.166802][T17461]  ? __lock_acquire+0x747/0x2de0
[ 3074.166813][T17461]  do_file_open+0x23e/0x4a0
[ 3074.166823][T17461]  ? __pfx_do_file_open+0x10/0x10
[ 3074.166839][T17461]  ? _raw_spin_unlock+0x28/0x50
[ 3074.166848][T17461]  ? alloc_fd+0x651/0x6c0
[ 3074.166862][T17461]  do_sys_openat2+0x115/0x200
[ 3074.166873][T17461]  ? __se_sys_futex+0x3a8/0x450
[ 3074.166883][T17461]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3074.166893][T17461]  ? ksys_write+0x242/0x270
[ 3074.166901][T17461]  ? rcu_is_watching+0x16/0xb0
[ 3074.166912][T17461]  __x64_sys_openat+0x138/0x170
[ 3074.166925][T17461]  do_syscall_64+0x166/0x520
[ 3074.166935][T17461]  ? trace_irq_disable+0x3b/0x140
[ 3074.166943][T17461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3074.166974][T17461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3074.166982][T17461] RIP: 0033:0x7fc43835e98e
[ 3074.166991][T17461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3074.166999][T17461] RSP: 002b:00007fc439321ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3074.167009][T17461] RAX: ffffffffffffffda RBX: 00007fc4393226c0 RCX: 00007fc43835e98e
[ 3074.167016][T17461] RDX: 0000000000000002 RSI: 00007fc439321f90 RDI: ffffffffffffff9c
[ 3074.167043][T17461] RBP: 00007fc43843506b R08: 0000000000000000 R09: 0000000000000000
[ 3074.167049][T17461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3074.167054][T17461] R13: 00007fc438626038 R14: 00007fc438625fa0 R15: 00007fff1df07358
[ 3074.167066][T17461]  </TASK>
[ 3074.760345][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.8.31838'.
[ 3075.735865][T17514] loop9: detected capacity change from 0 to 32768
[ 3075.745721][T17514] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.31852 (17514)
[ 3075.749796][T17514] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 3075.749813][T17514] BTRFS info (device loop9): using blake2b checksum algorithm
[ 3075.921671][T17514] BTRFS info (device loop9): enabling ssd optimizations
[ 3075.921686][T17514] BTRFS info (device loop9): turning on async discard
[ 3075.921693][T17514] BTRFS info (device loop9): enabling free space tree
[ 3075.921700][T17514] BTRFS info (device loop9): use zstd compression, level 3
[ 3076.402399][T17541] fuse: fd is not a fuse device
[ 3077.788834][T17552] netlink: 'syz.8.31860': attribute type 1 has an invalid length.
[ 3077.872553][T17552] bond32: entered promiscuous mode
[ 3077.872788][T17552] 8021q: adding VLAN 0 to HW filter on device bond32
[ 3077.989765][T17555] bond32: (slave bridge11): making interface the new active one
[ 3077.989782][T17555] bridge11: entered promiscuous mode
[ 3077.990278][T17555] bond32: (slave bridge11): Enslaving as an active interface with an up link
[ 3079.779410][ T4051] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 3079.853002][T17583] netlink: 'syz.8.31875': attribute type 2 has an invalid length.
[ 3080.021378][T17585] ip6gre4: entered allmulticast mode
[ 3080.505682][T17597] netlink: 104 bytes leftover after parsing attributes in process `syz.9.31881'.
[ 3080.936759][T12782] usb 10-1: new full-speed USB device number 50 using dummy_hcd
[ 3081.099831][T12782] usb 10-1: not running at top speed; connect to a high speed hub
[ 3081.099905][T12782] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 3081.100827][T12782] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3081.100844][T12782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3081.122882][T12782] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 3081.132069][T12782] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3081.385344][T17601] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90
[ 3081.404360][T12782] usb 10-1: USB disconnect, device number 50
[ 3081.417212][T12782] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3081.421146][T12782] cyberjack 10-1:1.0: device disconnected
[ 3081.591509][T17619] netlink: 'syz.8.31891': attribute type 2 has an invalid length.
[ 3082.297536][T17635] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3082.308993][T17637] syz_tun: entered allmulticast mode
[ 3082.314522][T17636] syz_tun: left allmulticast mode
[ 3083.073079][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31902'.
[ 3083.234646][T17652] loop9: detected capacity change from 0 to 1024
[ 3083.460141][T17652] loop9: detected capacity change from 0 to 4096
[ 3083.488856][T17652] ntfs3(loop9): Primary boot: invalid bytes per MFT record 0 (0).
[ 3083.573477][T17652] ntfs3(loop9): try to read out of volume at offset 0x1ffe00
[ 3083.668522][T17658] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.31910'.
[ 3083.776783][T17662] loop9: detected capacity change from 0 to 1024
[ 3083.819583][T17661] netlink: 'syz.8.31912': attribute type 1 has an invalid length.
[ 3083.917313][T17661] bond33: entered promiscuous mode
[ 3083.926588][T17661] 8021q: adding VLAN 0 to HW filter on device bond33
[ 3083.932400][T17665] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 3083.992434][T17662] loop9: detected capacity change from 0 to 4096
[ 3084.004000][T17662] ntfs3(loop9): Primary boot: invalid bytes per MFT record 0 (0).
[ 3084.004086][T17662] ntfs3(loop9): try to read out of volume at offset 0x1ffe00
[ 3084.021355][T17661] bond33: (slave bridge12): making interface the new active one
[ 3084.021368][T17661] bridge12: entered promiscuous mode
[ 3084.021804][T17661] bond33: (slave bridge12): Enslaving as an active interface with an up link
[ 3084.328797][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.8.31915'.
[ 3084.328813][T17670] netlink: 'syz.8.31915': attribute type 6 has an invalid length.
[ 3084.328818][T17670] netlink: 'syz.8.31915': attribute type 5 has an invalid length.
[ 3084.328824][T17670] netlink: 'syz.8.31915': attribute type 4 has an invalid length.
[ 3084.395323][T17672] loop9: detected capacity change from 0 to 128
[ 3084.404265][T17672] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 3084.406098][T17672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3085.976073][T17692] loop9: detected capacity change from 0 to 64
[ 3086.151809][T17692] Bad inode number on dev loop9: 6 is out of range
[ 3086.351328][T17698] loop9: detected capacity change from 0 to 128
[ 3086.368918][T17698] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3086.370791][T17698] ext4 filesystem being mounted at /1471/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 3086.600481][ T4051] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3086.944987][T17712] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3087.234891][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31933'.
[ 3087.648048][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31938'.
[ 3087.691709][T17725] netlink: 'syz.8.31935': attribute type 2 has an invalid length.
[ 3088.164009][T24499] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[ 3088.323126][T24499] usb 10-1: Using ep0 maxpacket: 32
[ 3088.323814][T24499] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 3088.325453][T24499] usb 10-1: config 0 has an invalid interface number: 85 but max is 0
[ 3088.325466][T24499] usb 10-1: config 0 has no interface number 0
[ 3088.325482][T24499] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3088.325492][T24499] usb 10-1: config 0 interface 85 has no altsetting 0
[ 3088.327699][T24499] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3088.327710][T24499] usb 10-1: Product: syz
[ 3088.327716][T24499] usb 10-1: Manufacturer: syz
[ 3088.327721][T24499] usb 10-1: SerialNumber: syz
[ 3088.329014][T24499] usb 10-1: config 0 descriptor??
[ 3088.740803][T17748] ipvlan0: Caught tx_queue_len zero misconfig
[ 3088.772745][T24499] appletouch 10-1:0.85: Failed to read mode from device.
[ 3088.772862][T24499] appletouch 10-1:0.85: probe with driver appletouch failed with error -5
[ 3088.795666][T24499] usb 10-1: USB disconnect, device number 51
[ 3089.059020][T17757] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 3089.658001][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.9.31951'.
[ 3089.804733][T17767] loop9: detected capacity change from 0 to 128
[ 3089.837803][T17767] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3089.839978][T17767] ext4 filesystem being mounted at /1480/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 3090.030647][ T4051] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3090.661930][T17793] netlink: 8 bytes leftover after parsing attributes in process `syz.8.31963'.
[ 3090.661950][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.8.31963'.
[ 3090.672146][T24738] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[ 3090.779912][T17797] netlink: 'syz.8.31965': attribute type 178 has an invalid length.
[ 3090.840681][T24738] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 3090.841698][T24738] usb 10-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0xD8, changing to 0x88
[ 3090.841713][T24738] usb 10-1: config 2 interface 0 altsetting 178 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3090.841722][T24738] usb 10-1: config 2 interface 0 has no altsetting 0
[ 3090.843584][T24738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3090.843595][T24738] usb 10-1: Product: syz
[ 3090.843601][T24738] usb 10-1: Manufacturer: syz
[ 3090.843607][T24738] usb 10-1: SerialNumber: syz
[ 3091.134973][T24738] ims_pcu 10-1:2.0: Control endpoint is not INTERRUPT IN
[ 3091.134998][T24738] ims_pcu 10-1:2.0: probe with driver ims_pcu failed with error -22
[ 3091.149095][T24738] usb 10-1: USB disconnect, device number 52
[ 3092.766306][ T2680] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3093.081992][T24738] usb 10-1: new full-speed USB device number 53 using dummy_hcd
[ 3093.245889][T24738] usb 10-1: not running at top speed; connect to a high speed hub
[ 3093.245907][T24738] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[ 3093.246820][T24738] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3093.246838][T24738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3093.265731][T24738] cyberjack 10-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[ 3093.278642][T24738] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 3093.491559][T24738] usb 10-1: USB disconnect, device number 53
[ 3093.503112][T24738] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 3093.503412][T24738] cyberjack 10-1:1.0: device disconnected
[ 3093.880961][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.31998'.
[ 3094.346256][T17896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.32007'.
[ 3094.521107][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.9.32011'.
[ 3094.987505][T17285] bond0: (slave netdevsim1): link status definitely down, disabling slave
[ 3095.079313][T17285] bond0: now running without any active interface!
[ 3095.417965][T17944] fuse: fd is not a fuse device
[ 3095.694275][T17951] netlink: 'syz.8.32032': attribute type 2 has an invalid length.
[ 3096.710891][T17987] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 3096.911009][   T34] kauditd_printk_skb: 84 callbacks suppressed
[ 3096.911020][   T34] audit: type=1326 audit(1791038006.612:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.9.32053" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43839e159 code=0x0
[ 3096.952333][T17998] ip_tables: iptables: counters copy to user failed while replacing table
[ 3097.509959][T18018] xt_hashlimit: size too large, truncated to 1048576
[ 3097.991498][T18033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.32070'.
[ 3098.069542][   T34] audit: type=1326 audit(1791038007.688:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18036 comm="syz.1.32071" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3099.384889][   T34] audit: type=1326 audit(1791038008.923:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18063 comm="syz.8.32082" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x0
[ 3099.811678][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32092'.
[ 3100.511357][T18111] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[ 3100.777310][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3101.616891][T18158] fuse: Bad value for 'fd'
[ 3102.133201][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32135'.
[ 3102.185384][T18182] overlay: Bad value for 'workdir'
[ 3102.217770][T18184] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 3103.201341][T18224] loop9: detected capacity change from 0 to 512
[ 3103.210426][T18224] EXT4-fs: Ignoring removed oldalloc option
[ 3103.219227][T18224] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 3103.244929][T18224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 3103.272207][T18224] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[ 3103.324540][ T4051] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3103.381904][T18231] bond0: (slave vlan1): Opening slave failed
[ 3103.470775][T18231] bond0 (unregistering): left allmulticast mode
[ 3103.470793][T18231] netdevsim netdevsim1 netdevsim1: left allmulticast mode
[ 3103.470830][T18231] bridge0: port 1(bond0) entered disabled state
[ 3103.540729][T18231] bond0 (unregistering): (slave netdevsim1): Releasing backup interface
[ 3103.541946][T18231] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[ 3103.544561][T18231] bond0 (unregistering): Released all slaves
[ 3103.980303][T18250] loop9: detected capacity change from 0 to 512
[ 3104.067625][T18250] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #2: block 8: comm syz.9.32167: lblock 0 mapped to illegal pblock 8 (length 1)
[ 3104.067670][T18250] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 3104.070226][    C0] EXT4-fs (loop9): initial error at time 1791038013: ext4_map_blocks:790: inode 2: block 8
[ 3104.070251][    C0] EXT4-fs (loop9): last error at time 1791038013: ext4_map_blocks:790: inode 2: block 8
[ 3104.189097][T18250] EXT4-fs (loop9): Remounting filesystem read-only
[ 3104.189111][T18250] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.32167: error -EUCLEAN reading directory block
[ 3104.215739][T18250] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117
[ 3104.215778][T18250] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.32167: error -EUCLEAN reading directory block
[ 3104.215800][T18250] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[ 3104.216524][T18250] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 3104.275503][ T4051] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3104.591615][T18272] lo speed is unknown, defaulting to 1000
[ 3107.790535][T18353] loop9: detected capacity change from 0 to 32768
[ 3107.800048][T18353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.32212 (18353)
[ 3107.805864][T18353] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 3107.805880][T18353] BTRFS info (device loop9): using sha256 checksum algorithm
[ 3107.862883][T18379] overlayfs: failed to clone lowerpath
[ 3107.955111][T18353] BTRFS info (device loop9): enabling ssd optimizations
[ 3107.955126][T18353] BTRFS info (device loop9): turning on async discard
[ 3107.955132][T18353] BTRFS info (device loop9): enabling free space tree
[ 3108.063395][ T4051] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 3108.902449][T18425] xt_l2tp: wrong L2TP version: 6
[ 3110.527393][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.9.32266'.
[ 3115.630959][T18631] ip_tables: iptables: counters copy to user failed while replacing table
[ 3115.789644][T18640] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3115.794063][T18641] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes.
[ 3115.878198][T18644] netlink: 32 bytes leftover after parsing attributes in process `syz.8.32332'.
[ 3116.474169][T18675] loop9: detected capacity change from 0 to 128
[ 3116.487916][T18675] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3116.494646][T18675] ext4 filesystem being mounted at /1602/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 3116.637196][T18680] EXT4-fs (loop9): shut down requested (2)
[ 3116.678513][ T4051] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3118.750762][T18695] sg_write: data in/out 451548/226 bytes for SCSI command 0x0-- guessing data in;
[ 3118.750762][T18695]    program syz.9.32351 not setting count and/or reply_len properly
[ 3121.340941][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[ 3121.340989][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[ 3121.341187][ T1380] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 3121.896085][T18741] FAULT_INJECTION: forcing a failure.
[ 3121.896085][T18741] name failslab, interval 1, probability 0, space 0, times 0
[ 3121.896113][T18741] CPU: 0 UID: 0 PID: 18741 Comm: syz.9.32371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3121.896129][T18741] Tainted: [L]=SOFTLOCKUP
[ 3121.896133][T18741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3121.896141][T18741] Call Trace:
[ 3121.896147][T18741]  <TASK>
[ 3121.896154][T18741]  dump_stack_lvl+0xe8/0x150
[ 3121.896177][T18741]  should_fail_ex+0x410/0x560
[ 3121.896198][T18741]  should_failslab+0xa8/0x100
[ 3121.896216][T18741]  __kmalloc_noprof+0xfe/0x720
[ 3121.896228][T18741]  ? tomoyo_encode+0x2ad/0x570
[ 3121.896241][T18741]  ? tomoyo_encode+0x2ad/0x570
[ 3121.896264][T18741]  tomoyo_encode+0x2ad/0x570
[ 3121.896286][T18741]  tomoyo_realpath_from_path+0x5fa/0x640
[ 3121.896336][T18741]  tomoyo_check_open_permission+0x229/0x470
[ 3121.896354][T18741]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 3121.896370][T18741]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3121.896387][T18741]  ? __asan_memset+0x22/0x50
[ 3121.896445][T18741]  ? mnt_get_write_access+0x66/0x280
[ 3121.896462][T18741]  ? tomoyo_file_open+0x163/0x220
[ 3121.896479][T18741]  security_file_open+0xa9/0x240
[ 3121.896495][T18741]  do_dentry_open+0x4a0/0x1380
[ 3121.896515][T18741]  vfs_open+0x3b/0x340
[ 3121.896529][T18741]  ? path_openat+0x1428/0x1d60
[ 3121.896544][T18741]  path_openat+0x1443/0x1d60
[ 3121.896571][T18741]  do_file_open+0x23e/0x4a0
[ 3121.896588][T18741]  ? __pfx_do_file_open+0x10/0x10
[ 3121.896610][T18741]  ? _raw_spin_unlock+0x28/0x50
[ 3121.896626][T18741]  ? alloc_fd+0x651/0x6c0
[ 3121.896650][T18741]  do_sys_openat2+0x115/0x200
[ 3121.896668][T18741]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3121.896685][T18741]  ? exc_page_fault+0x6a/0xc0
[ 3121.896699][T18741]  ? do_user_addr_fault+0xc4c/0x1340
[ 3121.896714][T18741]  __x64_sys_openat+0x138/0x170
[ 3121.896733][T18741]  do_syscall_64+0x166/0x520
[ 3121.896749][T18741]  ? trace_irq_disable+0x3b/0x140
[ 3121.896763][T18741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3121.896779][T18741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3121.896791][T18741] RIP: 0033:0x7fc43835e98e
[ 3121.896799][T18741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3121.896809][T18741] RSP: 002b:00007fc4393219b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3121.896823][T18741] RAX: ffffffffffffffda RBX: 00007fc4393226c0 RCX: 00007fc43835e98e
[ 3121.896832][T18741] RDX: 0000000000080001 RSI: 00007fc4384090a0 RDI: ffffffffffffff9c
[ 3121.896841][T18741] RBP: 00007fc4384090a0 R08: 0000000000000000 R09: 0000000000000000
[ 3121.896849][T18741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009
[ 3121.896856][T18741] R13: 00007fc439321a90 R14: 00007fc438625fa0 R15: 00007fff1df07358
[ 3121.896877][T18741]  </TASK>
[ 3121.896957][T18741] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3122.370925][T18750] netlink: 'syz.8.32374': attribute type 16 has an invalid length.
[ 3122.370940][T18750] netlink: 'syz.8.32374': attribute type 17 has an invalid length.
[ 3122.505325][T18741] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4)
[ 3122.505339][T18741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 3122.519917][T18741] vhci_hcd vhci_hcd.0: Device attached
[ 3122.528894][T18753] vhci_hcd: connection closed
[ 3122.580472][T17285] vhci_hcd vhci_hcd.9: stop threads
[ 3122.593030][T17285] vhci_hcd vhci_hcd.9: release socket
[ 3122.593073][T17285] vhci_hcd vhci_hcd.9: disconnect device
[ 3123.384124][T18786] netlink: 12 bytes leftover after parsing attributes in process `syz.9.32389'.
[ 3123.703568][T18797] netlink: 332 bytes leftover after parsing attributes in process `syz.8.32394'.
[ 3123.703656][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.32394'.
[ 3125.178304][T18837] ip_tables: iptables: counters copy to user failed while replacing table
[ 3125.385538][T18844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32413'.
[ 3125.823581][T24371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3126.108418][T18855] C: Caught tx_queue_len zero misconfig
[ 3129.017315][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32444'.
[ 3129.440920][   T34] audit: type=1326 audit(1791038037.044:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18930 comm="syz.8.32453" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x0
[ 3130.513147][T18956] 9p: Bad value for 'wfdno'
[ 3133.486024][T18965] netlink: 4 bytes leftover after parsing attributes in process `syz.9.32465'.
[ 3133.486068][T18965] bond2: left allmulticast mode
[ 3133.486104][T18965] bond2: left promiscuous mode
[ 3133.486290][T18965] bridge0: port 2(bond2) entered disabled state
[ 3133.491938][T18965] bond0: left allmulticast mode
[ 3133.491977][T18965] bond0: left promiscuous mode
[ 3133.492127][T18965] bridge0: port 1(bond0) entered disabled state
[ 3134.432493][T19009] overlayfs: failed to clone lowerpath
[ 3134.943499][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32494'.
[ 3136.453520][   T34] audit: type=1326 audit(1791038043.602:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19044 comm="syz.9.32501" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43839e159 code=0x0
[ 3136.794340][T19063] 9p: Bad value for 'wfdno'
[ 3136.794833][T10714] Bluetooth: hci1: unexpected event for opcode 0x0c26
[ 3137.380110][   T34] audit: type=1326 audit(1791038044.472:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19078 comm="syz.8.32516" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x0
[ 3140.209432][T19115] batadv_slave_1: entered promiscuous mode
[ 3140.219404][T19114] batadv_slave_1: left promiscuous mode
[ 3140.269899][T19118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.32531'.
[ 3140.270849][T19118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32531'.
[ 3140.308680][T19119] netlink: 'syz.9.32532': attribute type 25 has an invalid length.
[ 3141.028054][T19159] syz.9.32550 (19159): drop_caches: 4
[ 3141.895251][T19179] xt_hashlimit: size too large, truncated to 1048576
[ 3142.743368][T19214] 9p: Bad value for 'wfdno'
[ 3142.934100][T19224] overlayfs: failed to clone lowerpath
[ 3143.155455][T19231] 9p: Bad value for 'wfdno'
[ 3143.212054][T19235] xt_hashlimit: size too large, truncated to 1048576
[ 3144.831036][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32601'.
[ 3145.948196][T19286] xt_hashlimit: size too large, truncated to 1048576
[ 3146.328933][T19307] netlink: 60 bytes leftover after parsing attributes in process `syz.9.32614'.
[ 3146.379955][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32615'.
[ 3146.450957][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.9.32616'.
[ 3147.689521][T19345] fuse: fd is not a fuse device
[ 3148.317196][T19361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32638'.
[ 3148.677512][T19376] netlink: 60 bytes leftover after parsing attributes in process `syz.8.32645'.
[ 3149.656439][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32660'.
[ 3150.929248][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.9.32661'.
[ 3152.226650][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32663'.
[ 3152.301313][T19433] hsr_slave_1 (unregistering): left promiscuous mode
[ 3152.444884][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32669'.
[ 3152.444898][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32669'.
[ 3152.444905][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32669'.
[ 3152.444912][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32669'.
[ 3152.537217][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32670'.
[ 3152.537234][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32670'.
[ 3152.875044][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32678'.
[ 3153.634975][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.32691'.
[ 3153.669154][T17285] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3153.669179][T17285] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3153.669193][T17285] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3153.669206][T17285] netdevsim netdevsim8 : set [0, 0] type 1 family 0 port 8472 - 0
[ 3154.362054][   T34] audit: type=1326 audit(1791038060.348:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.362177][   T34] audit: type=1326 audit(1791038060.348:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.377954][T24499] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 3154.394156][   T34] audit: type=1326 audit(1791038060.385:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.406370][   T34] audit: type=1326 audit(1791038060.404:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.408130][   T34] audit: type=1326 audit(1791038060.404:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.409274][   T34] audit: type=1326 audit(1791038060.404:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.411256][   T34] audit: type=1326 audit(1791038060.404:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.413485][   T34] audit: type=1326 audit(1791038060.404:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.413665][   T34] audit: type=1326 audit(1791038060.404:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.413832][   T34] audit: type=1326 audit(1791038060.404:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19531 comm="syz.8.32706" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3154.555145][T24499] usb 10-1: Using ep0 maxpacket: 16
[ 3154.556569][T24499] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3154.559552][T24499] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3154.559565][T24499] usb 10-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3154.559576][T24499] usb 10-1: config 1 interface 0 has no altsetting 0
[ 3154.565070][T24499] usb 10-1: string descriptor 0 read error: -22
[ 3154.565129][T24499] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3154.597280][T19516] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 3154.831193][T24499] usb 10-1: USB disconnect, device number 54
[ 3155.290096][T19570] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[ 3156.222824][T19581] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 3156.633600][T19600] __nla_validate_parse: 8 callbacks suppressed
[ 3156.633611][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32733'.
[ 3157.102875][T19622] overlayfs: failed to clone upperpath
[ 3158.990630][T24371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3159.191089][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32764'.
[ 3159.193398][T19692] netlink: 8 bytes leftover after parsing attributes in process `syz.9.32764'.
[ 3159.410879][T19698] loop9: detected capacity change from 0 to 256
[ 3159.415225][T19698] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 3159.431917][T19698] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 3161.312745][T19770] loop9: detected capacity change from 0 to 2048
[ 3161.331816][T19770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 3162.187360][T12782] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 3162.347536][T12782] usb 10-1: Using ep0 maxpacket: 16
[ 3162.348047][T12782] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 3162.349279][T12782] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3162.349300][T12782] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3162.349328][T12782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3162.351233][T12782] usb 10-1: config 0 descriptor??
[ 3162.565714][T19792] fuse: fd is not a fuse device
[ 3162.588955][T12782] usbhid 10-1:0.0: can't add hid device: -71
[ 3162.589010][T12782] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 3162.595820][T12782] usb 10-1: USB disconnect, device number 55
[ 3164.248728][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.32822'.
[ 3164.248741][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.8.32822'.
[ 3165.824402][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32831'.
[ 3166.387775][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32842'.
[ 3167.935523][T19928] dvmrp1: entered allmulticast mode
[ 3168.875503][T19961] netlink: 1988 bytes leftover after parsing attributes in process `syz.8.32872'.
[ 3169.643478][T19973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3170.493366][T19999] netlink: 8 bytes leftover after parsing attributes in process `syz.8.32890'.
[ 3171.101761][T20019] 9p: Bad value for 'wfdno'
[ 3171.303604][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.8.32902'.
[ 3173.151647][T20062] 9p: Bad value for 'wfdno'
[ 3175.290047][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32940'.
[ 3175.462809][   T34] kauditd_printk_skb: 6 callbacks suppressed
[ 3175.462819][   T34] audit: type=1326 audit(1791038080.096:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.462941][   T34] audit: type=1326 audit(1791038080.096:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.487017][   T34] audit: type=1326 audit(1791038080.124:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.488396][   T34] audit: type=1326 audit(1791038080.124:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.489493][   T34] audit: type=1326 audit(1791038080.124:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.490670][   T34] audit: type=1326 audit(1791038080.124:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.490688][   T34] audit: type=1326 audit(1791038080.124:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.490911][   T34] audit: type=1326 audit(1791038080.124:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3175.490991][   T34] audit: type=1326 audit(1791038080.124:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20130 comm="syz.1.32943" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3176.440777][T20171] vlan2: entered promiscuous mode
[ 3177.060480][T20195] netlink: 56 bytes leftover after parsing attributes in process `syz.8.32970'.
[ 3177.185748][T24502] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 3177.346047][T24502] usb 10-1: Using ep0 maxpacket: 16
[ 3177.354493][T24502] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3177.361585][T24502] usb 10-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3177.361600][T24502] usb 10-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3177.361610][T24502] usb 10-1: config 1 interface 0 has no altsetting 0
[ 3177.378237][T24502] usb 10-1: string descriptor 0 read error: -22
[ 3177.378293][T24502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3177.380825][T20188] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 3177.452113][T20205] overlayfs: failed to clone upperpath
[ 3178.212119][T24499] usb 10-1: USB disconnect, device number 56
[ 3178.739346][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32995'.
[ 3179.080169][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33002'.
[ 3179.631386][T20296] loop9: detected capacity change from 0 to 512
[ 3179.642110][T20296] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 3179.689014][T20296] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[ 3179.689068][T20296] System zones: 1-12
[ 3179.690370][T20296] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.33016: bad orphan inode 131072
[ 3179.690385][T20296] loop9: lost filesystem error report for type 5 error -117
[ 3179.691399][T20296] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 3180.142339][T20296] overlayfs: upper fs needs to support d_type.
[ 3180.351908][ T4051] EXT4-fs error (device loop9): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /1765/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 3181.252714][T17996] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3182.047729][T11885] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 3182.062850][T11885] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 3182.063995][T11885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 3182.066170][T11885] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 3182.066430][T11885] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 3182.616427][T20324] lo speed is unknown, defaulting to 1000
[ 3183.133155][T20324] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3183.133200][T20324] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3183.133268][T20324] bridge_slave_0: entered allmulticast mode
[ 3183.137441][T20324] bridge_slave_0: entered promiscuous mode
[ 3183.151511][T20324] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3183.151556][T20324] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3183.151625][T20324] bridge_slave_1: entered allmulticast mode
[ 3183.153662][T20324] bridge_slave_1: entered promiscuous mode
[ 3183.229127][T20324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3183.239984][T20324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3183.319489][T20324] team0: Port device team_slave_0 added
[ 3183.326476][T20324] team0: Port device team_slave_1 added
[ 3183.380443][T20324] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3183.380453][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3183.380462][T20324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3183.382755][T20324] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3183.382763][T20324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3183.382774][T20324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3183.507518][T20324] hsr_slave_0: entered promiscuous mode
[ 3183.508043][T20324] hsr_slave_1: entered promiscuous mode
[ 3183.511535][T20324] debugfs: 'hsr0' already exists in 'hsr'
[ 3183.511547][T20324] Cannot create hsr debugfs directory
[ 3184.094713][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33036'.
[ 3184.338135][T10714] Bluetooth: hci1: command tx timeout
[ 3185.037596][T20324] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 3185.465976][T20324] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 3185.745731][T20324] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 3185.955190][T20324] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 3186.561655][T10714] Bluetooth: hci1: command tx timeout
[ 3186.823677][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[ 3186.823707][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[ 3186.823903][ T1380] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 3187.346165][   T34] audit: type=1326 audit(1791038091.210:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20444 comm="syz.8.33058" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x0
[ 3187.674006][T20324] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 3187.689095][T20324] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3187.690491][T20324] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 3187.736254][T20324] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3187.736751][T20324] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 3187.750961][T20324] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3187.752324][T20324] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 3187.771366][T20324] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3188.115370][T20324] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3188.208736][T20324] 8021q: adding VLAN 0 to HW filter on device team0
[ 3188.245520][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3188.245664][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3188.273046][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3188.273158][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3188.784138][T10714] Bluetooth: hci1: command tx timeout
[ 3189.261475][T20324] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3189.347623][T20324] veth0_vlan: entered promiscuous mode
[ 3189.366530][T20324] veth1_vlan: entered promiscuous mode
[ 3189.440692][T20324] veth0_macvtap: entered promiscuous mode
[ 3189.450869][T20324] veth1_macvtap: entered promiscuous mode
[ 3189.500637][T20324] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3189.525836][T20324] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3189.579866][ T2029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3189.580033][ T2029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3189.580122][ T2029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3189.580141][ T2029] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3189.888039][ T5845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3189.888051][ T5845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3190.010903][ T5845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3190.010921][ T5845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3190.276138][T20524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33071'.
[ 3191.007817][T10714] Bluetooth: hci1: command tx timeout
[ 3191.080160][T20560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33084'.
[ 3191.309432][T20564] loop3: detected capacity change from 0 to 4096
[ 3191.323273][T20564] ntfs3(loop3): Failed to load $Volume (-22).
[ 3191.638669][T20575] loop3: detected capacity change from 0 to 8
[ 3191.661296][T20575] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 3191.661315][T20575] SQUASHFS error: Failed to read block 0x9b: -5
[ 3191.661322][T20575] SQUASHFS error: Unable to read metadata cache entry [99]
[ 3191.661327][T20575] SQUASHFS error: Unable to read inode 0x127
[ 3192.046782][ T5845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3192.130236][T20584] loop3: detected capacity change from 0 to 1024
[ 3193.018835][T20589] loop3: detected capacity change from 0 to 512
[ 3193.030842][T20589] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[ 3193.063092][ T6002] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[ 3193.302088][T20598] netlink: 'syz.1.33100': attribute type 23 has an invalid length.
[ 3194.483173][T20618] loop3: detected capacity change from 0 to 32768
[ 3194.568042][T20618] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 3195.561339][T20324] ocfs2: Unmounting device (7,3) on (node local)
[ 3195.798836][T20655] FAULT_INJECTION: forcing a failure.
[ 3195.798836][T20655] name failslab, interval 1, probability 0, space 0, times 0
[ 3195.798856][T20655] CPU: 0 UID: 60928 PID: 20655 Comm: syz.3.33123 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3195.798869][T20655] Tainted: [L]=SOFTLOCKUP
[ 3195.798872][T20655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3195.798877][T20655] Call Trace:
[ 3195.798880][T20655]  <TASK>
[ 3195.798884][T20655]  dump_stack_lvl+0xe8/0x150
[ 3195.798898][T20655]  should_fail_ex+0x410/0x560
[ 3195.798912][T20655]  should_failslab+0xa8/0x100
[ 3195.798924][T20655]  __kmalloc_noprof+0xfe/0x720
[ 3195.798932][T20655]  ? prepare_creds+0x30/0x820
[ 3195.798942][T20655]  ? security_prepare_creds+0x52/0x360
[ 3195.798952][T20655]  ? security_prepare_creds+0x52/0x360
[ 3195.798961][T20655]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 3195.798970][T20655]  security_prepare_creds+0x52/0x360
[ 3195.798981][T20655]  prepare_creds+0x57d/0x820
[ 3195.798991][T20655]  join_session_keyring+0x1b/0x440
[ 3195.799003][T20655]  __se_sys_keyctl+0x915/0x9d0
[ 3195.799013][T20655]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 3195.799023][T20655]  ? __pfx_do_futex+0x10/0x10
[ 3195.799037][T20655]  ? __se_sys_futex+0x3a8/0x450
[ 3195.799049][T20655]  ? rcu_is_watching+0x16/0xb0
[ 3195.799061][T20655]  ? __x64_sys_keyctl+0x20/0xc0
[ 3195.799070][T20655]  do_syscall_64+0x166/0x520
[ 3195.799081][T20655]  ? trace_irq_disable+0x3b/0x140
[ 3195.799089][T20655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3195.799098][T20655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3195.799105][T20655] RIP: 0033:0x7fd5a3b9e159
[ 3195.799113][T20655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3195.799120][T20655] RSP: 002b:00007fd5a4a35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 3195.799130][T20655] RAX: ffffffffffffffda RBX: 00007fd5a3e25fa0 RCX: 00007fd5a3b9e159
[ 3195.799136][T20655] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000001
[ 3195.799141][T20655] RBP: 00007fd5a3c3506b R08: 0000000000000000 R09: 0000000000000000
[ 3195.799147][T20655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3195.799152][T20655] R13: 00007fd5a3e26038 R14: 00007fd5a3e25fa0 R15: 00007ffdbeffeba8
[ 3195.799165][T20655]  </TASK>
[ 3197.025170][T24740] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 3197.188786][T24740] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 3197.189929][T24740] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3197.189949][T24740] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3197.189963][T24740] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3197.189982][T24740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3197.194787][T24740] usb 4-1: config 0 descriptor??
[ 3197.662909][T24740] hid_parser_main: 222 callbacks suppressed
[ 3197.662922][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662934][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662943][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662952][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662961][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662969][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662978][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.662986][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.663036][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.700654][T24740] acrux 0003:1A34:0802.000C: unknown main item tag 0x0
[ 3197.787652][T24740] acrux 0003:1A34:0802.000C: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0
[ 3197.928265][T24740] usb 4-1: USB disconnect, device number 4
[ 3199.337265][T20739] bond0: entered promiscuous mode
[ 3201.311856][T20797] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[ 3203.113981][T20831] fuse: root generation should be zero
[ 3203.587803][T24499] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 3203.748293][T24499] usb 4-1: Using ep0 maxpacket: 32
[ 3203.750497][T24499] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 3203.766283][T24499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3203.766296][T24499] usb 4-1: Product: syz
[ 3203.766302][T24499] usb 4-1: Manufacturer: syz
[ 3203.766308][T24499] usb 4-1: SerialNumber: syz
[ 3203.779706][T24499] usb 4-1: config 0 descriptor??
[ 3203.788855][T24499] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 3204.293347][T24499] gspca_ov534_9: reg_w failed -71
[ 3204.720842][T24499] gspca_ov534_9: Unknown sensor 0000
[ 3204.720917][T24499] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22
[ 3204.724993][T24499] usb 4-1: USB disconnect, device number 5
[ 3209.393289][    C0] tipc: RX(1000001): key[1] is activated
[ 3209.873522][   T34] audit: type=1326 audit(1791038112.296:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.873656][   T34] audit: type=1326 audit(1791038112.296:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.875288][   T34] audit: type=1326 audit(1791038112.296:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.875484][   T34] audit: type=1326 audit(1791038112.296:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.876800][   T34] audit: type=1326 audit(1791038112.296:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.942019][   T34] audit: type=1326 audit(1791038112.352:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91ed15e98e code=0x7ffc0000
[ 3209.942933][   T34] audit: type=1326 audit(1791038112.352:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.946110][   T34] audit: type=1326 audit(1791038112.352:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3209.946768][   T34] audit: type=1326 audit(1791038112.352:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20983 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f91ed15e98e code=0x7ffc0000
[ 3209.981576][   T34] audit: type=1326 audit(1791038112.389:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20981 comm="syz.8.33264" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3210.248917][T20991] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3210.288353][T20991] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[ 3211.499095][T21018] CIFS: iocharset name too long
[ 3212.444499][T21068] loop3: detected capacity change from 0 to 256
[ 3213.154689][T24502] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[ 3213.315520][T24502] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[ 3213.316440][T24502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 3213.316454][T24502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3213.316470][T24502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3213.705982][T21107] fuse: Unknown parameter 'fd0x0000000000000005'
[ 3214.419987][T24502] pegasus 4-1:1.0: probe with driver pegasus failed with error -71
[ 3214.456298][T24502] usb 4-1: USB disconnect, device number 6
[ 3215.664798][T21159] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 3216.819572][T21188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33350'.
[ 3217.027116][   T34] kauditd_printk_skb: 3 callbacks suppressed
[ 3217.027127][   T34] audit: type=1326 audit(1791038118.985:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3217.027256][   T34] audit: type=1326 audit(1791038118.985:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3217.027477][   T34] audit: type=1326 audit(1791038118.985:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3217.027497][   T34] audit: type=1326 audit(1791038118.985:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3217.027728][   T34] audit: type=1326 audit(1791038118.985:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdca9d9e159 code=0x7ffc0000
[ 3217.082224][   T34] audit: type=1326 audit(1791038119.031:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdca9d5e98e code=0x7ffc0000
[ 3217.086783][   T34] audit: type=1326 audit(1791038119.031:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdca9d5e98e code=0x7ffc0000
[ 3217.110155][   T34] audit: type=1326 audit(1791038119.059:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdca9d5e98e code=0x7ffc0000
[ 3217.117192][   T34] audit: type=1326 audit(1791038119.059:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdca9d5e98e code=0x7ffc0000
[ 3217.118435][   T34] audit: type=1326 audit(1791038119.059:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21191 comm="syz.1.33352" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdca9d5e98e code=0x7ffc0000
[ 3217.191754][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33354'.
[ 3217.725309][T21209] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 3219.170773][T21237] fuse: Unknown parameter 'fd0x0000000000000006'
[ 3219.565979][T21260] fuse: Unknown parameter 'fd0x0000000000000006'
[ 3221.275285][T21279] fuse: fd is not a fuse device
[ 3221.890564][T21299] fuse: Unknown parameter 'fd0x0000000000000005'
[ 3222.923157][   T34] kauditd_printk_skb: 92 callbacks suppressed
[ 3222.923172][   T34] audit: type=1326 audit(1791038124.495:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.923873][   T34] audit: type=1326 audit(1791038124.495:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.943597][   T34] audit: type=1326 audit(1791038124.513:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.943772][   T34] audit: type=1326 audit(1791038124.513:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.944185][   T34] audit: type=1326 audit(1791038124.513:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.944319][   T34] audit: type=1326 audit(1791038124.513:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.944563][   T34] audit: type=1326 audit(1791038124.513:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.944866][   T34] audit: type=1326 audit(1791038124.513:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3222.944983][   T34] audit: type=1326 audit(1791038124.513:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.8.33413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ed19e159 code=0x7ffc0000
[ 3223.527417][T21340] netlink: 'syz.1.33418': attribute type 10 has an invalid length.
[ 3223.541512][T21340] netlink: 'syz.1.33418': attribute type 10 has an invalid length.
[ 3224.171482][   T34] audit: type=1326 audit(1791038125.664:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21362 comm="syz.1.33430" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3224.295780][T21370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.33432'.
[ 3224.827016][T21380] FAULT_INJECTION: forcing a failure.
[ 3224.827016][T21380] name failslab, interval 1, probability 0, space 0, times 0
[ 3224.827045][T21380] CPU: 0 UID: 0 PID: 21380 Comm: syz.3.33437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3224.827062][T21380] Tainted: [L]=SOFTLOCKUP
[ 3224.827067][T21380] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3224.827077][T21380] Call Trace:
[ 3224.827083][T21380]  <TASK>
[ 3224.827088][T21380]  dump_stack_lvl+0xe8/0x150
[ 3224.827139][T21380]  should_fail_ex+0x410/0x560
[ 3224.827160][T21380]  should_failslab+0xa8/0x100
[ 3224.827179][T21380]  __kmalloc_noprof+0xfe/0x720
[ 3224.827194][T21380]  ? security_inode_alloc+0x39/0x310
[ 3224.827233][T21380]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 3224.827247][T21380]  ? sk_prot_alloc+0xe7/0x210
[ 3224.827266][T21380]  ? sk_prot_alloc+0xe7/0x210
[ 3224.827286][T21380]  sk_prot_alloc+0xe7/0x210
[ 3224.827302][T21380]  ? sk_alloc+0x27/0x390
[ 3224.827322][T21380]  sk_alloc+0x3a/0x390
[ 3224.827342][T21380]  mctp_pf_create+0xce/0x2f0
[ 3224.827357][T21380]  __sock_create+0x4b3/0x9d0
[ 3224.827379][T21380]  __sys_socketpair+0x1c4/0x560
[ 3224.827400][T21380]  __x64_sys_socketpair+0x9b/0xb0
[ 3224.827418][T21380]  do_syscall_64+0x166/0x520
[ 3224.827434][T21380]  ? trace_irq_disable+0x3b/0x140
[ 3224.827446][T21380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3224.827461][T21380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3224.827475][T21380] RIP: 0033:0x7fd5a3b9e159
[ 3224.827487][T21380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3224.827497][T21380] RSP: 002b:00007fd5a4a35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 3224.827512][T21380] RAX: ffffffffffffffda RBX: 00007fd5a3e25fa0 RCX: 00007fd5a3b9e159
[ 3224.827521][T21380] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d
[ 3224.827528][T21380] RBP: 00007fd5a3c3506b R08: 0000000000000000 R09: 0000000000000000
[ 3224.827544][T21380] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[ 3224.827551][T21380] R13: 00007fd5a3e26038 R14: 00007fd5a3e25fa0 R15: 00007ffdbeffeba8
[ 3224.827573][T21380]  </TASK>
[ 3225.104067][ T5843] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3225.242614][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33441'.
[ 3227.236851][T21428] fuse: Unknown parameter 'fd0x0000000000000005'
[ 3228.095808][T21443] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[ 3229.679127][T21492] loop3: detected capacity change from 0 to 256
[ 3229.684930][T21492] exfat: Deprecated parameter 'utf8'
[ 3229.684996][T21492] exfat: Deprecated parameter 'namecase'
[ 3229.685016][T21492] exfat: Deprecated parameter 'namecase'
[ 3229.710866][T21492] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[ 3231.255111][T21534] tipc: Started in network mode
[ 3231.255127][T21534] tipc: Node identity ac1414aa, cluster identity 4711
[ 3231.255491][T21534] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 3231.513623][T21547] loop3: detected capacity change from 0 to 512
[ 3231.516236][T21547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 3231.528509][T21547] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[ 3231.528523][T21547] EXT4-fs (loop3): group descriptors corrupted!
[ 3231.879477][   T34] audit: type=1326 audit(1791038132.867:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a3b9e159 code=0x7ffc0000
[ 3231.879614][   T34] audit: type=1326 audit(1791038132.867:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a3b9e159 code=0x7ffc0000
[ 3231.881692][   T34] audit: type=1326 audit(1791038132.867:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a3b9e159 code=0x7ffc0000
[ 3231.881727][   T34] audit: type=1326 audit(1791038132.867:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a3b9e159 code=0x7ffc0000
[ 3231.927482][   T34] audit: type=1326 audit(1791038132.924:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd5a3b9e159 code=0x7ffc0000
[ 3231.948058][   T34] audit: type=1326 audit(1791038132.942:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5a3b5e98e code=0x7ffc0000
[ 3231.951754][   T34] audit: type=1326 audit(1791038132.942:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5a3b5e98e code=0x7ffc0000
[ 3231.957074][   T34] audit: type=1326 audit(1791038132.942:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5a3b5e98e code=0x7ffc0000
[ 3231.965264][   T34] audit: type=1326 audit(1791038132.952:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5a3b5e98e code=0x7ffc0000
[ 3232.002136][   T34] audit: type=1326 audit(1791038132.989:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.3.33519" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5a3b5e98e code=0x7ffc0000
[ 3232.617089][T21578] netlink: 'syz.1.33527': attribute type 2 has an invalid length.
[ 3232.845533][T21590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3232.854319][T21591] ptrace attach of "/syz-executor exec"[8007] was attempted by "/syz-executor exec"[21591]
[ 3233.355382][T21595] loop3: detected capacity change from 0 to 32768
[ 3233.799971][T21621] netlink: 12 bytes leftover after parsing attributes in process `syz.8.33544'.
[ 3233.823278][T21621] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 3235.031677][T21640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3235.773323][T21669] Could not find key with description: [sy6*+fs_cip]
[ 3235.773333][T21669] process_request_key_err: No key
[ 3235.773337][T21669] Could not find valid key in user session keyring for sig specified in mount option: [sy6*+fs_cip]
[ 3235.773342][T21669] One or more global auth toks could not properly register; rc = [-2]
[ 3235.773358][T21669] Error validating options; rc = [-2]
[ 3237.298363][T21718] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33581'.
[ 3237.402297][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33584'.
[ 3237.402310][T21726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33584'.
[ 3237.494739][T24502] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3237.657587][T24502] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 3237.658486][T24502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3237.658508][T24502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3237.745220][T24502] as10x_usb: device has been detected
[ 3237.745682][T24502] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 3237.786526][T24502] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 3238.112902][T24502] as10x_usb: error during firmware upload part1
[ 3238.119164][T24502] Registered device Abilis Systems DVB-Titan
[ 3238.139282][T21744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.33591'.
[ 3238.139294][T21744] netlink: 24 bytes leftover after parsing attributes in process `syz.8.33591'.
[ 3238.254277][T21748] tipc: Trying to set illegal importance in message
[ 3238.760535][T24502] usb 4-1: USB disconnect, device number 7
[ 3238.790326][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.33602'.
[ 3238.814508][T21770] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 3238.976245][T24502] Unregistered device Abilis Systems DVB-Titan
[ 3238.980088][T24502] as10x_usb: device has been disconnected
[ 3240.009829][T21783] loop3: detected capacity change from 0 to 32768
[ 3240.018255][T21783] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.33608 (21783)
[ 3240.076270][T21783] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 3240.076297][T21783] BTRFS info (device loop3): using sha256 checksum algorithm
[ 3240.271561][T21783] BTRFS info (device loop3): turning off barriers
[ 3240.271576][T21783] BTRFS info (device loop3): enabling free space tree
[ 3240.336143][T20324] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 3240.488550][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33612'.
[ 3241.040939][T21816] netlink: 76 bytes leftover after parsing attributes in process `syz.1.33615'.
[ 3241.170090][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.33616'.
[ 3241.417773][T24502] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 3241.564392][T21826] 9p: Bad value for 'rfdno'
[ 3241.582458][T24502] usb 4-1: Using ep0 maxpacket: 16
[ 3241.584317][T24502] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3241.585218][T24502] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3241.585232][T24502] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3241.585243][T24502] usb 4-1: config 1 interface 0 has no altsetting 0
[ 3241.587812][T24502] usb 4-1: string descriptor 0 read error: -22
[ 3241.587866][T24502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3241.611548][T21818] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3241.734952][T21830] netlink: 'syz.1.33620': attribute type 1 has an invalid length.
[ 3241.768070][T21830] 8021q: adding VLAN 0 to HW filter on device bond31
[ 3241.830683][   T34] kauditd_printk_skb: 123 callbacks suppressed
[ 3241.830694][   T34] audit: type=1326 audit(1791038142.185:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21817 comm="syz.3.33611" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a3b9e159 code=0x0
[ 3241.849212][T24738] usb 4-1: USB disconnect, device number 8
[ 3247.724642][T21963] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 3247.827638][T21967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3248.012587][T21959] loop3: detected capacity change from 0 to 32768
[ 3248.020647][T21959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.33664 (21959)
[ 3248.030082][T21959] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3248.030099][T21959] BTRFS info (device loop3): using crc32c checksum algorithm
[ 3248.241629][T21959] BTRFS info (device loop3): enabling ssd optimizations
[ 3248.241644][T21959] BTRFS info (device loop3): turning on async discard
[ 3248.241650][T21959] BTRFS info (device loop3): enabling free space tree
[ 3248.270528][T21959] BTRFS info (device loop3 state M): use zstd compression, level 15
[ 3248.304630][T20324] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 3248.677554][T21996] ip_tables: iptables: counters copy to user failed while replacing table
[ 3249.462496][T22004] netlink: 240 bytes leftover after parsing attributes in process `syz.8.33686'.
[ 3249.833899][T24738] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 3250.012020][T24738] usb 4-1: Using ep0 maxpacket: 16
[ 3250.013362][T24738] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3250.014303][T24738] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3250.014315][T24738] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3250.014325][T24738] usb 4-1: config 1 interface 0 has no altsetting 0
[ 3250.017100][T24738] usb 4-1: string descriptor 0 read error: -22
[ 3250.017159][T24738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3250.019293][T22008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3250.255080][   T34] audit: type=1326 audit(1791038150.062:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22007 comm="syz.3.33688" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a3b9e159 code=0x0
[ 3250.268080][T24738] usb 4-1: USB disconnect, device number 9
[ 3250.393088][T22030] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 3250.808465][T22053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3252.106122][T22072] netlink: 'syz.1.33711': attribute type 5 has an invalid length.
[ 3252.287503][T22076] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 3252.495960][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[ 3252.495989][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[ 3252.496186][ T1380] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[ 3252.908110][T22095] loop3: detected capacity change from 0 to 32768
[ 3252.909006][T22095] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[ 3252.922059][T22095] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.33722 (22095)
[ 3252.929054][T22095] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 3252.929071][T22095] BTRFS info (device loop3): using crc32c checksum algorithm
[ 3253.775869][T22095] BTRFS info (device loop3): rebuilding free space tree
[ 3253.950075][T22095] BTRFS info (device loop3): disabling free space tree
[ 3253.950108][T22095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 3253.950118][T22095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 3253.952124][T22095] BTRFS info (device loop3): enabling ssd optimizations
[ 3253.952137][T22095] BTRFS info (device loop3): turning on async discard
[ 3253.952146][T22095] BTRFS info (device loop3): force clearing of disk cache
[ 3253.952154][T22095] BTRFS info (device loop3): use zstd compression, level 3
[ 3254.389368][T20324] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 3256.029264][T22160] netlink: 12 bytes leftover after parsing attributes in process `syz.8.33743'.
[ 3256.086127][T22162] netlink: 276 bytes leftover after parsing attributes in process `syz.1.33744'.
[ 3258.125333][T24738] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 3258.161046][ T2680] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3258.288940][T24738] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[ 3258.289996][T24738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3258.290020][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3258.313228][T24738] as10x_usb: device has been detected
[ 3258.313730][T24738] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[ 3258.333224][T24738] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[ 3258.405205][T24738] as10x_usb: error during firmware upload part1
[ 3258.405468][T24738] Registered device Abilis Systems DVB-Titan
[ 3259.576482][T22271] netlink: 168 bytes leftover after parsing attributes in process `syz.1.33793'.
[ 3260.428330][   T34] audit: type=1326 audit(1791038159.585:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22281 comm="syz.1.33798" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3261.072165][T24738] usb 4-1: USB disconnect, device number 10
[ 3261.219331][T24738] Unregistered device Abilis Systems DVB-Titan
[ 3261.221472][T24738] as10x_usb: device has been disconnected
[ 3261.616338][T22318] /dev/nullb0: Can't lookup blockdev
[ 3262.196258][T22335] batadv_slave_1: entered promiscuous mode
[ 3262.197439][T22334] batadv_slave_1: left promiscuous mode
[ 3262.315196][   T34] audit: type=1326 audit(1791038161.344:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.33822" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3262.678285][T22345] netlink: 40 bytes leftover after parsing attributes in process `syz.8.33825'.
[ 3262.723250][T24502] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3262.882742][T24502] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00
[ 3262.883655][T24502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3262.883675][T24502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3262.883685][T24502] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3262.883694][T24502] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 3262.883711][T24502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3262.891580][T24502] cxacru 4-1:1.0: cxacru_bind: interface has incorrect endpoints
[ 3262.891665][T24502] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 3263.123024][T24502] usb 4-1: USB disconnect, device number 11
[ 3265.801540][T22416] loop3: detected capacity change from 0 to 512
[ 3265.817471][T22416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 3265.841278][T22416] EXT4-fs (loop3): 1 truncate cleaned up
[ 3265.842006][T22416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 3265.973706][T22416] EXT4-fs error (device loop3): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.3.33856: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 3266.001629][T22416] EXT4-fs (loop3): Remounting filesystem read-only
[ 3266.001645][T22416] EXT4-fs warning (device loop3): ext4_rename_delete:3741: inode #2: comm syz.3.33856: Deleting old file: nlink 5, error=-117
[ 3266.088359][T20324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 3267.214443][T24499] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3267.393371][T24499] usb 4-1: Using ep0 maxpacket: 16
[ 3267.394802][T24499] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3267.395871][T24499] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3267.395885][T24499] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3267.395895][T24499] usb 4-1: config 1 interface 0 has no altsetting 0
[ 3267.398416][T24499] usb 4-1: string descriptor 0 read error: -22
[ 3267.398478][T24499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3267.403535][T22425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3267.655451][   T34] audit: type=1326 audit(1791038166.340:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22424 comm="syz.3.33859" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a3b9e159 code=0x0
[ 3267.670128][T24502] usb 4-1: USB disconnect, device number 12
[ 3267.797733][T22443] kAFS: unable to lookup cell ''
[ 3267.803710][T22443] kAFS: unable to lookup cell '(,c'
[ 3268.022883][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.33870'.
[ 3268.213940][T24738] libceph: connect (1)127.0.0.1:6789 error -101
[ 3268.214077][T24738] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 3268.484056][T24738] libceph: connect (1)127.0.0.1:6789 error -101
[ 3268.484138][T24738] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 3269.028618][T24738] libceph: connect (1)127.0.0.1:6789 error -101
[ 3269.028784][T24738] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 3269.070822][T22451] ceph: No mds server is up or the cluster is laggy
[ 3269.718068][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.33881'.
[ 3272.415833][T22542] ip_tables: iptables: counters copy to user failed while replacing table
[ 3272.580643][T22507] device-mapper: ioctl: device has been removed from the dev hash table.
[ 3273.443325][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33924'.
[ 3273.757789][T22578] fuse: fd is not a fuse device
[ 3274.485844][T22602] x_tables: duplicate entry at hook 4
[ 3274.805913][T22613] loop3: detected capacity change from 0 to 1756
[ 3274.839724][T22613] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 3274.839737][T22613] UDF-fs: Scanning with blocksize 512 failed
[ 3274.840850][T22613] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 3274.840861][T22613] UDF-fs: Scanning with blocksize 1024 failed
[ 3274.855689][T22613] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[ 3274.970318][T22621] loop3: detected capacity change from 0 to 128
[ 3274.995520][T22621] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3275.013039][T22621] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 3275.055616][T22621] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[ 3275.258612][T22626] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[ 3275.284366][T20324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3275.369236][T22629] syzkaller1: entered promiscuous mode
[ 3275.369249][T22629] syzkaller1: entered allmulticast mode
[ 3276.610125][T22659] xt_hashlimit: size too large, truncated to 1048576
[ 3276.820947][T22664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3276.943525][T22671] ip_tables: iptables: counters copy to user failed while replacing table
[ 3277.136957][T24738] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 3277.303167][T24738] usb 4-1: Using ep0 maxpacket: 16
[ 3277.303705][T24738] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[ 3277.304589][T24738] usb 4-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3277.304602][T24738] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3277.304616][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3277.305839][T24738] usb 4-1: config 0 descriptor??
[ 3277.500475][T22690] netlink: 248 bytes leftover after parsing attributes in process `syz.8.33974'.
[ 3277.751588][T24738] usbhid 4-1:0.0: can't add hid device: -71
[ 3277.751641][T24738] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3277.756930][T24738] usb 4-1: USB disconnect, device number 13
[ 3278.559997][T22733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.33995'.
[ 3278.981152][T22753] xt_hashlimit: size too large, truncated to 1048576
[ 3279.509237][T22755] loop3: detected capacity change from 0 to 32768
[ 3279.543141][T22755] syz.3.34006: attempt to access beyond end of device
[ 3279.543141][T22755] loop3: rw=8388608, sector=3145904, nr_sectors = 8 limit=32768
[ 3279.543165][T22755] Read error 10 at 0x0
[ 3279.543172][T22755] read_mapping_page failed!
[ 3279.543198][T22755] jfs_mount: diMount(ipaimap2) failed, rc = -5
[ 3279.543868][T22755] Mount JFS Failure: -5
[ 3279.543875][T22755] jfs_mount failed w/return code = -5
[ 3280.339430][T24502] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 3280.499058][T24502] usb 4-1: Using ep0 maxpacket: 32
[ 3280.500843][T24502] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[ 3280.501755][T24502] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3280.503633][T24502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3280.503644][T24502] usb 4-1: Product: syz
[ 3280.503650][T24502] usb 4-1: Manufacturer: syz
[ 3280.503656][T24502] usb 4-1: SerialNumber: syz
[ 3280.532484][T24502] usb 4-1: config 0 descriptor??
[ 3280.539152][T24502] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[ 3280.761925][T24502] usb 4-1: USB disconnect, device number 14
[ 3281.656741][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34045'.
[ 3281.846575][T22838] loop3: detected capacity change from 0 to 4096
[ 3281.897450][T22838] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 3281.898494][T22838] ntfs3(loop3): Failed to load $Extend (-22).
[ 3281.898505][T22838] ntfs3(loop3): Failed to initialize $Extend.
[ 3284.004670][T24738] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 3284.166893][T24738] usb 4-1: Using ep0 maxpacket: 8
[ 3284.169004][T24738] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 3284.169949][T24738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3284.169965][T24738] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3284.169995][T24738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 3284.170012][T24738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 3284.170040][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3284.203428][T24738] hub 4-1:1.0: bad descriptor, ignoring hub
[ 3284.203441][T24738] hub 4-1:1.0: probe with driver hub failed with error -5
[ 3284.203657][T24738] cdc_wdm 4-1:1.0: skipping garbage
[ 3284.203663][T24738] cdc_wdm 4-1:1.0: skipping garbage
[ 3284.220439][T24738] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 3284.220451][T24738] cdc_wdm 4-1:1.0: Unknown control protocol
[ 3284.399137][T22910] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[ 3284.529095][T24738] usb 4-1: USB disconnect, device number 15
[ 3284.537299][T22891] cdc_wdm 4-1:1.0: Error autopm - -16
[ 3284.570064][T22913] netlink: 100 bytes leftover after parsing attributes in process `syz.8.34077'.
[ 3284.570143][T22913] netlink: 40 bytes leftover after parsing attributes in process `syz.8.34077'.
[ 3284.570150][T22913] netlink: 40 bytes leftover after parsing attributes in process `syz.8.34077'.
[ 3285.063804][T24738] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 3285.224172][T24738] usb 4-1: Using ep0 maxpacket: 8
[ 3285.224901][T24738] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 3285.227442][T24738] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3285.227453][T24738] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3285.227471][T24738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 3285.227482][T24738] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 3285.227500][T24738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3285.230146][T24738] hub 4-1:1.0: bad descriptor, ignoring hub
[ 3285.230164][T24738] hub 4-1:1.0: probe with driver hub failed with error -5
[ 3285.230407][T24738] cdc_wdm 4-1:1.0: skipping garbage
[ 3285.230413][T24738] cdc_wdm 4-1:1.0: skipping garbage
[ 3285.275922][T24738] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 3285.275934][T24738] cdc_wdm 4-1:1.0: Unknown control protocol
[ 3285.590497][T24738] usb 4-1: USB disconnect, device number 16
[ 3285.957799][T22963] netlink: 'syz.1.34100': attribute type 62 has an invalid length.
[ 3286.224538][ T2680] IPVS: starting estimator thread 0...
[ 3286.314397][T22975] IPVS: using max 91 ests per chain, 218400 per kthread
[ 3287.282299][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34120'.
[ 3287.282350][T23007] netlink: 31 bytes leftover after parsing attributes in process `syz.1.34120'.
[ 3287.282359][T23007] netlink: 'syz.1.34120': attribute type 3 has an invalid length.
[ 3287.282368][T23007] netlink: 'syz.1.34120': attribute type 2 has an invalid length.
[ 3287.282376][T23007] netlink: 31 bytes leftover after parsing attributes in process `syz.1.34120'.
[ 3287.736777][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34128'.
[ 3287.736799][T23025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34128'.
[ 3287.828564][T23027] Bluetooth: hci0: unsupported parameter 5134
[ 3287.828585][T23027] Bluetooth: hci0: unsupported parameter 8192
[ 3287.828594][T23027] Bluetooth: hci0: unsupported parameter 5134
[ 3287.828602][T23027] Bluetooth: hci0: unsupported parameter 8192
[ 3288.390168][T23054] loop3: detected capacity change from 0 to 128
[ 3288.422850][T23054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 3288.425718][T23054] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 3288.478575][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.478599][T23054] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.34142: Directory block failed checksum
[ 3288.494642][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.494665][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.504125][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.504271][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.530890][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.530917][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.542357][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.542384][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.563482][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.563506][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.607431][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.607456][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.608229][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.608246][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.608835][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.608852][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.653168][T23054] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #2: comm syz.3.34142: No space for directory leaf checksum. Please run e2fsck -D.
[ 3288.653187][T23054] EXT4-fs error (device loop3): __ext4_find_entry:1628: inode #2: comm syz.3.34142: checksumming directory block 0
[ 3288.745651][T20324] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 3289.990889][T24499] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 3290.153615][T24499] usb 4-1: not running at top speed; connect to a high speed hub
[ 3290.153633][T24499] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[ 3290.154537][T24499] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3290.154563][T24499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3290.157466][T24499] gspca_main: spca501-2.14.0 probing 0000:0000
[ 3290.388461][T24499] gspca_spca501: reg write: error -71
[ 3290.388473][T24499] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 3290.388508][T24499] spca501 4-1:1.0: probe with driver spca501 failed with error -22
[ 3290.388994][T24499] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[ 3290.391564][T24499] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[ 3290.393646][T24499] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[ 3290.393671][T24499] uvcvideo 4-1:1.1: Failed to initialize the device (-71).
[ 3290.394035][T24499] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71
[ 3290.446140][T24499] usb 4-1: USB disconnect, device number 17
[ 3290.630468][   T34] audit: type=1326 audit(1791038187.828:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23107 comm="syz.1.34165" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3291.218719][T17293] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 3291.537481][T23121] netlink: 180 bytes leftover after parsing attributes in process `syz.8.34170'.
[ 3291.537531][T23121] netlink: 48 bytes leftover after parsing attributes in process `syz.8.34170'.
[ 3291.972983][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.8.34178'.
[ 3291.973618][   T34] audit: type=1326 audit(1791038189.091:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23131 comm="syz.1.34176" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca9d9e159 code=0x0
[ 3293.846297][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.34192'.
[ 3294.833666][T24499] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 3294.993817][T24499] usb 4-1: Using ep0 maxpacket: 16
[ 3294.995588][T24499] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 3294.996495][T24499] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[ 3294.996507][T24499] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3294.996517][T24499] usb 4-1: config 1 interface 0 has no altsetting 0
[ 3294.999691][T24499] usb 4-1: string descriptor 0 read error: -22
[ 3294.999746][T24499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.007516][T23195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3295.256459][   T34] audit: type=1326 audit(1791038192.159:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23194 comm="syz.3.34205" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a3b9e159 code=0x0
[ 3295.272175][T24499] usb 4-1: USB disconnect, device number 18
[ 3295.318705][T23224] fuse: Bad value for 'fd'
[ 3298.104878][T24370] ------------[ cut here ]------------
[ 3298.104888][T24370] time_after(jiffies, timeout)
[ 3298.104892][T24370] WARNING: io_uring/io_uring.c:2358 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u9:13/24370
[ 3298.116464][T24370] Modules linked in:
[ 3298.119998][T24370] CPU: 0 UID: 0 PID: 24370 Comm: kworker/u9:13 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3298.124193][T24370] Tainted: [L]=SOFTLOCKUP
[ 3298.125678][T24370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3298.128945][T24370] Workqueue: iou_exit io_ring_exit_work
[ 3298.131140][T24370] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0
[ 3298.133444][T24370] Code: c6 05 4b dd 38 0f 01 48 c7 c7 e0 10 6b 8c be 25 00 00 00 48 c7 c2 c0 07 6b 8c e8 3b c6 78 00 e9 70 fe ff ff e8 41 21 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00
[ 3298.141456][T24370] RSP: 0018:ffffc900088cf940 EFLAGS: 00010293
[ 3298.143949][T24370] RAX: ffffffff812aee0f RBX: 0000000100047cab RCX: ffff88802e20da00
[ 3298.147148][T24370] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[ 3298.150252][T24370] RBP: ffffc900088cfad0 R08: ffffc900088cf8c7 R09: 1ffff92001119f18
[ 3298.153442][T24370] R10: dffffc0000000000 R11: fffff52001119f19 R12: dffffc0000000000
[ 3298.156760][T24370] R13: 0000000100047ca9 R14: 0000000000002000 R15: ffff888034f3c000
[ 3298.160623][T24370] FS:  0000000000000000(0000) GS:ffff88818d6c7000(0000) knlGS:0000000000000000
[ 3298.163487][T24370] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3298.165562][T24370] CR2: 00007ffdbeffde2c CR3: 000000010377e000 CR4: 00000000000006f0
[ 3298.169379][T24370] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3298.172625][T24370] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 3298.175895][T24370] Call Trace:
[ 3298.177308][T24370]  <TASK>
[ 3298.178595][T24370]  ? trace_hrtimer_start+0x82/0x200
[ 3298.180796][T24370]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 3298.182517][T24370]  ? rcu_is_watching+0x16/0xb0
[ 3298.184025][T24370]  ? process_scheduled_works+0x97a/0x1630
[ 3298.185805][T24370]  process_scheduled_works+0xc3d/0x1630
[ 3298.187553][T24370]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3298.189847][T24370]  ? assign_work+0x3cf/0x5d0
[ 3298.191761][T24370]  worker_thread+0xa47/0xfb0
[ 3298.193687][T24370]  kthread+0x38b/0x480
[ 3298.195211][T24370]  ? __pfx_worker_thread+0x10/0x10
[ 3298.196816][T24370]  ? __pfx_kthread+0x10/0x10
[ 3298.198277][T24370]  ret_from_fork+0x514/0xb70
[ 3298.199848][T24370]  ? __pfx_ret_from_fork+0x10/0x10
[ 3298.202080][T24370]  ? __switch_to+0xc89/0x1420
[ 3298.203984][T24370]  ? __pfx_kthread+0x10/0x10
[ 3298.205602][T24370]  ret_from_fork_asm+0x1a/0x30
[ 3298.207513][T24370]  </TASK>
[ 3298.208531][T24370] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3298.211132][T24370] CPU: 0 UID: 0 PID: 24370 Comm: kworker/u9:13 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3298.214929][T24370] Tainted: [L]=SOFTLOCKUP
[ 3298.216369][T24370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 3298.220270][T24370] Workqueue: iou_exit io_ring_exit_work
[ 3298.222534][T24370] Call Trace:
[ 3298.223788][T24370]  <TASK>
[ 3298.224947][T24370]  vpanic+0x56d/0xa60
[ 3298.226342][T24370]  ? __pfx__printk+0x10/0x10
[ 3298.227896][T24370]  ? __pfx_vpanic+0x10/0x10
[ 3298.229436][T24370]  ? is_bpf_text_address+0x292/0x2b0
[ 3298.231474][T24370]  ? is_bpf_text_address+0x26/0x2b0
[ 3298.233387][T24370]  panic+0xc5/0xd0
[ 3298.234649][T24370]  ? __pfx_panic+0x10/0x10
[ 3298.236147][T24370]  ? ret_from_fork_asm+0x1a/0x30
[ 3298.237769][T24370]  __warn+0x315/0x4c0
[ 3298.239092][T24370]  ? io_ring_exit_work+0x4d0/0x9a0
[ 3298.241119][T24370]  ? io_ring_exit_work+0x4d0/0x9a0
[ 3298.242908][T24370]  __report_bug+0x276/0x570
[ 3298.244386][T24370]  ? io_ring_exit_work+0x4d0/0x9a0
[ 3298.246028][T24370]  ? __pfx___report_bug+0x10/0x10
[ 3298.247647][T24370]  ? trace_contention_end+0x3d/0x140
[ 3298.249389][T24370]  ? __mutex_lock+0x30b/0x1550
[ 3298.250956][T24370]  ? io_ring_exit_work+0x4d0/0x9a0
[ 3298.252864][T24370]  report_bug+0x16b/0x220
[ 3298.254595][T24370]  ? io_ring_exit_work+0x4d0/0x9a0
[ 3298.256638][T24370]  ? io_ring_exit_work+0x4d2/0x9a0
[ 3298.258614][T24370]  handle_bug+0x9c/0x200
[ 3298.260023][T24370]  exc_invalid_op+0x1a/0x50
[ 3298.261513][T24370]  asm_exc_invalid_op+0x1a/0x20
[ 3298.263030][T24370] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0
[ 3298.264817][T24370] Code: c6 05 4b dd 38 0f 01 48 c7 c7 e0 10 6b 8c be 25 00 00 00 48 c7 c2 c0 07 6b 8c e8 3b c6 78 00 e9 70 fe ff ff e8 41 21 9d 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00
[ 3298.270819][T24370] RSP: 0018:ffffc900088cf940 EFLAGS: 00010293
[ 3298.272761][T24370] RAX: ffffffff812aee0f RBX: 0000000100047cab RCX: ffff88802e20da00
[ 3298.275247][T24370] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000
[ 3298.277718][T24370] RBP: ffffc900088cfad0 R08: ffffc900088cf8c7 R09: 1ffff92001119f18
[ 3298.280228][T24370] R10: dffffc0000000000 R11: fffff52001119f19 R12: dffffc0000000000
[ 3298.282718][T24370] R13: 0000000100047ca9 R14: 0000000000002000 R15: ffff888034f3c000
[ 3298.285227][T24370]  ? io_ring_exit_work+0x4cf/0x9a0
[ 3298.286852][T24370]  ? trace_hrtimer_start+0x82/0x200
[ 3298.288518][T24370]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 3298.290257][T24370]  ? rcu_is_watching+0x16/0xb0
[ 3298.292018][T24370]  ? process_scheduled_works+0x97a/0x1630
[ 3298.293997][T24370]  process_scheduled_works+0xc3d/0x1630
[ 3298.296029][T24370]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3298.298401][T24370]  ? assign_work+0x3cf/0x5d0
[ 3298.300265][T24370]  worker_thread+0xa47/0xfb0
[ 3298.302114][T24370]  kthread+0x38b/0x480
[ 3298.303767][T24370]  ? __pfx_worker_thread+0x10/0x10
[ 3298.305499][T24370]  ? __pfx_kthread+0x10/0x10
[ 3298.307022][T24370]  ret_from_fork+0x514/0xb70
[ 3298.308586][T24370]  ? __pfx_ret_from_fork+0x10/0x10
[ 3298.310256][T24370]  ? __switch_to+0xc89/0x1420
[ 3298.311766][T24370]  ? __pfx_kthread+0x10/0x10
[ 3298.313243][T24370]  ret_from_fork_asm+0x1a/0x30
[ 3298.314788][T24370]  </TASK>
[ 3298.316096][T24370] Kernel Offset: disabled
[ 3298.317498][T24370] Rebooting in 86400 seconds..
