last executing test programs:

3m17.195146876s ago: executing program 1 (id=176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x3, 0xff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
open(0x0, 0x141400, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

3m16.044192689s ago: executing program 1 (id=179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x3, 0xff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
open(0x0, 0x141400, 0x0)
sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

3m12.376989891s ago: executing program 1 (id=184):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x8000, 0x65bf, 0x2, 0x0, 0x1, 0xcb03}, 0x50)

3m12.235639965s ago: executing program 1 (id=185):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

3m12.064055612s ago: executing program 1 (id=187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/275, 0x113}, {&(0x7f0000000b80)=""/124, 0x7c}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000840)=""/59, 0x3b}, {&(0x7f00000029c0)=""/4091, 0xffb}, {&(0x7f0000000c80)=""/249, 0xf9}, {&(0x7f0000000140)=""/161, 0xa1}], 0x7}, 0x1008}], 0x1, 0x40000000, 0x0)

3m11.085743059s ago: executing program 1 (id=194):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x8000, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x4, 0x2, 0xb7, 0xd, 0xf94a}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

3m10.928767444s ago: executing program 32 (id=194):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x8000, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x4, 0x2, 0xb7, 0xd, 0xf94a}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2m34.673656141s ago: executing program 4 (id=372):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xf5a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570)

2m32.826302023s ago: executing program 4 (id=376):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRESHEX], 0xfe37, 0x0)

2m32.597952215s ago: executing program 4 (id=378):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}], 0x1}, 0x4)

2m31.983590246s ago: executing program 4 (id=383):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000500)=<r1=>0x0)
r2 = eventfd2(0x4, 0x80001)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])

2m31.011078402s ago: executing program 4 (id=385):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
open(0x0, 0x141400, 0x0)
sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

2m29.416961549s ago: executing program 4 (id=388):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

2m14.397136751s ago: executing program 33 (id=388):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

10.272397137s ago: executing program 2 (id=1178):
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036d24700383afcfe800000000000000000e6ffffffffd8ff0200000000000000000000000000010102907800000000605f020000002c00ff020000000000000000000000000001fe8000000000000000000000000000bb11000005"], 0x0)

10.177780836s ago: executing program 2 (id=1180):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="05000000010040", 0x7)

7.569835184s ago: executing program 6 (id=1208):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff)
close(r1)
r2 = socket(0x2, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
r3 = socket(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0)
readv(r3, &(0x7f0000000480)=[{0x0}], 0x1)

7.490662432s ago: executing program 6 (id=1210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

7.282255132s ago: executing program 2 (id=1211):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000"], 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x101001a, &(0x7f0000000480)=ANY=[], 0xfb, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x2, 0x19}, 0x0, 0x228, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x0, 0x871004, 0x0, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @private1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'dvmrp0\x00', 'pimreg\x00', {}, {0xff}, 0x67, 0xb7, 0x1, 0x41}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x400000, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xd9f})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)=ANY=[])

6.5945639s ago: executing program 6 (id=1215):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$netlink(0x10, 0x3, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r3 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x128)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r3, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4)
sync_file_range(r3, 0x6, 0x10000000000000, 0x2)

5.360206271s ago: executing program 0 (id=1221):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="05000000010040", 0x7)

4.696794567s ago: executing program 6 (id=1224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x3, 0xff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
open(0x0, 0x141400, 0x0)
sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

3.221942913s ago: executing program 2 (id=1230):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb0, 0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008050}, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.849659649s ago: executing program 2 (id=1233):
r0 = socket(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0)

2.720648112s ago: executing program 6 (id=1234):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$netlink(0x10, 0x3, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r3 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x128)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r3, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4)
sync_file_range(r3, 0x6, 0x10000000000000, 0x2)

2.645769229s ago: executing program 2 (id=1235):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000140)=0xc)
ptrace$peeksig(0x4209, r3, &(0x7f0000000180)={0x8, 0x0, 0x2}, &(0x7f00000003c0)=[{}, {}])
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000000000, 0xf, 0x9}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="94f78019325560e77f6f091710b214b2e343b655168aa49acf1e365732a2345feb2597d837acf77d6a128e7e442e02f0c4f66d1664662b689e4100f0580637525feb2e1d59186de4930e0fd5e3db58a94f364d4cc4a77104bacb971739ee2139a6170f399ab8b17f643844d3d78e16c220f0019bb02e1438e9636537f14dad69f326aff5c821284d76c6e78c8b33ed50545700f13d4d5e73c62c8b019a3b8a"], 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x80)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x449)
setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00')
fchdir(0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x2c020400)
r5 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000))

2.625328042s ago: executing program 5 (id=1236):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.453794438s ago: executing program 5 (id=1238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r7, 0xffffffffffffffff, &(0x7f0000000680)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(0xffffffffffffffff, 0x627, 0xe295, 0x1, 0x0, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

1.793891703s ago: executing program 0 (id=1241):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4c, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.712852951s ago: executing program 0 (id=1242):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
setuid(0xffffffffffffffff)
r0 = semget(0x0, 0x1, 0x281)
semctl$GETALL(r0, 0x0, 0x6, 0x0)

1.606820252s ago: executing program 0 (id=1243):
r0 = socket(0x2, 0x3, 0x0)
close(r0)

1.587649994s ago: executing program 6 (id=1244):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x2, 0x3, 0xff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
open(0x0, 0x141400, 0x0)
sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c)

1.540271998s ago: executing program 5 (id=1245):
setuid(0xee01)
socket(0x18, 0x1, 0x0)
r0 = msgget(0x3, 0x408)
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240))
close(0xffffffffffffffff)
open$dir(0x0, 0x1, 0x0)
r1 = semget(0x0, 0x1, 0x281)
semctl$GETPID(r1, 0x4, 0x4, 0x0)

1.441698578s ago: executing program 5 (id=1246):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1000006}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x3, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.175196964s ago: executing program 0 (id=1247):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001000)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,uid=forget,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c004a93a461aad45cd75ae17259e0ea4792a92f8d07159ed2b4167f1be6ae8f33d41e28d753c96b7d27d61c777182349e2c01219c88ec805d75f035dd5f7d141e3b748144ed616629b4179b9a3054666721d290ce8ecbfd51e590d5be3f3bc786bd908f0f003350070e8f3e00000000000000"], 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r0, &(0x7f0000000f40)=[{&(0x7f00000060c0)="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", 0x104f}, {&(0x7f0000000180)="4ed21c4035ee9ce916fe00d1c4c7e93196598c4c044bfa4b825d7698f2c2bf15b77c239072d0f8e4b346b2617077041115f8c3fc76d41f8a704196fbc11d21958f9ed6c2fa0666b8e697887b13b247a15835a72ef1e59f8a1fa597242394886ee5924ef35d0c5cff280aae6d46a564ff3c4beeb233c40b5b1bc3181ec6", 0x7d}, {&(0x7f0000002f40)}, {&(0x7f0000004040)="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", 0x739}], 0x4, 0xe7b, 0x2, 0x11)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

1.093722643s ago: executing program 5 (id=1249):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', 0x40, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r2 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x128)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r2, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3)
sync_file_range(r2, 0x6, 0x10000000000000, 0x2)

986.380133ms ago: executing program 3 (id=1250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005000100"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)

860.894055ms ago: executing program 0 (id=1251):
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
fcntl$getown(r2, 0x9)
r3 = eventfd(0x80000001)
readv(r3, &(0x7f0000001d40)=[{&(0x7f0000001d00)=""/2, 0x2}], 0x1)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}}}}}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84)

807.224701ms ago: executing program 3 (id=1252):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4c, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

689.021772ms ago: executing program 3 (id=1253):
shmget(0x0, 0x4000, 0x203, &(0x7f0000ff9000/0x4000)=nil)

469.717704ms ago: executing program 3 (id=1254):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet(0x2, 0x3, 0x2)
getsockopt$sock_int(r0, 0xffff, 0x1000, 0x0, 0x0)

409.11827ms ago: executing program 3 (id=1255):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$netlink(0x10, 0x3, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
r3 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x128)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r3, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1012c1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4)
sync_file_range(r3, 0x6, 0x10000000000000, 0x2)

381.755453ms ago: executing program 5 (id=1256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r4=>0x0})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r7, 0xffffffffffffffff, &(0x7f0000000680)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(0xffffffffffffffff, 0x627, 0xe295, 0x1, 0x0, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0)

0s ago: executing program 3 (id=1257):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$eJzslr+PEkEUx78zu1nAaEwsbSwkUQuX3UWNjYk0VhYm/iAWJhJZCbJKAhRCYtC/wN7EwsLef8BE2/sjLtxV13DdNdfsZXZmd+cICxwcUNz7JDy+s8y8ffPe5A0gCOLCsr93NAqRj/RlFJFTzw+MdA7X5u/mD7/8f/qk+v3N753cyC5M8xmGi7/fBPCvYqCXrD29uqi+X4An+iU47ihdBYOt9FtwvFLaB8NrpT9oui3m2/b7ZuDb79pBXQhHGFcYT5jyZHzjbwx1LT6m/d7tD1q1IPA7axTz8jeucDzS4tPrZUNG62j5c8HhKl0Gw3OlHyIX50amRNv/dTP1b8zcv4V1Z0SEcoZV165klsoCsFwYAEsc/sRK28FXdWTXeYYyhIFIxBU9J8/GhnYhDvqcOTA3nlW2WjKXqcXfx3JN/CQcynE052qGw3C44CssLJONtD+Fvxhuaf1JtpIf0VUjSljq9gd3mx9rDb/hf/K88gPnnuPc90pRI5J2Rv8rRP3pUup/6p0ksJiFz7Ver+NKm4w9aad1XB71P47bN+VYFNea8JvXNFMfEyaY7L2tP5nREwRBbI8bYMehwoyFuk2g/dd9tsUYCYIgCIIgCIIgCIJYjZMAAAD//4U6Q1I=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000840)}}, &(0x7f0000000100))
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r1, 0x1, 0x4, &(0x7f0000001d00)=""/166, &(0x7f0000001dc0)=0xa6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000003e00)=[{{&(0x7f0000000980)={0x2, 0x4e23, @loopback}, 0xffffffffffffff40, 0x0}}, {{&(0x7f0000000b40)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}], 0x20}}], 0x2, 0x48080)
pipe(&(0x7f0000000200))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
pipe2$9p(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})

kernel console output (not intermixed with test programs):

ve_1
[   72.563472][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.573659][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.584168][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.597046][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.625834][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.633919][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.642773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.651980][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.664418][ T4197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.674236][ T4197] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.683245][ T4197] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.692180][ T4197] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.717406][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.725351][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.744306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.754220][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.763078][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.804103][ T3069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.826666][ T4184] device veth0_macvtap entered promiscuous mode
[   72.851834][ T3069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.877547][ T4184] device veth1_macvtap entered promiscuous mode
[   72.897041][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.915023][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.968163][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.985276][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.997272][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.019774][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.047179][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.057873][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.070056][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.080571][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.090498][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.103589][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.115721][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.130945][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.140463][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   73.154279][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   73.223388][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.226361][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.244654][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.259778][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.272288][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.287289][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.302523][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.318558][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.339090][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.353706][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.368123][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.389035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.411825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.457284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.490148][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.499950][ T3069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.520631][ T3069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.548561][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.587471][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.605699][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.678931][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.934134][ T4308] loop1: detected capacity change from 0 to 128
[   74.037265][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.089445][ T4308] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   74.114712][ T4308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.173467][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.199443][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.024824][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   75.031069][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   75.056761][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.092878][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[   75.567664][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.569860][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   75.585631][ T4296] Bluetooth: hci4: command 0x0419 tx timeout
[   75.703522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.928280][ T4326] xt_nat: multiple ranges no longer supported
[   76.786279][ T4339] loop3: detected capacity change from 0 to 256
[   76.834821][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   76.902002][ T4344] loop0: detected capacity change from 0 to 256
[   76.913891][   T26] audit: type=1804 audit(1760995736.055:2): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4" name="/newroot/0/bus/bus" dev="loop3" ino=1048590 res=1 errno=0
[   76.999396][   T26] audit: type=1800 audit(1760995736.085:3): pid=4308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="file1" dev="loop1" ino=94 res=0 errno=0
[   77.106298][ T4324] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   77.174534][ T4324] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   77.462606][ T4359] loop0: detected capacity change from 0 to 1024
[   77.542047][ T4361] loop3: detected capacity change from 0 to 1024
[   77.578185][ T4359] hfsplus: failed to load catalog file
[   77.609167][ T4321] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   77.617472][ T4361] EXT4-fs (loop3): Ignoring removed orlov option
[   77.624674][ T4361] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   77.642474][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   77.697530][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.705179][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.822760][ T4359] device bridge_slave_0 left promiscuous mode
[   77.885506][ T4361] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   77.916594][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.916633][ T4369] loop2: detected capacity change from 0 to 16
[   77.970588][ T4359] device bridge_slave_1 left promiscuous mode
[   77.979031][ T4369] erofs: (device loop2): mounted with root inode @ nid 36.
[   77.990365][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.065955][ T4359] bond0: (slave bond_slave_0): Releasing backup interface
[   78.097151][ T4321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.113452][ T4321] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   78.124130][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.141027][ T4321] usb 5-1: config 0 descriptor??
[   78.185672][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   78.194641][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   78.203578][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   78.212490][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   78.221389][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   78.230288][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   78.239183][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   78.248165][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   78.257149][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   78.266149][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   78.329736][ T4359] bond0: (slave bond_slave_1): Releasing backup interface
[   79.217611][ T4350] Cannot find set identified by id 65534 to match
[   79.417153][ T4359] team0: Port device team_slave_0 removed
[   79.466445][ T4359] team0: Port device team_slave_1 removed
[   79.485019][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.511089][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.527030][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.535158][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.828728][ T4381] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   81.553449][ T4407] loop1: detected capacity change from 0 to 256
[   81.669165][ T4407] FAT-fs (loop1): Unrecognized mount option "check" or missing value
[   81.735154][ T4410] loop2: detected capacity change from 0 to 2048
[   81.828759][ T4410] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   81.890926][ T4410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.510183][ T4227] usb 5-1: USB disconnect, device number 2
[   83.792266][ T4437] loop2: detected capacity change from 0 to 4096
[   83.839320][ T4437] EXT4-fs (loop2): Mount option "data=ordered" incompatible with ext2
[   85.092297][ T4196] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[   85.103122][ T4196] CPU: 1 PID: 4196 Comm: kworker/u5:5 Not tainted syzkaller #0
[   85.110709][ T4196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   85.120802][ T4196] Workqueue: hci1 hci_rx_work
[   85.125543][ T4196] Call Trace:
[   85.128838][ T4196]  <TASK>
[   85.131783][ T4196]  dump_stack_lvl+0x168/0x230
[   85.136487][ T4196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   85.142144][ T4196]  ? show_regs_print_info+0x20/0x20
[   85.147377][ T4196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   85.153046][ T4196]  sysfs_create_dir_ns+0x252/0x280
[   85.158205][ T4196]  ? __lock_acquire+0x7c60/0x7c60
[   85.163255][ T4196]  ? sysfs_warn_dup+0xa0/0xa0
[   85.167953][ T4196]  ? le_conn_complete_evt+0xcbc/0x1590
[   85.173435][ T4196]  ? hci_event_packet+0xe05/0x12f0
[   85.178573][ T4196]  ? process_one_work+0x863/0x1000
[   85.183707][ T4196]  ? do_raw_spin_unlock+0x11d/0x230
[   85.188929][ T4196]  kobject_add_internal+0x662/0xd00
[   85.194164][ T4196]  kobject_add+0x152/0x210
[   85.198614][ T4196]  ? kobject_init+0x1d0/0x1d0
[   85.203323][ T4196]  ? klist_children_get+0x50/0x50
[   85.208453][ T4196]  ? get_device_parent+0x121/0x3f0
[   85.213616][ T4196]  device_add+0x483/0xfb0
[   85.217978][ T4196]  hci_conn_add_sysfs+0xd1/0x1e0
[   85.222941][ T4196]  le_conn_complete_evt+0xcbc/0x1590
[   85.228261][ T4196]  ? cs_le_create_conn+0x5e0/0x5e0
[   85.233400][ T4196]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   85.239058][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[   85.244294][ T4196]  hci_le_meta_evt+0x289/0x3b80
[   85.249163][ T4196]  ? hci_event_packet+0x36d/0x12f0
[   85.254312][ T4196]  ? __lock_acquire+0x7c60/0x7c60
[   85.255413][    C0] sched: RT throttling activated
[   85.264309][ T4196]  ? release_firmware_map_entry+0x190/0x190
[   85.270232][ T4196]  ? hci_remote_host_features_evt+0x280/0x280
[   85.276323][ T4196]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[   85.282029][ T4196]  ? mark_lock+0x94/0x320
[   85.286402][ T4196]  ? mutex_unlock+0x10/0x10
[   85.290930][ T4196]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[   85.296979][ T4196]  ? lock_chain_count+0x20/0x20
[   85.301865][ T4196]  ? __rwlock_init+0x140/0x140
[   85.306652][ T4196]  hci_event_packet+0xe05/0x12f0
[   85.311631][ T4196]  ? lockdep_hardirqs_on+0x94/0x140
[   85.316876][ T4196]  ? rcu_lock_release+0x20/0x20
[   85.321753][ T4196]  ? lock_acquire+0x1f2/0x3f0
[   85.326477][ T4196]  ? hci_send_to_monitor+0x9c/0x4a0
[   85.331713][ T4196]  hci_rx_work+0x255/0xa10
[   85.336162][ T4196]  process_one_work+0x863/0x1000
[   85.341148][ T4196]  ? worker_detach_from_pool+0x240/0x240
[   85.346805][ T4196]  ? lockdep_hardirqs_off+0x70/0x100
[   85.352131][ T4196]  ? _raw_spin_lock_irq+0xab/0xe0
[   85.357185][ T4196]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[   85.362581][ T4196]  ? wq_worker_running+0x97/0x170
[   85.367646][ T4196]  worker_thread+0xaa8/0x12a0
[   85.372373][ T4196]  kthread+0x436/0x520
[   85.376454][ T4196]  ? rcu_lock_release+0x20/0x20
[   85.381314][ T4196]  ? kthread_blkcg+0xd0/0xd0
[   85.386010][ T4196]  ret_from_fork+0x1f/0x30
[   85.390459][ T4196]  </TASK>
[   85.405511][ T4196] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   85.420029][ T4196] Bluetooth: hci1: failed to register connection device
[   85.422530][ T4461] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.505704][ T4227] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.826963][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   85.957081][ T4455] Zero length message leads to an empty skb
[   86.202320][ T4471] loop2: detected capacity change from 0 to 128
[   86.226066][ T4227] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   86.268823][ T4227] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   86.323679][ T4471] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   86.345839][ T4227] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.393105][ T4471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.413899][ T4227] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   86.494378][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.587547][ T4478] 9pnet: Insufficient options for proto=fd
[   86.611305][ T4227] usb 1-1: invalid MIDI out EP 0
[   86.668843][ T1325] cfg80211: failed to load regulatory.db
[   86.713077][ T4482] device syzkaller0 entered promiscuous mode
[   87.044186][ T4227] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[   87.057980][ T4487] loop1: detected capacity change from 0 to 2048
[   87.214889][ T4487] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.340876][ T4495] loop3: detected capacity change from 0 to 2048
[   87.474305][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.597092][ T4500] udevd[4500]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.635576][ T4252] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   87.981211][ T4506] loop3: detected capacity change from 0 to 512
[   88.030798][ T4506] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.084642][ T4511] loop0: detected capacity change from 0 to 1764
[   88.105683][ T4252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.182309][ T4252] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   88.194391][ T4506] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.220652][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.241622][ T4511] Invalid ELF header magic: != ELF
[   88.259804][ T1325] usb 1-1: USB disconnect, device number 2
[   88.285380][ T4252] usb 5-1: config 0 descriptor??
[   88.306284][   T26] audit: type=1800 audit(1760995747.445:4): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file2" dev="loop3" ino=16 res=0 errno=0
[   88.453375][ T4513] loop2: detected capacity change from 0 to 256
[   88.560777][ T4513] FAT-fs (loop2): Unrecognized mount option "check" or missing value
[   88.621026][ T4513] kvm: emulating exchange as write
[   88.627623][ T4497] Cannot find set identified by id 65534 to match
[   88.905824][ T4524] loop3: detected capacity change from 0 to 256
[   88.986629][ T4524] =======================================================
[   88.986629][ T4524] WARNING: The mand mount option has been deprecated and
[   88.986629][ T4524]          and is ignored by this kernel. Remove the mand
[   88.986629][ T4524]          option from the mount to silence this warning.
[   88.986629][ T4524] =======================================================
[   89.085971][ T4530] device syzkaller0 entered promiscuous mode
[   89.220619][ T4524] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[   89.727309][ T4537] loop3: detected capacity change from 0 to 1024
[   89.768039][ T4537] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   89.835991][ T4537] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,user_xattr,grpquota,lazytime,abort,grpquota,nomblk_io_submit,journal_dev=0x0000000000004e3e,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: writeback.
[   90.474596][ T4549] loop2: detected capacity change from 0 to 1024
[   91.419827][ T4549] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   91.465740][ T4187] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.518341][ T4558] loop1: detected capacity change from 0 to 1024
[   91.690089][ T4558] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   91.705632][ T4187] usb 1-1: Using ep0 maxpacket: 32
[   91.749384][ T4562] loop2: detected capacity change from 0 to 1024
[   91.826929][ T4187] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   91.904705][ T4187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.916703][ T4562] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   91.944350][   T23] usb 5-1: USB disconnect, device number 3
[   92.006002][ T4187] usb 1-1: config 0 descriptor??
[   92.047711][ T4187] gspca_main: sunplus-2.14.0 probing 041e:400b
[   92.057766][ T4562] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[   92.115550][ T4227] Bluetooth: hci1: command 0x0406 tx timeout
[   92.588051][ T4576] device syzkaller0 entered promiscuous mode
[   92.786962][ T4187] gspca_sunplus: reg_w_riv err -110
[   92.793459][ T4187] sunplus: probe of 1-1:0.0 failed with error -110
[   94.502265][ T4593] loop2: detected capacity change from 0 to 2048
[   94.568536][ T4600] loop1: detected capacity change from 0 to 1024
[   94.723417][ T4600] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   94.726879][ T4593] UDF-fs: bad mount option "partition=000000000000000000Q2" or missing value
[   95.539270][ T4615] loop3: detected capacity change from 0 to 512
[   95.720506][ T4624] loop2: detected capacity change from 0 to 8
[   95.820634][ T4624] usb usb8: usbfs: process 4624 (syz.2.99) did not claim interface 0 before use
[   95.871888][ T4615] EXT4-fs (loop3): Test dummy encryption mode enabled
[   95.916600][ T4615] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   95.944099][ T4615] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   95.968010][ T4615] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   96.906857][ T4615] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[   97.470825][ T4665] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   97.711776][ T4296] usb 1-1: USB disconnect, device number 3
[   98.063192][ T4675] loop4: detected capacity change from 0 to 128
[   98.145638][ T4187] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.467311][ T4675] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   98.626028][ T4187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.708471][ T4187] usb 4-1: config 0 has no interfaces?
[   98.714025][ T4187] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[   98.883093][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.032787][ T4675] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   99.548348][ T4187] usb 4-1: config 0 descriptor??
[   99.804047][ T1107] usb 4-1: USB disconnect, device number 2
[   99.916751][ T2857] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.641063][ T4296] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.036397][ T4722] loop4: detected capacity change from 0 to 128
[  101.258726][ T4722] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  101.289098][ T2857] usb 2-1: Using ep0 maxpacket: 8
[  101.433328][ T4728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  101.453681][ T4722] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  101.495906][ T2857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  101.516177][ T2857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.541149][ T4296] usb 1-1: Using ep0 maxpacket: 32
[  101.561386][ T2857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.588636][ T2857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  101.625838][ T2857] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  101.639749][ T2857] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  101.648914][ T2857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.668887][ T2857] usb 2-1: config 0 descriptor??
[  101.676543][ T4296] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  101.700960][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.719341][ T4296] usb 1-1: config 0 descriptor??
[  101.777905][ T4296] gspca_main: sunplus-2.14.0 probing 041e:400b
[  101.788277][ T4196] Bluetooth: hci5: urb ffff8880234e9b00 submission failed (90)
[  101.855900][ T4739] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  101.904456][ T1325] usb 2-1: USB disconnect, device number 2
[  101.918104][ T4744] loop4: detected capacity change from 0 to 1024
[  101.943442][ T4739] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  101.986056][ T4739] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  101.997684][ T4749] loop1: detected capacity change from 0 to 8
[  102.048518][ T4739] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  102.054021][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  102.062841][ T4739] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  102.079751][ T4739] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  102.088926][ T4739] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  102.099008][ T4739] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  102.108367][ T4739] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  102.525542][ T4296] gspca_sunplus: reg_w_riv err -110
[  102.530864][ T4296] sunplus: probe of 1-1:0.0 failed with error -110
[  103.701669][ T4777] loop4: detected capacity change from 0 to 1024
[  103.816154][ T4777] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  103.848989][ T4784] loop1: detected capacity change from 0 to 512
[  103.897372][ T4777] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  103.939035][ T4786] create_pit_timer: 4 callbacks suppressed
[  103.939051][ T4786] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  104.028070][ T4784] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  104.067630][ T4784] EXT4-fs (loop1): orphan cleanup on readonly fs
[  104.085166][ T4786] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  104.153648][ T4784] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  104.179895][ T4794] loop3: detected capacity change from 0 to 8
[  104.192774][ T4786] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  104.206126][ T4784] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  104.228396][ T4784] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.145: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  104.244674][ T4786] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  104.271715][ T4786] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  104.273972][ T4796] loop4: detected capacity change from 0 to 1024
[  104.293048][ T4786] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  104.305943][ T4784] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.145: couldn't read orphan inode 13 (err -117)
[  104.308770][ T4786] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  104.336980][ T4784] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback.
[  104.377343][ T4786] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  104.396152][ T4786] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  104.421576][ T4786] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  104.441332][ T4796] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  104.459563][ T2857] usb 1-1: USB disconnect, device number 4
[  104.605539][ T4784] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  105.963503][ T4828] loop0: detected capacity change from 0 to 1024
[  105.996437][ T4644] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  106.018169][ T4832] loop1: detected capacity change from 0 to 2048
[  106.080607][ T4832] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  106.094471][ T4832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.132809][ T4828] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  106.222855][ T4828] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  106.252005][ T2857] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  106.259645][ T4227] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  106.407169][ T4843] loop0: detected capacity change from 0 to 16
[  106.441205][ T4644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.452718][ T4644] usb 3-1: New USB device found, idVendor=056a, idProduct=0005, bcdDevice= 0.00
[  106.467789][ T4644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.480035][ T4644] usb 3-1: config 0 descriptor??
[  106.555784][ T2857] usb 4-1: Using ep0 maxpacket: 32
[  106.623045][ T4843] erofs: (device loop0): mounted with root inode @ nid 36.
[  106.685673][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.696953][ T2857] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  106.713798][ T2857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.759873][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.776694][ T4850] loop0: detected capacity change from 0 to 1024
[  106.817359][ T2857] usb 4-1: config 0 descriptor??
[  106.839686][ T4856] capability: warning: `syz.1.168' uses deprecated v2 capabilities in a way that may be insecure
[  106.846686][ T4850] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  107.088008][ T2857] gspca_main: sunplus-2.14.0 probing 041e:400b
[  107.897569][ T4227] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  107.907083][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.915119][ T4227] usb 5-1: Product: syz
[  107.920455][ T4227] usb 5-1: Manufacturer: syz
[  107.925091][ T4227] usb 5-1: SerialNumber: syz
[  108.042488][ T4874] loop0: detected capacity change from 0 to 1024
[  108.074708][ T4874] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  108.162958][ T4874] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  108.475047][ T2857] gspca_sunplus: reg_w_riv err -110
[  108.480547][ T2857] sunplus: probe of 4-1:0.0 failed with error -110
[  108.488176][ T4227] usb 5-1: skipping empty audio interface (v1)
[  108.511191][ T4227] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  108.534867][ T4227] usb 5-1: USB disconnect, device number 4
[  109.295897][ T1107] usb 3-1: USB disconnect, device number 2
[  109.306886][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.253684][ T4897] loop2: detected capacity change from 0 to 512
[  112.113302][ T4897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  112.121409][ T4897] System zones: 1-12
[  112.126137][ T4897] EXT4-fs (loop2): orphan cleanup on readonly fs
[  112.138653][ T4897] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.178: invalid indirect mapped block 8 (level 2)
[  112.935490][ T4897] EXT4-fs (loop2): 1 truncate cleaned up
[  112.941195][ T4897] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.947005][ T4904] loop4: detected capacity change from 0 to 1024
[  113.180537][ T4904] hfsplus: failed to load catalog file
[  113.275287][ T4910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.183'.
[  113.353212][ T4910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.183'.
[  113.377741][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'.
[  113.390618][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.429176][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.432011][ T4910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'.
[  113.443429][ T4904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.483304][ T4914] loop0: detected capacity change from 0 to 1024
[  113.538474][ T4904] device bridge_slave_0 left promiscuous mode
[  113.544770][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.578560][ T4904] device bridge_slave_1 left promiscuous mode
[  113.586702][ T4914] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.593297][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.619190][ T4904] bond0: (slave bond_slave_0): Releasing backup interface
[  113.684604][ T4904] bond0: (slave bond_slave_1): Releasing backup interface
[  113.742760][   T13] usb 4-1: USB disconnect, device number 3
[  113.791160][ T4923] loop3: detected capacity change from 0 to 1764
[  113.795301][ T4914] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  113.938696][ T4904] team0: Port device team_slave_0 removed
[  113.946716][ T4923] Invalid ELF header magic: != ELF
[  113.979783][ T4925] loop0: detected capacity change from 0 to 512
[  114.006157][ T4904] team0: Port device team_slave_1 removed
[  114.023123][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.055710][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.086410][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.099579][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.103772][ T4925] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.190: iget: bad i_size value: 38620345925642
[  114.225067][ T4925] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.190: couldn't read orphan inode 15 (err -117)
[  114.242249][ T4925] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.263964][   T26] audit: type=1800 audit(1760995773.405:5): pid=4925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.190" name="file2" dev="loop0" ino=16 res=0 errno=0
[  114.267006][ T4925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem
[  114.331389][ T4925] EXT4-fs error (device loop0): ext4_dirty_inode:6046: inode #16: comm syz.0.190: mark_inode_dirty error
[  114.407513][ T4925] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #16: block 27: comm syz.0.190: lblock 0 mapped to illegal pblock 27 (length 9)
[  114.436895][ T4925] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #16: block 35: comm syz.0.190: lblock 8 mapped to illegal pblock 35 (length 1)
[  114.507820][ T4925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem
[  114.512342][ T3069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.555941][ T4925] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.190: mark_inode_dirty error
[  114.635628][ T2857] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.693426][ T3069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.851778][ T3069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.963901][ T3069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.007778][ T2857] usb 5-1: config 0 has no interfaces?
[  115.176495][ T2857] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.195539][ T2857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.203794][ T2857] usb 5-1: Product: syz
[  115.218295][ T2857] usb 5-1: Manufacturer: syz
[  115.222945][ T2857] usb 5-1: SerialNumber: syz
[  115.249470][ T2857] usb 5-1: config 0 descriptor??
[  115.327733][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.605606][ T1107] usb 4-1: Using ep0 maxpacket: 32
[  115.725899][ T1107] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  115.735008][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.792439][ T4967] loop2: detected capacity change from 0 to 512
[  115.817887][ T1107] usb 4-1: config 0 descriptor??
[  115.827630][ T4947] chnl_net:caif_netlink_parms(): no params data found
[  115.841601][ T2857] usb 5-1: USB disconnect, device number 5
[  115.893856][ T4971] loop0: detected capacity change from 0 to 1024
[  115.907745][ T1107] gspca_main: sunplus-2.14.0 probing 041e:400b
[  115.958007][ T4967] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.204: invalid indirect mapped block 256 (level 2)
[  115.979208][ T4967] EXT4-fs (loop2): 2 truncates cleaned up
[  115.985002][ T4967] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  116.029572][ T4971] hfsplus: failed to load catalog file
[  116.175673][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.194840][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.210635][ T4947] device bridge_slave_0 entered promiscuous mode
[  116.279967][ T1273] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap
[  116.303223][ T1273] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  116.321228][ T1273] EXT4-fs (loop2): This should not happen!! Data will be lost
[  116.321228][ T1273] 
[  116.331757][ T1273] EXT4-fs (loop2): Total free blocks count 0
[  116.347329][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  116.351810][ T1273] EXT4-fs (loop2): Free/Dirty block details
[  116.360654][ T1273] EXT4-fs (loop2): free_blocks=0
[  116.370941][ T1273] EXT4-fs (loop2): dirty_blocks=32
[  116.388501][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.445193][ T1273] EXT4-fs (loop2): Block reservation details
[  116.458175][ T4986] udc-core: couldn't find an available UDC or it's busy
[  116.469626][ T4986] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  116.487767][ T1273] EXT4-fs (loop2): i_reserved_data_blocks=32
[  116.539442][ T4971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.655702][ T1107] gspca_sunplus: reg_w_riv err -110
[  116.661015][ T1107] sunplus: probe of 4-1:0.0 failed with error -110
[  116.678888][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.700821][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.736607][ T4947] device bridge_slave_1 entered promiscuous mode
[  116.891518][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.981884][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.066236][ T4644] Bluetooth: hci1: command 0x0409 tx timeout
[  117.161858][ T4947] team0: Port device team_slave_0 added
[  117.216545][ T5006] loop2: detected capacity change from 0 to 128
[  117.256789][ T4947] team0: Port device team_slave_1 added
[  117.393339][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.418345][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.422573][ T5009] loop0: detected capacity change from 0 to 2048
[  117.505446][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.546670][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.553660][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.605681][ T5009] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  117.675585][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.704765][ T5009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.049435][ T4947] device hsr_slave_0 entered promiscuous mode
[  118.090623][ T4947] device hsr_slave_1 entered promiscuous mode
[  118.115609][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.146358][ T4947] Cannot create hsr debugfs directory
[  118.320353][ T3069] device hsr_slave_0 left promiscuous mode
[  118.445603][ T3069] device hsr_slave_1 left promiscuous mode
[  118.452548][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.501063][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.528609][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.557555][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.582320][ T3069] device bridge_slave_1 left promiscuous mode
[  118.618437][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.669833][ T3069] device bridge_slave_0 left promiscuous mode
[  118.689680][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.768329][ T1325] usb 4-1: USB disconnect, device number 4
[  118.824777][ T3069] device veth1_macvtap left promiscuous mode
[  118.868236][ T3069] device veth0_macvtap left promiscuous mode
[  118.888003][ T3069] device veth1_vlan left promiscuous mode
[  118.899849][ T5034] loop3: detected capacity change from 0 to 512
[  118.913232][ T3069] device veth0_vlan left promiscuous mode
[  118.939563][ T5034] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  119.053615][ T5034] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  119.145850][ T4644] Bluetooth: hci1: command 0x041b tx timeout
[  119.162102][ T5034] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.335207][ T5041] loop4: detected capacity change from 0 to 1764
[  119.483549][ T5041] Invalid ELF header magic: != ELF
[  119.702665][ T5049] loop3: detected capacity change from 0 to 1024
[  119.715038][ T5051] loop4: detected capacity change from 0 to 256
[  119.754601][ T5051] exfat: Bad value for 'uid'
[  119.848650][ T3069] team0 (unregistering): Port device team_slave_1 removed
[  119.858863][ T5049] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.959332][ T3069] team0 (unregistering): Port device team_slave_0 removed
[  120.168731][ T3069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.215935][ T3069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.402703][ T3069] bond0 (unregistering): Released all slaves
[  120.463179][ T1325] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  121.247403][ T4227] Bluetooth: hci1: command 0x040f tx timeout
[  121.345532][ T1325] usb 5-1: device descriptor read/64, error -71
[  121.542747][ T4947] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  121.566853][ T5075] loop0: detected capacity change from 0 to 1764
[  121.598356][ T4947] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  121.615464][ T1325] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  121.651455][ T5075] Invalid ELF header magic: != ELF
[  121.666589][ T4947] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  121.684655][ T4947] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  121.761516][ T5090] loop2: detected capacity change from 0 to 128
[  121.800675][ T5093] loop3: detected capacity change from 0 to 512
[  121.808238][ T1325] usb 5-1: device descriptor read/64, error -71
[  121.839896][ T5090] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  121.925669][ T1325] usb usb5-port1: attempt power cycle
[  121.951333][ T5090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  122.020078][ T5090] ext2 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.156949][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.178717][ T5093] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,,errors=continue. Quota mode: writeback.
[  122.195624][ T5093] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.236773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.251598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.319365][ T4947] 8021q: adding VLAN 0 to HW filter on device team0
[  122.335808][ T1325] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  122.345253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.390166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.415965][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.423072][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.445636][ T1325] usb 5-1: device descriptor read/8, error -71
[  122.484112][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.515797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.532015][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.541717][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.548863][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.570481][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.608093][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.622907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.643816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.686910][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.701758][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.723376][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.725654][ T1325] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  122.754909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.811757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.835698][ T1325] usb 5-1: device descriptor read/8, error -71
[  122.852361][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.914932][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.935098][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.955680][ T1325] usb usb5-port1: unable to enumerate USB device
[  123.767927][ T4644] Bluetooth: hci1: command 0x0419 tx timeout
[  123.941415][ T5132] loop3: detected capacity change from 0 to 128
[  124.172618][ T5132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.270998][ T5132] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  124.334461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.344616][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.354334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.411084][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.434409][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.528412][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.628775][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.689160][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.790698][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  124.915527][ T2857] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  124.917639][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  125.016861][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  125.125719][ T2857] usb 1-1: device descriptor read/64, error -71
[  125.185049][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  125.205041][ T5152] 9pnet: p9_fd_create_tcp (5152): problem connecting socket to 127.0.0.1
[  125.252225][ T5162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  125.259135][ T5162] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  125.265666][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  125.285810][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  125.339524][ T5173] vhci_hcd: connection closed
[  125.341957][ T5162] vhci_hcd vhci_hcd.0: Device attached
[  125.364795][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.405556][ T2857] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  125.493344][    T9] vhci_hcd: stop threads
[  125.499491][    T9] vhci_hcd: release socket
[  125.536620][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.556478][ T4644] vhci_hcd: vhci_device speed not set
[  125.806627][ T4644] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  125.875587][ T2857] usb 1-1: device descriptor read/64, error -71
[  125.970695][ T4947] device veth0_vlan entered promiscuous mode
[  126.238341][ T2857] usb usb1-port1: attempt power cycle
[  126.346897][    T9] vhci_hcd: disconnect device
[  126.370798][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  126.408627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  126.435267][ T4947] device veth1_vlan entered promiscuous mode
[  126.589872][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  126.606030][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  126.725546][ T2857] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  126.772082][ T4947] device veth0_macvtap entered promiscuous mode
[  126.835832][ T2857] usb 1-1: device descriptor read/8, error -71
[  126.883953][ T4947] device veth1_macvtap entered promiscuous mode
[  126.964818][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.975483][ T4296] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.989971][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.030744][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  127.115473][ T2857] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  127.143234][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.159717][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.225568][ T2857] usb 1-1: device descriptor read/8, error -71
[  127.278545][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  127.324437][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  127.352179][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  127.355604][ T4296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.370743][ T2857] usb usb1-port1: unable to enumerate USB device
[  127.415482][ T4296] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  127.421281][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  127.446849][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.474864][ T4296] usb 4-1: config 0 descriptor??
[  127.488630][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.526104][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.574343][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  127.614585][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  127.664338][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.694090][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  127.712852][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  127.752830][ T5212] loop0: detected capacity change from 0 to 1024
[  127.781044][ T4947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.790666][ T5199] Cannot find set identified by id 65534 to match
[  127.815830][ T4947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.824572][ T4947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.871701][ T5212] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.881774][ T4947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.966659][ T5212] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  128.376316][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.439437][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.488104][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  128.490350][ T5227] loop4: detected capacity change from 0 to 512
[  128.509793][ T4316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.536617][ T4316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.612917][ T5227] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.265: iget: bad i_size value: 38620345925642
[  128.633592][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  128.766856][ T5227] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.265: couldn't read orphan inode 15 (err -117)
[  128.795595][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.855223][   T26] audit: type=1800 audit(1760995787.995:6): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.265" name="file2" dev="loop4" ino=16 res=0 errno=0
[  129.182184][ T5242] loop0: detected capacity change from 0 to 256
[  129.964587][ T5242] exfat: Bad value for 'uid'
[  131.065756][ T4644] vhci_hcd: vhci_device speed not set
[  131.082346][ T5267] loop2: detected capacity change from 0 to 1024
[  131.215336][ T5267] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.240152][ T5271] loop4: detected capacity change from 0 to 1024
[  131.363863][ T5267] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  131.460790][ T5271] hfsplus: failed to load catalog file
[  132.531331][ T5291] loop4: detected capacity change from 0 to 256
[  132.600035][ T5291] exfat: Bad value for 'uid'
[  132.675008][ T4296] usb 4-1: USB disconnect, device number 5
[  132.750577][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.757446][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.778084][ T5287] loop2: detected capacity change from 0 to 8192
[  132.785074][ T5302] fuse: Bad value for 'fd'
[  132.836761][ T5303] loop4: detected capacity change from 0 to 512
[  132.883335][ T5303] EXT4-fs (loop4): orphan cleanup on readonly fs
[  132.921623][ T5303] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #11: block 1728053262: comm syz.4.283: lblock 0 mapped to illegal pblock 1728053262 (length 1)
[  133.143964][ T5303] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  133.232887][ T5303] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.283: corrupted inode contents
[  133.274706][ T5317] loop3: detected capacity change from 0 to 1024
[  133.312622][ T5303] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #15: comm syz.4.283: mark_inode_dirty error
[  133.444762][ T5303] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #15: comm syz.4.283: corrupted inode contents
[  133.481331][ T5303] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2971: inode #15: comm syz.4.283: mark_inode_dirty error
[  134.074761][ T5317] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.206733][ T5303] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #15: comm syz.4.283: mark inode dirty (error -117)
[  134.335560][ T5303] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117)
[  134.344919][ T5303] EXT4-fs (loop4): 1 orphan inode deleted
[  134.350911][ T5303] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  134.469445][ T5317] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  134.536186][ T5303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.283'.
[  134.933302][ T5342] loop4: detected capacity change from 0 to 256
[  135.046769][ T5342] exfat: Bad value for 'uid'
[  138.154309][ T5405] loop2: detected capacity change from 0 to 512
[  138.993895][ T5405] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback.
[  139.072460][ T5405] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.147551][ T5420] loop3: detected capacity change from 0 to 512
[  139.204915][ T5420] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102]
[  139.225676][ T5420] System zones: 1-12
[  139.257422][ T5420] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.311: error while reading EA inode 32 err=-116
[  139.363954][ T5420] EXT4-fs (loop3): Remounting filesystem read-only
[  139.371526][ T5420] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  139.385241][ T5420] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.311: error while reading EA inode 32 err=-116
[  139.413182][ T5420] EXT4-fs (loop3): Remounting filesystem read-only
[  139.471033][ T5420] EXT4-fs (loop3): 1 orphan inode deleted
[  139.534127][ T5420] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none.
[  141.221235][ T1325] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  141.279321][ T1325] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  141.971727][ T5494] rtc_cmos 00:00: Alarms can be up to one day in the future
[  143.924047][ T5520] xt_nat: multiple ranges no longer supported
[  144.356150][ T5534] loop2: detected capacity change from 0 to 256
[  148.361113][ T5572] loop2: detected capacity change from 0 to 1024
[  148.657903][ T5572] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  148.671609][ T5572] jbd2_journal_init_inode: Cannot locate journal superblock
[  148.679126][ T5572] EXT4-fs (loop2): Could not load journal inode
[  149.322118][ T5594] device syzkaller0 entered promiscuous mode
[  149.584724][ T5599] loop2: detected capacity change from 0 to 512
[  150.689724][ T5599] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.367: iget: bad i_size value: 38620345925642
[  150.742016][ T5599] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.367: couldn't read orphan inode 15 (err -117)
[  151.813604][ T5599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  152.711065][ T5626] loop3: detected capacity change from 0 to 256
[  152.745788][ T5612] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  152.840818][ T5626] exfat: Bad value for 'uid'
[  153.257642][ T4227] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  153.293371][ T4227] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  156.071385][ T5681] loop2: detected capacity change from 0 to 512
[  156.357783][ T5681] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.387: iget: bad i_size value: 38620345925642
[  156.454197][ T5681] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.387: couldn't read orphan inode 15 (err -117)
[  156.494080][ T5681] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  156.602859][   T26] audit: type=1800 audit(1760995815.745:7): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.387" name="file2" dev="loop2" ino=16 res=0 errno=0
[  156.705593][ T4296] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.822164][ T5698] fuse: Bad value for 'fd'
[  156.975533][ T4296] usb 4-1: Using ep0 maxpacket: 32
[  157.115560][ T4296] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  157.126636][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.170507][ T4296] usb 4-1: config 0 descriptor??
[  157.247584][ T4296] gspca_main: sunplus-2.14.0 probing 041e:400b
[  157.643697][ T5714] xt_nat: multiple ranges no longer supported
[  158.176057][ T4296] gspca_sunplus: reg_w_riv err -110
[  158.181985][ T4296] sunplus: probe of 4-1:0.0 failed with error -110
[  158.476916][ T5721] udc-core: couldn't find an available UDC or it's busy
[  158.645922][ T5721] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  159.941153][ T5741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.781895][    T7] usb 4-1: USB disconnect, device number 6
[  163.602704][ T5797] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.728660][ T5813] loop3: detected capacity change from 0 to 2048
[  164.884243][ T5813] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  164.940320][ T5813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.636077][ T5839] fuse: Bad value for 'fd'
[  170.632299][ T5906] fuse: Bad value for 'fd'
[  171.212032][ T5924] Cannot find add_set index 1 as target
[  172.272298][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.282717][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.294641][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.303804][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.313023][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.323537][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.332807][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.342893][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.375817][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.459092][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'.
[  172.573475][ T4373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.700417][ T5964] loop2: detected capacity change from 0 to 1024
[  172.777303][ T5964] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.914011][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  172.979720][ T5940] chnl_net:caif_netlink_parms(): no params data found
[  173.065181][ T4373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.256133][ T4373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.400037][ T4373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.715836][ T2857] Bluetooth: hci4: command 0x0409 tx timeout
[  173.773166][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.802794][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.841534][ T5940] device bridge_slave_0 entered promiscuous mode
[  173.887852][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.907132][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.936561][ T5940] device bridge_slave_1 entered promiscuous mode
[  174.143709][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.224702][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.470706][ T5940] team0: Port device team_slave_0 added
[  174.516562][ T5940] team0: Port device team_slave_1 added
[  174.659412][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.677483][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.774453][ T6014] loop2: detected capacity change from 0 to 256
[  174.818353][ T6014] FAT-fs (loop2): Unrecognized mount option "check" or missing value
[  174.828015][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.076746][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.083729][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.205891][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.442655][ T5940] device hsr_slave_0 entered promiscuous mode
[  175.493221][ T5940] device hsr_slave_1 entered promiscuous mode
[  175.622621][ T6035] loop2: detected capacity change from 0 to 1024
[  175.682315][ T6038] Cannot find add_set index 1 as target
[  175.691320][ T6035] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.785705][ T1325] Bluetooth: hci4: command 0x041b tx timeout
[  175.874289][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none.
[  176.164623][ T5940] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  176.399112][ T5940] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  176.432052][ T5940] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  176.498838][ T5940] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  177.490283][ T6073] loop3: detected capacity change from 0 to 16
[  177.529271][ T6073] erofs: (device loop3): mounted with root inode @ nid 36.
[  177.538580][ T6063] __nla_validate_parse: 45 callbacks suppressed
[  177.538601][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.572962][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.589100][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.627195][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.795934][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.804912][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.814112][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.823256][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.832410][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.841575][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.5.467'.
[  177.895959][ T1325] Bluetooth: hci4: command 0x040f tx timeout
[  178.792189][ T6096] loop3: detected capacity change from 0 to 1024
[  178.929378][ T6096] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  179.262019][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.359205][ T4373] device hsr_slave_0 left promiscuous mode
[  179.379191][ T4373] device hsr_slave_1 left promiscuous mode
[  179.403125][ T6111] loop3: detected capacity change from 0 to 128
[  179.420870][ T4373] device veth1_macvtap left promiscuous mode
[  179.464114][ T4373] device veth0_macvtap left promiscuous mode
[  179.464505][ T6111] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  179.503773][ T4373] device veth1_vlan left promiscuous mode
[  179.518636][ T6111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.586012][ T4373] device veth0_vlan left promiscuous mode
[  180.025511][ T1325] Bluetooth: hci4: command 0x0419 tx timeout
[  180.158436][   T26] audit: type=1800 audit(1760995839.305:8): pid=6111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=94 res=0 errno=0
[  180.272891][ T6116] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  180.395934][ T6116] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  180.851821][ T4373] bond0 (unregistering): Released all slaves
[  180.959787][ T5940] 8021q: adding VLAN 0 to HW filter on device team0
[  180.968257][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.981173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.081665][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.093721][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.109936][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.117150][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.133351][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.142916][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.160893][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.168115][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.218607][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.259894][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.306472][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.329081][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.342502][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.356338][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.431989][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.476833][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.487279][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.496640][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.506107][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.514779][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.537294][ T5940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  182.599435][ T6151] loop3: detected capacity change from 0 to 512
[  183.482067][ T6151] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.487: iget: bad i_size value: 38620345925642
[  183.556253][ T6151] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.487: couldn't read orphan inode 15 (err -117)
[  183.586058][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.756890][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.764535][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.792488][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.634396][ T6190] loop3: detected capacity change from 0 to 128
[  184.795085][ T6190] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  184.830399][ T6190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.134327][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  185.155235][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  185.249517][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  185.268992][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  185.310826][ T5940] device veth0_vlan entered promiscuous mode
[  185.323641][   T26] audit: type=1800 audit(1760995844.455:9): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.492" name="file1" dev="loop3" ino=94 res=0 errno=0
[  185.348189][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  185.391816][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  185.452857][ T5940] device veth1_vlan entered promiscuous mode
[  185.494727][ T6195] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  185.563877][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  185.586097][ T6195] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  185.599826][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  185.646042][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  185.691356][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  185.729984][ T5940] device veth0_macvtap entered promiscuous mode
[  185.772744][ T5940] device veth1_macvtap entered promiscuous mode
[  185.863476][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.902644][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.955719][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.985452][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.031169][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  186.070859][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.134098][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.208020][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  186.218780][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  186.250977][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  186.332663][ T3069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  186.374777][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.455096][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.532660][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.587775][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.625067][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  186.712679][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  186.729705][ T6223] loop2: detected capacity change from 0 to 16
[  186.781811][ T6223] erofs: (device loop2): mounted with root inode @ nid 36.
[  186.808585][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  187.005987][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  187.958019][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  188.055797][ T5940] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.097350][ T5940] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.119487][ T6232] loop3: detected capacity change from 0 to 512
[  188.151668][ T5940] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.682982][ T5940] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.015732][ T6232] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.502: iget: bad i_size value: 38620345925642
[  189.084458][ T6241] loop2: detected capacity change from 0 to 256
[  189.119906][ T6232] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.502: couldn't read orphan inode 15 (err -117)
[  189.171226][ T6232] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  189.379192][ T1220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.439345][ T1220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.548572][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  189.579544][ T6247] loop3: detected capacity change from 0 to 128
[  189.602728][ T4645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.636437][ T6247] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  189.658556][ T4645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.717906][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.744353][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  190.077111][ T6259] loop6: detected capacity change from 0 to 512
[  190.246688][ T6259] EXT4-fs (loop6): orphan cleanup on readonly fs
[  190.333623][ T6259] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #11: block 1728053262: comm syz.6.446: lblock 0 mapped to illegal pblock 1728053262 (length 1)
[  190.413954][   T26] audit: type=1800 audit(1760995849.555:10): pid=6247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.505" name="file1" dev="loop3" ino=94 res=0 errno=0
[  190.440468][ T6259] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  190.454461][ T6259] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #15: comm syz.6.446: corrupted inode contents
[  190.473438][ T6259] EXT4-fs error (device loop6): ext4_dirty_inode:6046: inode #15: comm syz.6.446: mark_inode_dirty error
[  190.526689][ T6259] EXT4-fs error (device loop6): ext4_do_update_inode:5210: inode #15: comm syz.6.446: corrupted inode contents
[  190.574713][ T6259] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #15: comm syz.6.446: mark_inode_dirty error
[  190.634944][ T6259] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2974: inode #15: comm syz.6.446: mark inode dirty (error -117)
[  190.635585][ T6255] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  190.692636][ T6259] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117)
[  190.735735][ T6259] EXT4-fs (loop6): 1 orphan inode deleted
[  190.761313][ T6259] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  190.764855][ T6255] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  191.832599][ T4644] Bluetooth: hci3: command 0x0406 tx timeout
[  191.839725][ T4644] Bluetooth: hci2: command 0x0406 tx timeout
[  191.846544][ T4644] Bluetooth: hci0: command 0x0406 tx timeout
[  194.189706][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.201353][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.386912][ T6320] fuse: Unknown parameter 'user_id00000000000000000000'
[  195.114048][ T6339] xt_nat: multiple ranges no longer supported
[  196.312419][ T6357] loop2: detected capacity change from 0 to 1024
[  196.488780][ T6357] hfsplus: failed to load catalog file
[  196.496237][ T6362] fuse: Unknown parameter 'user_id00000000000000000000'
[  198.320985][ T6384] xt_nat: multiple ranges no longer supported
[  198.543134][ T6366] Cannot find add_set index 1 as target
[  198.586830][   T21] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  198.606579][ T6366] __nla_validate_parse: 44 callbacks suppressed
[  198.606593][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  198.716571][   T21] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  198.781334][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  198.808393][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  198.879719][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  198.905858][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  198.988229][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.029257][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.085646][ T4644] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  199.097883][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.219391][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.292515][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'.
[  199.525665][ T4644] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  199.563738][ T4644] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  199.617227][ T4644] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.735502][ T4644] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  199.778780][ T4644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.829614][ T6426] fuse: Bad value for 'fd'
[  199.858796][ T4644] usb 3-1: invalid MIDI out EP 0
[  200.026057][ T4644] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  200.081449][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.136802][ T6391] xt_hashlimit: size too large, truncated to 1048576
[  200.487521][ T4231] usb 3-1: USB disconnect, device number 3
[  200.529458][ T6435] tipc: Started in network mode
[  200.543399][ T6435] tipc: Node identity ea7cea7ae187, cluster identity 4711
[  200.578758][ T6435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.592986][ T4238] tipc: Node number set to 201058938
[  202.115978][ T6434] tipc: Disabling bearer <eth:syzkaller0>
[  202.324164][ T4252] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  202.351846][ T4252] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  202.573993][ T6475] Cannot find add_set index 1 as target
[  202.802649][ T6480] fuse: Bad value for 'fd'
[  203.069771][ T6483] ODEBUG: Out of memory. ODEBUG disabled
[  203.163015][ T6490] loop3: detected capacity change from 0 to 128
[  203.510230][ T6483] syz.6.558 (6483): drop_caches: 2
[  203.561791][ T6490] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  203.607378][ T6490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.075623][ T4278] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  205.094605][   T26] audit: type=1800 audit(1760995864.235:11): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.561" name="file1" dev="loop3" ino=94 res=0 errno=0
[  205.378217][ T6519] tipc: Started in network mode
[  205.403851][ T6519] tipc: Node identity c271ecb49f25, cluster identity 4711
[  205.435664][ T4278] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  205.456147][ T6519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.464542][ T6501] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  205.466010][ T4278] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  205.504521][ T6519] tipc: Resetting bearer <eth:syzkaller0>
[  205.545801][ T4278] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.575411][ T4278] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  205.605424][ T4278] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.625463][ T6501] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  205.688539][ T4278] usb 7-1: invalid MIDI out EP 0
[  205.696493][ T6518] tipc: Disabling bearer <eth:syzkaller0>
[  205.814030][ T4278] snd-usb-audio: probe of 7-1:27.0 failed with error -22
[  205.872499][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.936516][ T6503] xt_hashlimit: size too large, truncated to 1048576
[  206.006785][ T4227] usb 7-1: USB disconnect, device number 2
[  206.326828][ T4227] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  206.380486][ T4227] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  207.139331][ T6565] __nla_validate_parse: 99 callbacks suppressed
[  207.139350][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.237607][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.316505][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.489487][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.499547][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.535733][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.596616][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.643700][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.657920][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  207.764917][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  208.655498][ T4644] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  209.106233][ T4644] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  209.114327][ T4644] usb 7-1: config 0 has no interface number 0
[  209.206100][ T4644] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  209.305415][ T4644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.343866][ T4644] usb 7-1: config 0 descriptor??
[  209.405443][ T4252] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  209.407733][ T4644] usb 7-1: selecting invalid altsetting 1
[  209.474607][ T4644] dvb_ttusb_budget: ttusb_init_controller: error
[  209.543927][ T4644] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  209.791964][ T4644] DVB: Unable to find symbol cx22700_attach()
[  209.795628][ T4252] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  209.835608][ T4252] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.855096][ T4644] DVB: Unable to find symbol tda10046_attach()
[  209.861707][ T4644] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  209.875510][ T4252] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.905455][ T4252] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.933617][ T4644] usb 7-1: USB disconnect, device number 3
[  209.935568][ T4252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.029300][ T4252] usb 3-1: invalid MIDI out EP 0
[  210.111489][ T4252] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  210.179605][ T4333] udevd[4333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.284461][ T6598] xt_hashlimit: size too large, truncated to 1048576
[  210.367705][ T4231] usb 3-1: USB disconnect, device number 4
[  210.695463][ T4252] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  211.065689][ T4252] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.095454][ T4252] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  211.132757][ T4252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.202920][ T4252] usb 7-1: config 0 descriptor??
[  211.543053][ T6634] Cannot find set identified by id 65534 to match
[  211.556054][ T6655] fuse: Unknown parameter '0x0000000000000005'
[  215.194256][ T4227] usb 7-1: USB disconnect, device number 4
[  215.704145][ T6716] loop6: detected capacity change from 0 to 1024
[  215.860192][ T6717] fuse: Unknown parameter '0x0000000000000005'
[  216.030162][ T6716] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  219.476096][ T6805] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  219.482660][ T6805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  219.527320][ T6805] vhci_hcd vhci_hcd.0: Device attached
[  219.548446][ T6806] vhci_hcd: connection closed
[  219.568446][ T5247] vhci_hcd: stop threads
[  219.585642][ T5247] vhci_hcd: release socket
[  219.600916][ T5247] vhci_hcd: disconnect device
[  221.154379][ T6870] loop2: detected capacity change from 0 to 1764
[  221.395778][ T6870] Invalid ELF header magic: != ELF
[  222.539471][ T6907] loop2: detected capacity change from 0 to 1024
[  222.749293][ T6907] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  223.121541][ T6931] loop6: detected capacity change from 0 to 256
[  223.870568][ T6931] FAT-fs (loop6): Unrecognized mount option "check" or missing value
[  224.690801][ T6956] loop6: detected capacity change from 0 to 512
[  224.891766][ T6956] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.679: iget: bad i_size value: 38620345925642
[  224.935765][ T6956] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.679: couldn't read orphan inode 15 (err -117)
[  225.029393][ T6956] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  225.098709][ T5183] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  225.112315][   T26] audit: type=1800 audit(1760995884.255:12): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.679" name="file2" dev="loop6" ino=16 res=0 errno=0
[  225.378243][ T6977] loop6: detected capacity change from 0 to 16
[  225.441454][ T6977] erofs: (device loop6): mounted with root inode @ nid 36.
[  225.555741][ T5183] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  225.591205][ T5183] usb 3-1: config 0 has no interface number 0
[  225.624536][ T5183] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  225.671174][ T5183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.779857][ T5183] usb 3-1: config 0 descriptor??
[  225.844273][ T5183] usb 3-1: selecting invalid altsetting 1
[  225.868317][ T5183] dvb_ttusb_budget: ttusb_init_controller: error
[  225.904607][ T5183] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  226.155289][ T5183] DVB: Unable to find symbol cx22700_attach()
[  226.210411][ T5183] DVB: Unable to find symbol tda10046_attach()
[  226.217947][ T5183] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  226.281377][ T5183] usb 3-1: USB disconnect, device number 5
[  226.451324][ T7016] process 'syz.3.702' launched './file1' with NULL argv: empty string added
[  226.962744][ T7033] loop6: detected capacity change from 0 to 1764
[  227.107393][ T7033] Invalid ELF header magic: != ELF
[  227.369559][ T7043] loop6: detected capacity change from 0 to 128
[  227.452985][ T7043] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  227.486676][ T7043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.680463][ T7049] loop2: detected capacity change from 0 to 128
[  227.932528][ T7049] attempt to access beyond end of device
[  227.932528][ T7049] loop2: rw=2049, want=234, limit=128
[  227.989438][   T26] audit: type=1800 audit(1760995887.125:13): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.713" name="file1" dev="loop6" ino=94 res=0 errno=0
[  229.070176][ T7062] loop2: detected capacity change from 0 to 1024
[  229.217506][ T7062] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  229.465169][ T7084] loop2: detected capacity change from 0 to 2048
[  229.740601][ T7100] loop2: detected capacity change from 0 to 128
[  229.768487][ T7100] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  229.917434][ T7100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.495254][ T7119] loop6: detected capacity change from 0 to 256
[  231.570266][ T7119] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  231.654340][   T26] audit: type=1800 audit(1760995890.795:14): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.736" name="file1" dev="loop2" ino=94 res=0 errno=0
[  231.774472][ T7119] exFAT-fs (loop6): error, invalid size(size(0) > aligned(9223372036854777344)
[  231.774472][ T7119] 
[  231.805505][ T7119] exFAT-fs (loop6): Filesystem has been set read-only
[  233.003246][ T7164] device syzkaller0 entered promiscuous mode
[  233.049337][ T7164] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  233.202572][ T7176] __nla_validate_parse: 44 callbacks suppressed
[  233.202589][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'.
[  234.145467][ T2857] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  234.547932][ T2857] usb 7-1: config 0 has no interfaces?
[  234.616972][ T7216] loop2: detected capacity change from 0 to 16
[  234.688019][ T7216] erofs: (device loop2): mounted with root inode @ nid 36.
[  234.916058][ T2857] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01
[  235.832714][ T2857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.841055][ T2857] usb 7-1: Product: syz
[  235.845391][ T2857] usb 7-1: Manufacturer: syz
[  235.850171][ T2857] usb 7-1: SerialNumber: syz
[  235.871363][ T2857] usb 7-1: config 0 descriptor??
[  236.227548][ T2857] usb 7-1: USB disconnect, device number 5
[  237.538013][ T7247] loop6: detected capacity change from 0 to 1024
[  237.594513][ T7247] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.639454][ T7247] EXT4-fs (loop6): filesystem is read-only
[  237.672263][ T7247] EXT4-fs (loop6): Unsupported encryption level 6
[  237.724203][ T7252] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  237.875507][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  239.358458][ T7291] loop2: detected capacity change from 0 to 1024
[  239.753278][ T7291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  240.371170][ T7306] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.483601][ T7306] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  240.557047][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[  240.606854][ T7305] tipc: Disabling bearer <eth:syzkaller0>
[  241.435541][ T4252] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  241.675400][ T4252] usb 7-1: Using ep0 maxpacket: 32
[  241.795644][ T4252] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  241.809180][ T4252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.854568][ T4252] usb 7-1: config 0 descriptor??
[  241.917611][ T4252] gspca_main: sunplus-2.14.0 probing 041e:400b
[  242.675523][ T4252] gspca_sunplus: reg_w_riv err -110
[  242.680850][ T4252] sunplus: probe of 7-1:0.0 failed with error -110
[  242.718626][ T7367] udc-core: couldn't find an available UDC or it's busy
[  242.763466][ T7372] loop2: detected capacity change from 0 to 128
[  242.770299][ T7367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  242.801136][ T7372] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  242.852680][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.300804][   T26] audit: type=1800 audit(1760995902.445:15): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.828" name="file1" dev="loop2" ino=94 res=0 errno=0
[  243.481299][ T7377] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  243.526214][ T7377] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  244.935846][ T4252] usb 7-1: USB disconnect, device number 6
[  245.162407][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.3.844'.
[  245.735486][ T4644] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  245.945184][ T7443] loop6: detected capacity change from 0 to 2048
[  246.056943][ T7443] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  246.106007][ T4644] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.134386][ T4644] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.140584][ T7443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.265553][ T4644] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  246.283609][ T4644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  246.306681][ T4644] usb 3-1: SerialNumber: syz
[  246.518814][ T7447] loop6: detected capacity change from 0 to 8
[  246.608660][ T4644] usb 3-1: 0:2 : does not exist
[  246.676167][ T4644] usb 3-1: USB disconnect, device number 6
[  246.694036][ T7447] SQUASHFS error: zlib decompression failed, data probably corrupt
[  246.735542][ T7447] SQUASHFS error: Failed to read block 0x9b: -5
[  246.752331][ T7447] SQUASHFS error: Unable to read metadata cache entry [99]
[  246.792853][ T7447] SQUASHFS error: Unable to read inode 0x127
[  246.998139][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.296745][ T7475] loop2: detected capacity change from 0 to 512
[  248.320079][ T7475] EXT4-fs (loop2): Test dummy encryption mode enabled
[  248.428836][ T7475] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.869: corrupted in-inode xattr
[  248.449849][ T7475] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.869: couldn't read orphan inode 15 (err -117)
[  248.464708][ T7475] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  250.283824][ T7524] netlink: 132 bytes leftover after parsing attributes in process `syz.5.886'.
[  250.755414][ T7538] xt_hashlimit: size too large, truncated to 1048576
[  250.785187][   T21] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  250.906027][ T7540] xt_nat: multiple ranges no longer supported
[  251.145517][   T21] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  251.166139][   T21] usb 7-1: config 0 has no interface number 0
[  251.178626][   T21] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  251.205403][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.269963][   T21] usb 7-1: config 0 descriptor??
[  251.307216][   T21] usb 7-1: selecting invalid altsetting 1
[  251.318124][   T21] dvb_ttusb_budget: ttusb_init_controller: error
[  251.331707][   T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  251.466346][   T21] DVB: Unable to find symbol cx22700_attach()
[  251.532261][   T21] DVB: Unable to find symbol tda10046_attach()
[  251.548426][   T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  251.594660][   T21] usb 7-1: USB disconnect, device number 7
[  251.903434][ T7556] Cannot find set identified by id 65534 to match
[  252.510636][ T1325] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  253.045563][ T1325] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  253.057050][ T1325] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  253.070655][ T1325] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  253.080902][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.253434][ T1325] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[  253.264862][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.421682][ T7570] xt_hashlimit: size too large, truncated to 1048576
[  253.451556][ T4252] usb 3-1: USB disconnect, device number 7
[  254.284068][ T7627] loop2: detected capacity change from 0 to 1024
[  254.396203][ T7627] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  255.740014][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.766531][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.227219][ T7685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.267381][ T7687] Cannot find add_set index 1 as target
[  256.952270][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  256.963005][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  256.975100][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.204816][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.217358][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.228494][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.238864][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.268666][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.311549][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  257.321161][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'.
[  258.595822][ T4252] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  259.045612][ T4252] usb 7-1: config 0 has no interfaces?
[  259.051191][ T4252] usb 7-1: New USB device found, idVendor=056a, idProduct=0005, bcdDevice= 0.00
[  259.139303][ T4252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.177079][ T4252] usb 7-1: config 0 descriptor??
[  259.446589][ T7749] loop2: detected capacity change from 0 to 1024
[  259.520709][ T7749] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  260.195438][ T2857] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  260.236413][   T21] usb 7-1: USB disconnect, device number 8
[  260.290470][ T7772] Cannot find add_set index 1 as target
[  260.595483][ T2857] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  260.612504][ T2857] usb 3-1: config 0 has no interface number 0
[  260.645493][ T2857] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  260.669660][ T2857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.685217][ T2857] usb 3-1: config 0 descriptor??
[  260.747628][ T2857] usb 3-1: selecting invalid altsetting 1
[  260.770970][ T2857] dvb_ttusb_budget: ttusb_init_controller: error
[  260.799471][ T2857] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  261.029458][ T2857] DVB: Unable to find symbol cx22700_attach()
[  261.295280][ T2857] DVB: Unable to find symbol tda10046_attach()
[  261.305517][ T2857] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  261.323079][ T7794] xt_nat: multiple ranges no longer supported
[  263.444598][ T1325] usb 3-1: USB disconnect, device number 8
[  263.637083][ T7815] loop2: detected capacity change from 0 to 512
[  263.693425][ T7815] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[  263.693425][ T7815] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  263.693425][ T7815] 
[  263.754727][ T7815] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  263.785468][ T7815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  263.862687][ T7815] EXT4-fs (loop2): 1 truncate cleaned up
[  263.875385][ T7815] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000005,jqfmt=vfsold,sb=0x0000006000000000,user_xattr,noacl,quota,,errors=continue. Quota mode: writeback.
[  263.926044][ T7829] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  264.038970][ T7815] EXT4-fs (loop2): resizing filesystem from 256 to 2 blocks
[  264.076034][ T7815] EXT4-fs warning (device loop2): ext4_resize_fs:2004: can't shrink FS - resize aborted
[  264.244096][ T7846] Cannot find add_set index 1 as target
[  264.435464][   T21] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  264.806397][   T21] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  264.826855][   T21] usb 7-1: config 0 has no interface number 0
[  264.834794][ T7859] __nla_validate_parse: 99 callbacks suppressed
[  264.834832][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  264.850246][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  264.859501][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  264.873139][   T21] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  264.894504][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  264.924663][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  264.938705][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.986066][   T21] usb 7-1: config 0 descriptor??
[  265.109953][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  265.120023][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  265.129203][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  265.137603][   T21] usb 7-1: selecting invalid altsetting 1
[  265.146804][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  265.151529][   T21] dvb_ttusb_budget: ttusb_init_controller: error
[  265.815435][   T21] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  265.855461][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'.
[  265.942852][ T7869] loop2: detected capacity change from 0 to 1024
[  266.014388][   T21] DVB: Unable to find symbol cx22700_attach()
[  266.095186][   T21] DVB: Unable to find symbol tda10046_attach()
[  266.195288][   T21] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  266.225270][ T7869] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.275475][ T7869] EXT4-fs (loop2): filesystem is read-only
[  266.289025][ T7869] EXT4-fs (loop2): Unsupported encryption level 6
[  266.683959][ T7883] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  266.809179][ T7885] device syzkaller0 entered promiscuous mode
[  267.433182][ T4238] usb 7-1: USB disconnect, device number 9
[  268.195384][ T4238] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  268.618436][ T4238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.654116][ T4238] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  268.681127][ T4238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.727797][ T4238] usb 7-1: config 0 descriptor??
[  268.802849][ T7922] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  268.865464][ T1325] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  269.024776][ T7913] Cannot find set identified by id 65534 to match
[  269.167360][ T1325] usb 3-1: Using ep0 maxpacket: 32
[  269.307204][ T1325] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  269.325621][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.363178][ T1325] usb 3-1: config 0 descriptor??
[  269.421955][ T1325] gspca_main: sunplus-2.14.0 probing 041e:400b
[  270.285441][ T1325] gspca_sunplus: reg_w_riv err -110
[  270.290731][ T1325] sunplus: probe of 3-1:0.0 failed with error -110
[  270.318167][ T7943] udc-core: couldn't find an available UDC or it's busy
[  270.325233][ T7943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  270.501511][ T2857] usb 7-1: USB disconnect, device number 10
[  272.508580][ T7966] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  272.549844][ T7964] __nla_validate_parse: 44 callbacks suppressed
[  272.549858][ T7964] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1037'.
[  272.881948][ T7974] loop6: detected capacity change from 0 to 1024
[  272.997690][ T7974] EXT4-fs (loop6): Ignoring removed nobh option
[  273.018830][ T7981] Cannot find set identified by id 65534 to match
[  273.045616][ T7974] EXT4-fs (loop6): Ignoring removed bh option
[  273.101940][ T7974] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  273.215473][ T4644] usb 3-1: USB disconnect, device number 9
[  273.376176][ T7974] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,dioread_nolock,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  274.045391][ T1325] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  274.182573][ T8005] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  274.415901][ T1325] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  274.427499][ T1325] usb 7-1: config 0 has no interface number 0
[  274.437654][ T1325] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  274.452519][ T1325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.480367][ T1325] usb 7-1: config 0 descriptor??
[  274.529030][ T1325] usb 7-1: selecting invalid altsetting 1
[  274.537459][ T1325] dvb_ttusb_budget: ttusb_init_controller: error
[  274.551205][ T1325] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  274.628994][ T8016] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  274.707971][ T1325] DVB: Unable to find symbol cx22700_attach()
[  274.824749][ T1325] DVB: Unable to find symbol tda10046_attach()
[  274.846795][ T1325] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  274.896497][ T1325] usb 7-1: USB disconnect, device number 11
[  275.113725][ T8040] Cannot find set identified by id 65534 to match
[  275.352045][ T8043] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  275.385295][ T8043] device syzkaller0 entered promiscuous mode
[  276.844615][ T8060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.883386][ T8060] device syzkaller0 entered promiscuous mode
[  276.938434][ T8060] tipc: Resetting bearer <eth:syzkaller0>
[  276.972661][ T8059] tipc: Resetting bearer <eth:syzkaller0>
[  277.022848][ T8059] tipc: Disabling bearer <eth:syzkaller0>
[  278.215384][ T5183] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  279.425600][ T5183] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  279.433739][ T5183] usb 7-1: config 0 has no interface number 0
[  279.459396][ T8087] loop2: detected capacity change from 0 to 1764
[  279.465527][ T5183] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  279.495418][ T5183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.520549][ T5183] usb 7-1: config 0 descriptor??
[  279.577307][ T5183] usb 7-1: selecting invalid altsetting 1
[  279.583187][ T5183] dvb_ttusb_budget: ttusb_init_controller: error
[  279.611808][ T5183] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  279.812233][ T5183] DVB: Unable to find symbol cx22700_attach()
[  279.938548][ T5183] DVB: Unable to find symbol tda10046_attach()
[  279.944824][ T5183] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  280.005565][ T5183] usb 7-1: USB disconnect, device number 12
[  281.470914][ T5183] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  283.095590][ T5183] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  283.103658][ T5183] usb 7-1: config 0 has no interface number 0
[  283.141504][ T5183] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  283.185390][ T5183] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.232864][ T5183] usb 7-1: config 0 descriptor??
[  283.277285][ T5183] usb 7-1: selecting invalid altsetting 1
[  283.283158][ T5183] dvb_ttusb_budget: ttusb_init_controller: error
[  283.315384][ T5183] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  283.970090][   T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  284.555413][ T5183] DVB: Unable to find symbol cx22700_attach()
[  284.763127][ T5183] DVB: Unable to find symbol tda10046_attach()
[  284.769429][ T5183] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  284.835640][   T13] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  284.874552][   T13] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  284.925435][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.025803][   T13] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[  285.097136][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.239630][ T8146] xt_hashlimit: size too large, truncated to 1048576
[  285.299397][ T2857] usb 3-1: USB disconnect, device number 10
[  285.695935][ T2857] usb 7-1: USB disconnect, device number 13
[  287.696064][ T8206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1114'.
[  287.885752][ T2857] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  288.299299][ T2857] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  288.313152][ T2857] usb 7-1: config 0 has no interface number 0
[  288.325589][ T2857] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  288.371081][ T2857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.387556][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1123'.
[  288.414294][ T2857] usb 7-1: config 0 descriptor??
[  288.471831][ T2857] usb 7-1: selecting invalid altsetting 1
[  288.491704][ T2857] dvb_ttusb_budget: ttusb_init_controller: error
[  288.520950][ T2857] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  289.350080][ T2857] DVB: Unable to find symbol cx22700_attach()
[  289.402613][ T8236] fuse: Bad value for 'fd'
[  289.453551][ T2857] DVB: Unable to find symbol tda10046_attach()
[  289.463318][ T2857] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  289.891982][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1137'.
[  290.039346][ T2857] usb 7-1: USB disconnect, device number 14
[  290.757935][ T8273] loop6: detected capacity change from 0 to 128
[  290.894522][ T8277] 9pnet: Insufficient options for proto=fd
[  291.277473][ T8273] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  291.684022][ T8273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.727970][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'.
[  291.757927][ T8282] loop2: detected capacity change from 0 to 128
[  291.838638][ T8282] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  291.882505][ T8282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.096354][   T26] audit: type=1800 audit(1760995951.245:16): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1145" name="file1" dev="loop6" ino=94 res=0 errno=0
[  292.196902][   T26] audit: type=1800 audit(1760995951.345:17): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1148" name="file1" dev="loop2" ino=94 res=0 errno=0
[  292.313195][ T8298] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  292.750565][ T8313] 9pnet: Insufficient options for proto=fd
[  294.008909][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'.
[  294.055415][ T4231] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  294.455656][ T4231] usb 7-1: config 0 has no interfaces?
[  295.371033][ T4231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  295.384474][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.429482][ T4231] usb 7-1: Product: syz
[  295.454031][ T4231] usb 7-1: Manufacturer: syz
[  295.474328][ T4231] usb 7-1: SerialNumber: syz
[  295.496725][ T4231] usb 7-1: config 0 descriptor??
[  295.754727][ T4644] usb 7-1: USB disconnect, device number 15
[  296.608393][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1199'.
[  298.838643][ T8413] Bluetooth: hci4: command 0x0406 tx timeout
[  298.928324][ T8447] loop6: detected capacity change from 0 to 128
[  299.141163][ T8447] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  299.286149][ T8447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.945475][ T8413] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  300.347703][   T26] audit: type=1800 audit(1760995959.495:18): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1215" name="file1" dev="loop6" ino=94 res=0 errno=0
[  300.355730][ T8413] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  300.435445][ T8413] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.475425][ T8413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.522200][ T8459] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  300.600383][ T8413] snd-usb-audio: probe of 3-1:27.0 failed with error -2
[  300.648901][ T4201] udevd[4201]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.793668][ T8441] xt_hashlimit: size too large, truncated to 1048576
[  300.864804][ T8413] usb 3-1: USB disconnect, device number 11
[  302.309410][ T8497] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.319818][ T8497] device syzkaller0 entered promiscuous mode
[  302.358353][ T8497] tipc: Resetting bearer <eth:syzkaller0>
[  302.393275][ T8496] tipc: Resetting bearer <eth:syzkaller0>
[  302.454164][ T8496] tipc: Disabling bearer <eth:syzkaller0>
[  302.809676][ T8511] loop6: detected capacity change from 0 to 128
[  302.912343][ T8511] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  302.943147][ T8511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.226396][ T8413] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  303.402340][   T26] audit: type=1800 audit(1760995962.545:19): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1234" name="file1" dev="loop6" ino=94 res=0 errno=0
[  303.425437][ T8413] usb 3-1: device descriptor read/64, error -71
[  303.575104][ T8524] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  303.641173][ T8531] xt_hashlimit: size too large, truncated to 1048576
[  303.695409][ T8413] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  303.920657][ T8413] usb 3-1: device descriptor read/64, error -71
[  304.071810][ T8413] usb usb3-port1: attempt power cycle
[  304.485457][ T8413] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  304.575509][ T8413] usb 3-1: device descriptor read/8, error -71
[  304.845438][ T8413] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  304.945465][ T8413] usb 3-1: device descriptor read/8, error -71
[  305.065607][ T8413] usb usb3-port1: unable to enumerate USB device
[  410.545269][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  410.552289][    C0] 	(detected by 0, t=10502 jiffies, g=32005, q=9)
[  410.558691][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294978180-4294967678), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  410.572046][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g32005 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  410.583225][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  410.593174][    C0] rcu: RCU grace-period kthread stack dump:
[  410.599047][    C0] task:rcu_preempt     state:R  running task     stack:27816 pid:   15 ppid:     2 flags:0x00004000
[  410.609821][    C0] Call Trace:
[  410.613086][    C0]  <TASK>
[  410.616005][    C0]  __schedule+0x11bb/0x4390
[  410.620521][    C0]  ? release_firmware_map_entry+0x190/0x190
[  410.626406][    C0]  schedule+0x11b/0x1e0
[  410.630546][    C0]  schedule_timeout+0x15c/0x280
[  410.635384][    C0]  ? console_conditional_schedule+0x40/0x40
[  410.641266][    C0]  ? update_process_times+0x200/0x200
[  410.646626][    C0]  ? prepare_to_swait_event+0x331/0x350
[  410.652163][    C0]  rcu_gp_fqs_loop+0x29e/0x11b0
[  410.657003][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  410.662188][    C0]  ? rcu_gp_init+0xd58/0x10e0
[  410.666846][    C0]  ? rcu_gp_init+0x10e0/0x10e0
[  410.671604][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  410.676899][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  410.682100][    C0]  rcu_gp_kthread+0x98/0x350
[  410.686687][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  410.691809][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  410.697699][    C0]  ? __kthread_parkme+0x157/0x1b0
[  410.702732][    C0]  kthread+0x436/0x520
[  410.706787][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  410.711893][    C0]  ? kthread_blkcg+0xd0/0xd0
[  410.716472][    C0]  ret_from_fork+0x1f/0x30
[  410.720889][    C0]  </TASK>
[  410.723900][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  410.730214][    C0] NMI backtrace for cpu 0
[  410.734529][    C0] CPU: 0 PID: 8579 Comm: syz.3.1257 Not tainted syzkaller #0
[  410.741888][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  410.751935][    C0] Call Trace:
[  410.755219][    C0]  <IRQ>
[  410.758058][    C0]  dump_stack_lvl+0x168/0x230
[  410.762757][    C0]  ? show_regs_print_info+0x20/0x20
[  410.767946][    C0]  ? load_image+0x3b0/0x3b0
[  410.772447][    C0]  ? irq_work_queue+0xbf/0x140
[  410.777208][    C0]  nmi_cpu_backtrace+0x397/0x3d0
[  410.782135][    C0]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  410.788273][    C0]  ? _printk+0xcc/0x110
[  410.792423][    C0]  ? cpu_online+0x1d/0x30
[  410.796744][    C0]  ? load_image+0x3b0/0x3b0
[  410.801237][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  410.807291][    C0]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  410.813259][    C0]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  410.819404][    C0]  print_other_cpu_stall+0x10c8/0x1220
[  410.824861][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  410.829787][    C0]  ? timekeeping_advance+0x7f6/0xac0
[  410.835072][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  410.840098][    C0]  rcu_sched_clock_irq+0x831/0x1110
[  410.845304][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  410.850150][    C0]  ? account_process_tick+0x227/0x3a0
[  410.855508][    C0]  update_process_times+0x193/0x200
[  410.860693][    C0]  tick_sched_timer+0x37d/0x560
[  410.865533][    C0]  __hrtimer_run_queues+0x4fe/0xc40
[  410.870722][    C0]  ? tick_setup_sched_timer+0x2c0/0x2c0
[  410.876258][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  410.881353][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  410.887405][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  410.892364][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  410.898333][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  410.903955][    C0]  </IRQ>
[  410.906873][    C0]  <TASK>
[  410.909792][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  410.915784][    C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  410.921587][    C0] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5e bd a9 f7 48 89 df e8 26 92 aa f7 e8 c1 2b cb f7 fb bf 01 00 00 00 <e8> 76 b5 9e f7 65 8b 05 07 b3 4f 76 85 c0 74 02 5b c3 e8 b4 bd 4d
[  410.941182][    C0] RSP: 0018:ffffc90003af7bc0 EFLAGS: 00000282
[  410.947242][    C0] RAX: 063f0334d2996400 RBX: ffff88802a2b40c0 RCX: 063f0334d2996400
[  410.955219][    C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001
[  410.963179][    C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005456819
[  410.971136][    C0] R10: ffffed1005456819 R11: 1ffff11005456818 R12: ffff88802a2b40c0
[  410.979112][    C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004
[  410.987086][    C0]  get_signal+0x11d6/0x12c0
[  410.991593][    C0]  arch_do_signal_or_restart+0xc1/0x1300
[  410.997222][    C0]  ? _copy_from_user+0x111/0x170
[  411.002152][    C0]  ? __ia32_sys_rt_sigreturn+0x660/0x790
[  411.007778][    C0]  ? load_gs_index+0x120/0x120
[  411.012535][    C0]  ? get_sigframe_size+0x10/0x10
[  411.017479][    C0]  ? exit_to_user_mode_loop+0x3b/0x130
[  411.022945][    C0]  exit_to_user_mode_loop+0x9e/0x130
[  411.028223][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  411.033756][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  411.039205][    C0]  do_syscall_64+0x58/0xa0
[  411.043607][    C0]  ? clear_bhb_loop+0x30/0x80
[  411.048264][    C0]  ? clear_bhb_loop+0x30/0x80
[  411.052936][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.058817][    C0] RIP: 0033:0x7f21fc01efc9
[  411.063226][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.082814][    C0] RSP: 002b:00007ffe848b25a8 EFLAGS: 00000246
[  411.088871][    C0] RAX: fffffffffffffffc RBX: 000000000004a971 RCX: 00007f21fc01efc9
[  411.096835][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f21fc275fac
[  411.104812][    C0] RBP: 0000000000000032 R08: 001e89b0085df404 R09: 00000013848b289f
[  411.112769][    C0] R10: 00007ffe848b26a0 R11: 0000000000000246 R12: 00007f21fc275fac
[  411.120724][    C0] R13: 00007ffe848b26a0 R14: 000000000004a9a3 R15: 00007ffe848b26c0
[  411.128797][    C0]  </TASK>