last executing test programs:

5m53.262773923s ago: executing program 0 (id=473):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
chdir(0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x13)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xb9)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0xfff, 0x5, 0xfbfffffd, 0xc6ce, 0x91, '@\x00', 0x10000000, 0x1fd})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8)

5m52.964945606s ago: executing program 0 (id=475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f008)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000002000000000000000000000000000000ddba00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"], 0xfc}}, 0x0)

5m52.016278297s ago: executing program 0 (id=479):
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775)
pipe(&(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000", 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0)
poll(0x0, 0x0, 0x4d86)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)

5m50.496293644s ago: executing program 0 (id=482):
setresuid(0x0, 0xee01, 0x0)
syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0)

5m49.169101032s ago: executing program 0 (id=485):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r1 = fanotify_init(0x8, 0x1)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00')
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)

5m48.874975545s ago: executing program 0 (id=490):
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x80001, 0x0, {[0x54, 0x81, 0xffffffff, 0x400039a4, 0x200000ff, 0x0, 0x8000000000000000]}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030f00fd486af2"], 0xffe7)

5m33.809166563s ago: executing program 32 (id=490):
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x80001, 0x0, {[0x54, 0x81, 0xffffffff, 0x400039a4, 0x200000ff, 0x0, 0x8000000000000000]}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030f00fd486af2"], 0xffe7)

3m58.142676453s ago: executing program 2 (id=886):
r0 = epoll_create1(0x0)
r1 = eventfd2(0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x60000012})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000})

3m56.027041496s ago: executing program 2 (id=891):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01"], 0x14}}, 0x40010)
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300), 0x26}, 0x20040051)

3m54.997707221s ago: executing program 2 (id=894):
r0 = syz_open_dev$sndpcmp(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0x541b, 0x0)

3m54.632504437s ago: executing program 2 (id=898):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1004020, 0x0)

3m53.630119571s ago: executing program 2 (id=904):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}])

3m52.259082351s ago: executing program 2 (id=909):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)

3m51.047234794s ago: executing program 33 (id=909):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x40, 0x0, 0xfffffffe}, {0x6, 0x0, 0x40, 0x1}]}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)

2m53.297733727s ago: executing program 3 (id=1116):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
openat$kvm(0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f00000010c0)={0x0, 0xd})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

2m51.599822012s ago: executing program 3 (id=1121):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0)

2m51.140606661s ago: executing program 3 (id=1123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x259fdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)

2m50.871114583s ago: executing program 3 (id=1125):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000680), 0x3, 0x48c, &(0x7f0000000e80)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, &(0x7f0000000040)=""/61, 0x3d)

2m50.415759003s ago: executing program 3 (id=1127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

2m49.306442071s ago: executing program 3 (id=1130):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

2m48.498783277s ago: executing program 34 (id=1130):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

2m34.407610922s ago: executing program 4 (id=1180):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
timer_create(0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x268, 0x300, 0x268, 0x268, 0x378, 0x460, 0x460, 0x378, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x268, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)

2m33.09960449s ago: executing program 4 (id=1183):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m32.895980729s ago: executing program 4 (id=1184):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
fsopen(0x0, 0x1)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r5 = add_key$fscrypt_v1(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0)
r6 = getegid()
keyctl$chown(0x4, r4, 0xee01, r6)
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)

2m31.856117624s ago: executing program 4 (id=1187):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003"], 0x0, 0x4e}, 0x28)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

2m31.03895214s ago: executing program 4 (id=1188):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000008}, 0x4c800)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

2m29.925590428s ago: executing program 4 (id=1190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])

2m14.514349392s ago: executing program 35 (id=1190):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}])

1m24.43105167s ago: executing program 1 (id=1422):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000040), 0x12)

1m23.002746003s ago: executing program 1 (id=1429):
getpriority(0xbf510f861aee7244, 0x0)

1m22.517761334s ago: executing program 1 (id=1436):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000012c0)={[{@mode={'mode', 0x3d, 0x82}}, {@longad}, {@dmode={'dmode', 0x3d, 0x7fff}}, {@volume={'volume', 0x3d, 0x2}}, {@shortad}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@gid_forget}, {@fileset={'fileset', 0x3d, 0x2}}, {@adinicb}, {@gid_ignore}, {@gid_forget}, {@uid_forget}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'utf8'}}], [{@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_hash}, {@fowner_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f008)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400"], 0xfc}}, 0x0)

1m19.587112792s ago: executing program 1 (id=1446):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0)

1m18.850838464s ago: executing program 1 (id=1455):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00')

1m17.522150382s ago: executing program 1 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10)
listen(r3, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}]}}]}, 0x44}}, 0x24040084)
sendfile(r5, r5, 0x0, 0x800000009)

1m2.137373135s ago: executing program 36 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10)
listen(r3, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r5, 0x2007ffc)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}]}}]}, 0x44}}, 0x24040084)
sendfile(r5, r5, 0x0, 0x800000009)

15.56181603s ago: executing program 8 (id=1688):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x36, 0x0}}], 0x1, 0x4)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000200000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

15.241728854s ago: executing program 8 (id=1691):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000560000001801000020646c2500000000002020207b1af8ff00000000bff56d052600000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.047008423s ago: executing program 8 (id=1692):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
fcntl$setpipe(r1, 0x407, 0xaf88)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x1)
syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/time_for_children\x00')

9.350706931s ago: executing program 5 (id=1708):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_pts(r3, 0x141601)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x18, r5, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880)

9.283297994s ago: executing program 8 (id=1710):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = epoll_create(0x8)
kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, &(0x7f0000000380)={r2, r0, 0xcc})
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000080)=""/214)

9.233751317s ago: executing program 6 (id=1711):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)="f52f07aa900dc6", 0x7}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xc, 0x0)

7.925163264s ago: executing program 5 (id=1713):
r0 = socket(0x2, 0x80802, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1c)

7.734900272s ago: executing program 6 (id=1715):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, 0xfffffffffffffffd, 0xbb)

7.734442072s ago: executing program 8 (id=1716):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r4, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0)

7.498844492s ago: executing program 5 (id=1717):
socket$nl_generic(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000480)='./bus\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0xfffffff8, @empty}}}, 0x80, 0x0}}], 0x1, 0x20014004)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f00000003c0)="1b6b", 0x2}], 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b2a, &(0x7f0000000040))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x11, r2, 0x941a0000)

6.462159628s ago: executing program 7 (id=1719):
syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000140)={[{@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffffffff8000, 0x0)
read$msr(r1, &(0x7f0000000340)=""/44, 0x2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000280)=0x3, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

6.235189887s ago: executing program 6 (id=1720):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)

6.234350297s ago: executing program 8 (id=1721):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
fcntl$setpipe(r1, 0x407, 0xaf88)
r2 = getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x1)
syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/time_for_children\x00')

5.522973228s ago: executing program 7 (id=1723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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")

5.517366849s ago: executing program 6 (id=1724):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x2, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x100, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

5.385237355s ago: executing program 5 (id=1726):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$eJzs3T9rc1UYAPDnpmkSdUgGJxG8oIPTy9t3dUmVFqqZlAzqoMW2IE0QWij4B9NOri6OfgJBcHP1A7j4DQRXwc0OhSv35t4kbdPYaNP65/db+vTc85zznNPTlA45ef/54eFeGgdnn/0crVYStW504zyJTtSichqXdL8MAODf7DzL4rdsbJm8JCJaqysLAFihpf/+f7fykgCAFXvr7Xfe2Oz1tt5M01ZsD7846ef/2edfx883D+LDGMR+PI52XERkE+N4O8uyUT3NdeKl4eikn2cO3/uxHH/z14gifyPa0SmaLufv9LY20rGZ/FFex9Pl/N08/0m049k58+/0tp7MyY9+I15+cab+R9GOnz6Ij2IQe0UR0/zPN9L0teyr3z99Ny8vz09GJ/1m0W8qW7vnHw0AAAAAAAAAAAAAAAAAAAAAAP9hj8q7c5pR3N+TN5X376xd5N+sR1rpXL6fZ5yfVANduR9olMXX1f06j9M0zcqO0/x6PFeP+sOsGgAAAAAAAAAAAAAAAAAAAP5Zjj/+5HB3MNg/KoLXszKYtCwXVLcBVG/r/6vjdCct9aMXYnHn5nSuWhkuGDnWqj5JxMIy8kX8vd24dfDUTTV/8+2yA7b+vM/6dK7olJtxx+uqTtfhbjJ/D5tRtbSqQ/L9bJ9G3HKuxk2PsqWOX2Puo/bSa288UwSjBX0iWVTYK7+Md65sKX+hTid9GsWuzk1fL4OZ9CtnY6nzfP21Iknu/OUHAAAAAAAAAAAAAAAAAACYMX3T75yHZwtTa1lzZWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2afv7/JKhfa7kajMrkccsPry7o3Iij4wdeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DfwQAAP//4wFdTQ==")

5.194886902s ago: executing program 7 (id=1727):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000008}, 0x4c800)
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x4000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

4.972039263s ago: executing program 5 (id=1728):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = gettid()
sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f})

4.913968095s ago: executing program 9 (id=1729):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
chown(&(0x7f0000000080)='.\x00', 0x0, 0x0)

3.983122375s ago: executing program 7 (id=1730):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x212202, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x20, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00')

3.906942449s ago: executing program 5 (id=1731):
r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x336, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x88, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x3ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x74}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x12, 0x0, 0xd, 0xff, 0x2}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000480)=@getsa={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080)
r3 = syz_open_dev$vcsn(0x0, 0x9c, 0x280400)
ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0)

3.833198592s ago: executing program 9 (id=1732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x18, r4, 0xef5ebf77ce25880d, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, 0x0, 0x0)

3.612227242s ago: executing program 7 (id=1733):
syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000140)={[{@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xffffffffffff8000, 0x0)
read$msr(r1, &(0x7f0000000340)=""/44, 0x2c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000280)=0x3, 0x4)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

2.657012693s ago: executing program 9 (id=1734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

2.250778991s ago: executing program 7 (id=1735):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
write$P9_RRENAME(r2, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000604ecfe4e938302910bbd7a96390ab4165369e180708d44f43883c12c736f8ce7dbeb5e2692d1f9de0367e8707a8578e31adadff29defa0a9c19c665ddd3f164e1659d75caaeea970a26c018aa64b240f7355ffb033c5c1b93", @ANYRES16=0x0, @ANYBLOB="000a2abd7000fbdbdf25350000000a00060008021100000000000a000600080211000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x2, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0xb8}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f00000003c0)={0x1f, 0x3}, 0x6)
ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080))
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0)

1.434356277s ago: executing program 9 (id=1736):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1.155193649s ago: executing program 9 (id=1737):
syz_emit_ethernet(0x1d, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @private=0xa010101, @local}}}}}}, 0x0)

291.087747ms ago: executing program 9 (id=1738):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000021, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f00000002c0)=ANY=[], 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000000)=0x1000000)

290.756267ms ago: executing program 6 (id=1739):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
write$sndseq(r0, 0x0, 0x1b)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$P9_RLERRORu(r2, &(0x7f0000000000)={0x10, 0x7, 0x1, {{0x3, '9p\x00'}, 0x8000}}, 0x10)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

0s ago: executing program 6 (id=1740):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_pts(r3, 0x141601)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x18, r5, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880)

kernel console output (not intermixed with test programs):

 veth1_vlan left promiscuous mode
[  352.657229][   T32] device veth0_vlan left promiscuous mode
[  352.714635][ T4283] Bluetooth: hci2: command 0x040f tx timeout
[  353.637335][ T4383] usb 4-1: config 0 has an invalid interface number: 160 but max is 0
[  353.661171][ T4383] usb 4-1: config 0 has no interface number 0
[  353.667861][ T4383] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  353.711938][ T4383] usb 4-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  353.735960][ T4383] usb 4-1: New USB device found, idVendor=05ac, idProduct=8101, bcdDevice=9e.4e
[  353.763149][ T4383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.807635][ T4383] usb 4-1: Product: syz
[  353.817259][ T4383] usb 4-1: Manufacturer: syz
[  353.837716][ T4383] usb 4-1: SerialNumber: syz
[  354.007009][ T4383] usb 4-1: config 0 descriptor??
[  354.062394][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  354.070868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  354.079475][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  354.087993][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  354.096696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  354.105284][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  354.113820][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  354.122354][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  354.162198][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  354.171223][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  354.734089][ T4383] usb 4-1: can't set config #0, error -71
[  354.748798][ T4383] usb 4-1: USB disconnect, device number 5
[  354.781927][ T4285] Bluetooth: hci2: command 0x0419 tx timeout
[  354.950570][ T7665] loop5: detected capacity change from 0 to 512
[  355.034955][ T7665] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.948: inode has both inline data and extents flags
[  355.075380][ T7665] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.948: couldn't read orphan inode 15 (err -117)
[  355.100828][ T7665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  356.307573][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  356.437572][ T7685] loop1: detected capacity change from 0 to 128
[  356.450317][   T26] audit: type=1800 audit(1763622043.649:26): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.953" name="bus" dev="loop1" ino=1048658 res=0 errno=0
[  356.513492][ T7685] syz.1.953: attempt to access beyond end of device
[  356.513492][ T7685] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  356.536783][ T7688] loop4: detected capacity change from 0 to 512
[  356.670275][ T7688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  356.754649][ T7688] EXT4-fs (loop4): shut down requested (0)
[  357.056254][   T32] team0 (unregistering): Port device team_slave_1 removed
[  357.126332][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  357.180477][   T32] team0 (unregistering): Port device team_slave_0 removed
[  357.273555][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.321932][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  357.379704][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.441665][ T7710] loop5: detected capacity change from 0 to 16
[  357.460110][ T7710] erofs: (device loop5): mounted with root inode @ nid 36.
[  357.532157][   T14] usb 2-1: Using ep0 maxpacket: 16
[  357.539997][   T14] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  357.558918][   T14] usb 2-1: config 0 has no interface number 0
[  357.571215][   T14] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  357.595067][   T14] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  357.611288][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.620231][   T14] usb 2-1: Product: syz
[  357.631504][   T14] usb 2-1: Manufacturer: syz
[  357.637279][   T14] usb 2-1: SerialNumber: syz
[  357.672968][   T14] usb 2-1: config 0 descriptor??
[  357.776046][ T7712] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.788672][ T7712] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  357.799819][ T7712] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  357.813723][ T7712] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  357.823575][ T7712] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  357.834732][ T7712] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  358.396033][   T14] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input12
[  358.606725][ T5350] usb 2-1: USB disconnect, device number 9
[  359.041210][   T32] bond0 (unregistering): Released all slaves
[  359.334714][ T7557] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.356315][ T7557] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.365403][ T7557] device bridge_slave_0 entered promiscuous mode
[  359.374988][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.392851][ T7557] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.407449][ T7557] device bridge_slave_1 entered promiscuous mode
[  359.848364][ T7735] loop5: detected capacity change from 0 to 256
[  360.296177][ T7557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.320708][ T7735] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152)
[  360.392251][   T26] audit: type=1800 audit(1763622047.515:27): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.971" name="file1" dev="loop5" ino=1048659 res=0 errno=0
[  360.483537][ T7557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.558314][ T7747] loop4: detected capacity change from 0 to 2048
[  360.649611][ T7747] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.735549][ T7749] loop3: detected capacity change from 0 to 128
[  360.746852][   T26] audit: type=1800 audit(1763622047.945:28): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.972" name="bus" dev="loop3" ino=1048660 res=0 errno=0
[  360.806789][ T7749] syz.3.972: attempt to access beyond end of device
[  360.806789][ T7749] loop3: rw=0, sector=121, nr_sectors = 920 limit=128
[  360.917205][ T7557] team0: Port device team_slave_0 added
[  360.978444][ T7557] team0: Port device team_slave_1 added
[  361.134640][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.155402][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.220837][ T7557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.244693][ T7557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.269716][ T7557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.304717][ T7557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.342305][ T2185] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  361.449987][ T7557] device hsr_slave_0 entered promiscuous mode
[  361.481601][ T7764] loop1: detected capacity change from 0 to 128
[  361.489935][ T7557] device hsr_slave_1 entered promiscuous mode
[  361.506726][ T7557] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.522454][ T7557] Cannot create hsr debugfs directory
[  361.585504][ T2185] usb 5-1: unable to get BOS descriptor or descriptor too short
[  361.622150][ T2185] usb 5-1: config 8 has an invalid interface number: 215 but max is 0
[  361.630498][ T2185] usb 5-1: config 8 has no interface number 0
[  361.690261][ T2185] usb 5-1: config 8 interface 215 has no altsetting 0
[  361.701125][ T7765] syz.1.978: attempt to access beyond end of device
[  361.701125][ T7765] loop1: rw=1, sector=145, nr_sectors = 488 limit=128
[  361.730089][ T2185] usb 5-1: string descriptor 0 read error: -22
[  361.760194][ T2185] usb 5-1: New USB device found, idVendor=090a, idProduct=1001, bcdDevice= 1.00
[  361.799796][ T2185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.862989][ T2185] usb-storage 5-1:8.215: USB Mass Storage device detected
[  361.889660][ T2185] usb-storage 5-1:8.215: Quirks match for vid 090a pid 1001: 2
[  362.081243][ T4334] usb 5-1: USB disconnect, device number 10
[  362.208983][ T7557] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  362.247463][ T7557] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  362.277795][ T7557] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  362.320245][ T7557] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  363.240068][ T7789] loop3: detected capacity change from 0 to 2048
[  363.337970][ T7789] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.426065][ T7557] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.500626][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  363.539695][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  363.585376][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'.
[  363.605731][ T7557] 8021q: adding VLAN 0 to HW filter on device team0
[  363.642054][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'.
[  363.684065][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.726944][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  363.753139][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.760429][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.796025][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  363.818193][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  363.902793][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.910069][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.928805][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  363.946724][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  363.974343][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  363.998113][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  363.999886][ T7821] Invalid option length (938168) for dns_resolver key
[  364.022851][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  364.051703][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  364.087971][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  364.105643][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  364.247306][ T7828] loop1: detected capacity change from 0 to 1024
[  364.256920][ T7828] EXT4-fs: Ignoring removed orlov option
[  364.317001][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  364.529166][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  364.743849][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  364.906142][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  366.437527][ T7828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  366.523742][   T26] audit: type=1800 audit(1763622053.655:29): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.993" name="file1" dev="loop1" ino=15 res=0 errno=0
[  368.148386][ T7843] 9pnet_fd: Insufficient options for proto=fd
[  368.158874][ T7843] xt_TCPMSS: Only works on TCP SYN packets
[  368.737512][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  369.323400][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  369.340307][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  369.372664][ T7557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.795999][ T7876] loop3: detected capacity change from 0 to 128
[  369.809077][ T7876] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  369.830260][ T7876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  372.586175][ T7890] xt_TCPMSS: Only works on TCP SYN packets
[  372.770614][ T7887] loop4: detected capacity change from 0 to 1024
[  372.777955][ T7887] EXT4-fs: Ignoring removed orlov option
[  372.870518][ T7887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  372.904004][   T26] audit: type=1800 audit(1763622060.085:30): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1008" name="file1" dev="loop4" ino=15 res=0 errno=0
[  372.964945][ T7876] ext2 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.016488][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  373.147342][   T26] audit: type=1326 audit(1763622060.345:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  373.147493][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  373.204393][ T7898] loop5: detected capacity change from 0 to 512
[  373.281371][ T7898] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  373.316546][   T26] audit: type=1326 audit(1763622060.375:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  373.339945][   T26] audit: type=1326 audit(1763622060.395:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  373.363131][   T26] audit: type=1326 audit(1763622060.395:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09a1d8f783 code=0x7ffc0000
[  373.386599][   T26] audit: type=1326 audit(1763622060.395:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09a1d8e1ff code=0x7ffc0000
[  373.392094][ T7898] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  373.443288][   T26] audit: type=1326 audit(1763622060.405:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09a1d8f7d7 code=0x7ffc0000
[  373.478237][   T26] audit: type=1326 audit(1763622060.405:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09a1d8df90 code=0x7ffc0000
[  373.620807][   T26] audit: type=1326 audit(1763622060.405:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f09a1d8f34b code=0x7ffc0000
[  373.760605][   T26] audit: type=1326 audit(1763622060.445:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.5.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f09a1d8e3aa code=0x7ffc0000
[  373.912588][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  376.009736][ T7949] xt_TCPMSS: Only works on TCP SYN packets
[  376.166690][ T7940] device wireguard0 entered promiscuous mode
[  376.434929][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  376.462525][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  376.612514][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  376.634479][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  376.668677][ T7557] device veth0_vlan entered promiscuous mode
[  376.686148][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  376.713457][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  376.760248][ T7557] device veth1_vlan entered promiscuous mode
[  376.850695][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  376.874537][ T7956] loop1: detected capacity change from 0 to 16
[  376.880271][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  376.900187][ T7956] erofs: (device loop1): mounted with root inode @ nid 36.
[  376.997639][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  377.037314][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  377.079803][ T7557] device veth0_macvtap entered promiscuous mode
[  377.197616][ T7557] device veth1_macvtap entered promiscuous mode
[  377.227755][ T7969] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  377.265203][ T7969] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  377.276506][ T7969] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  377.450820][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  377.683373][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  377.810018][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.844160][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.854178][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.864860][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.874845][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.885688][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.896725][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.929655][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.953551][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.015163][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  378.033257][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  378.075935][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.106988][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.129280][ T7979] loop4: detected capacity change from 0 to 16
[  378.140176][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.154651][ T7979] erofs: (device loop4): mounted with root inode @ nid 36.
[  378.166928][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.179329][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.192807][ T7979] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  378.203370][ T7979] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  378.214531][ T7979] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  378.240213][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.266854][ T7557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.294258][ T7982] loop1: detected capacity change from 0 to 2048
[  378.305053][ T7557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.327345][ T7557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.349393][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  378.418245][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  378.447039][ T7557] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.457047][ T7982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.471725][ T7557] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.491356][ T7557] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.528577][ T7557] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.836685][ T4663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.055225][ T4663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.080948][ T7999] device wireguard0 entered promiscuous mode
[  379.174876][ T4725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.233909][ T4725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.269387][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  379.331477][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  379.837237][ T8010] loop6: detected capacity change from 0 to 256
[  380.235876][ T8019] mmap: syz.1.1037 (8019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  380.470425][ T8015] loop5: detected capacity change from 0 to 1024
[  380.499137][ T8010] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae1814, utbl_chksum : 0xe619d30d)
[  380.554481][ T8015] EXT4-fs: Ignoring removed nobh option
[  380.592991][ T8015] EXT4-fs: inline encryption not supported
[  380.605177][ T8010] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  380.674138][ T8015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  380.934446][ T8015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  381.016659][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  381.131134][ T8036] loop6: detected capacity change from 0 to 1024
[  381.220061][ T8036] JBD2: no valid journal superblock found
[  381.259531][ T8036] EXT4-fs (loop6): error loading journal
[  381.967679][ T8054] loop5: detected capacity change from 0 to 128
[  382.044673][   T26] kauditd_printk_skb: 30 callbacks suppressed
[  382.044693][   T26] audit: type=1800 audit(1763622069.205:70): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1047" name="bus" dev="loop5" ino=1048665 res=0 errno=0
[  382.074379][ T8054] syz.5.1047: attempt to access beyond end of device
[  382.074379][ T8054] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  382.789958][ T8061] device wireguard0 entered promiscuous mode
[  383.806764][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  383.813171][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  384.482950][ T8083] loop4: detected capacity change from 0 to 1024
[  384.595875][   T26] audit: type=1800 audit(1763622071.745:71): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="file2" dev="loop4" ino=21 res=0 errno=0
[  386.610028][ T8131] loop3: detected capacity change from 0 to 128
[  386.698635][ T8131] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  386.789507][ T8130] loop1: detected capacity change from 0 to 2048
[  386.879630][ T8131] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[  386.978498][ T8131] FAT-fs (loop3): Filesystem has been set read-only
[  386.990471][ T8137] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8)
[  387.000068][ T8130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  387.024718][ T8143] device wireguard0 entered promiscuous mode
[  387.179016][ T8147] loop6: detected capacity change from 0 to 16
[  387.303042][ T8147] erofs: (device loop6): mounted with root inode @ nid 36.
[  387.345971][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  387.400792][ T8149] loop5: detected capacity change from 0 to 512
[  387.459395][ T8147] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  387.608765][ T8149] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  387.618306][ T8149] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.639878][ T8149] EXT4-fs (loop5): unmounting filesystem.
[  387.829796][ T8147] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  388.166556][ T8147] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117]
[  390.881404][ T8182] loop4: detected capacity change from 0 to 1024
[  393.047879][ T4663] hfsplus: b-tree write err: -5, ino 3
[  393.149459][ T8205] device wireguard0 entered promiscuous mode
[  393.317447][ T8208] loop3: detected capacity change from 0 to 128
[  393.332727][   T26] audit: type=1800 audit(1763622080.535:72): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1085" name="bus" dev="loop3" ino=1048667 res=0 errno=0
[  393.397412][ T8208] syz.3.1085: attempt to access beyond end of device
[  393.397412][ T8208] loop3: rw=0, sector=121, nr_sectors = 920 limit=128
[  393.452161][ T2185] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  393.695793][ T2185] usb 2-1: unable to get BOS descriptor or descriptor too short
[  393.752597][ T2185] usb 2-1: config 5 has an invalid interface number: 42 but max is 0
[  393.776509][ T2185] usb 2-1: config 5 has no interface number 0
[  393.811968][ T2185] usb 2-1: config 5 interface 42 has no altsetting 0
[  393.840791][ T2185] usb 2-1: New USB device found, idVendor=0499, idProduct=5009, bcdDevice=6b.2b
[  393.946949][ T2185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.038128][ T2185] usb 2-1: Product: syz
[  394.083015][ T2185] usb 2-1: Manufacturer: syz
[  394.115020][ T2185] usb 2-1: SerialNumber: syz
[  394.512351][ T8230] xt_TCPMSS: Only works on TCP SYN packets
[  396.244324][ T2185] usb 2-1: can't set config #5, error -71
[  396.275469][ T2185] usb 2-1: USB disconnect, device number 10
[  398.144460][ T8275] xt_TCPMSS: Only works on TCP SYN packets
[  399.459107][ T8293] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  399.760144][ T8303] netlink: 'syz.4.1111': attribute type 1 has an invalid length.
[  399.811407][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1
[  399.832060][ T8307] bond1: (slave gretap1): making interface the new active one
[  399.843477][ T8307] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  399.879451][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  400.208942][ T8313] loop4: detected capacity change from 0 to 16
[  400.246725][ T8313] erofs: (device loop4): mounted with root inode @ nid 36.
[  400.544311][ T8323] loop3: detected capacity change from 0 to 256
[  400.608639][ T8324] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  400.623547][ T8324] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  400.634645][ T8324] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  401.349574][ T8323] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  401.417144][   T26] audit: type=1800 audit(1763622088.615:73): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1116" name="file1" dev="loop3" ino=1048668 res=0 errno=0
[  401.842962][ T8340] loop5: detected capacity change from 0 to 512
[  401.882042][ T8340] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  401.930919][ T8340] EXT4-fs (loop5): invalid journal inode
[  401.973451][ T8340] EXT4-fs (loop5): can't get journal size
[  402.023418][ T8340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  402.082812][ T8340] System zones: 1-12, 13-13
[  402.187963][ T8340] EXT4-fs (loop5): 1 truncate cleaned up
[  402.197890][ T8340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  403.001122][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  403.028612][ T8360] loop3: detected capacity change from 0 to 512
[  403.081120][ T8360] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1125: inode #1: comm syz.3.1125: iget: illegal inode #
[  403.098002][ T8360] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1125: error while reading EA inode 1 err=-117
[  403.112847][ T8360] EXT4-fs (loop3): 1 orphan inode deleted
[  403.118662][ T8360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  403.380488][ T4264] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  403.504978][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  403.624281][ T8375] loop6: detected capacity change from 0 to 16
[  403.638769][ T8375] erofs: (device loop6): mounted with root inode @ nid 36.
[  403.982538][ T8379] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  403.995066][ T8379] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  404.006230][ T8379] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117]
[  404.728472][ T8383] loop1: detected capacity change from 0 to 128
[  404.769583][ T4663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.845271][ T8383] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  404.899166][ T8383] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.105890][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  405.164532][ T4663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.414217][ T4663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.426629][ T8396] loop6: detected capacity change from 0 to 512
[  405.458102][ T8396] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.482034][ T8396] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.529565][ T8396] EXT4-fs (loop6): Test dummy encryption mode enabled
[  405.593892][ T8396] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  405.656920][ T8396] EXT4-fs error (device loop6): __ext4_iget:5091: inode #2: block 134217728: comm syz.6.1134: invalid block
[  405.686885][ T4663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.718700][ T8396] EXT4-fs (loop6): Remounting filesystem read-only
[  405.735873][ T8396] EXT4-fs (loop6): get root inode failed
[  405.741590][ T8396] EXT4-fs (loop6): mount failed
[  407.219298][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  407.231439][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  407.240561][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  407.255400][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  407.277372][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  407.284996][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  407.412004][ T2185] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  407.603747][ T2185] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[  407.621963][ T2185] usb 2-1: config 0 has no interface number 0
[  407.644821][ T2185] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8
[  407.674879][ T2185] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  407.704560][ T2185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.735466][ T2185] usb 2-1: config 0 descriptor??
[  407.741114][ T8421] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  407.793387][ T2185] hub 2-1:0.3: bad descriptor, ignoring hub
[  407.799508][ T2185] hub: probe of 2-1:0.3 failed with error -5
[  407.831230][ T2185] sierra 2-1:0.3: Sierra USB modem converter detected
[  408.902293][ T2185] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  408.942841][ T2185] usb 2-1: USB disconnect, device number 11
[  408.952414][ T2185] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  408.979372][ T2185] sierra 2-1:0.3: device disconnected
[  409.255091][ T8423] chnl_net:caif_netlink_parms(): no params data found
[  409.342319][ T4285] Bluetooth: hci0: command 0x0409 tx timeout
[  409.354412][ T8461] loop6: detected capacity change from 0 to 128
[  409.402054][   T26] audit: type=1800 audit(1763622096.561:74): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1149" name="bus" dev="loop6" ino=1048672 res=0 errno=0
[  409.425644][ T8461] syz.6.1149: attempt to access beyond end of device
[  409.425644][ T8461] loop6: rw=0, sector=121, nr_sectors = 920 limit=128
[  410.205288][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.243926][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.253064][ T8423] device bridge_slave_0 entered promiscuous mode
[  410.270539][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.329117][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.361781][ T8423] device bridge_slave_1 entered promiscuous mode
[  410.497230][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.568896][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.786682][ T8423] team0: Port device team_slave_0 added
[  410.893443][ T8423] team0: Port device team_slave_1 added
[  410.935778][ T4663] device hsr_slave_0 left promiscuous mode
[  411.036476][ T4663] device hsr_slave_1 left promiscuous mode
[  411.078307][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.099266][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.116946][ T4663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.140180][ T4663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.235728][ T4663] device veth1_macvtap left promiscuous mode
[  411.243126][ T4663] device veth0_macvtap left promiscuous mode
[  411.249398][ T4663] device veth1_vlan left promiscuous mode
[  411.255667][ T4663] device veth0_vlan left promiscuous mode
[  411.422087][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[  411.461972][ T4350] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  412.112131][ T8503] overlayfs: missing 'lowerdir'
[  412.384486][ T4350] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  412.407061][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.506355][ T4350] usb 2-1: config 0 descriptor??
[  413.182812][ T8511] loop5: detected capacity change from 0 to 2048
[  413.190601][ T8511] UDF-fs: bad mount option "defcontext=root" or missing value
[  413.541922][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[  413.770736][ T8516] loop5: detected capacity change from 0 to 128
[  413.814004][   T26] audit: type=1800 audit(1763622101.001:75): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1166" name="bus" dev="loop5" ino=1048673 res=0 errno=0
[  413.904726][ T8516] syz.5.1166: attempt to access beyond end of device
[  413.904726][ T8516] loop5: rw=0, sector=121, nr_sectors = 920 limit=128
[  413.930565][ T4663] team0 (unregistering): Port device team_slave_1 removed
[  414.063175][ T4663] team0 (unregistering): Port device team_slave_0 removed
[  414.157930][ T4663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.276896][ T4663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.819504][ T4350] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  414.830182][ T4350] asix: probe of 2-1:0.0 failed with error -71
[  414.845433][ T4350] usb 2-1: USB disconnect, device number 12
[  415.291027][ T4663] bond0 (unregistering): Released all slaves
[  415.567210][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.582261][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[  415.597185][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.706730][ T8524] loop4: detected capacity change from 0 to 128
[  415.737171][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.763920][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.778847][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.877711][   T26] audit: type=1800 audit(1763622103.041:76): pid=8524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1168" name="bus" dev="loop4" ino=1048674 res=0 errno=0
[  415.900678][ T8524] syz.4.1168: attempt to access beyond end of device
[  415.900678][ T8524] loop4: rw=0, sector=121, nr_sectors = 920 limit=128
[  416.796850][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.700365][ T8423] device hsr_slave_0 entered promiscuous mode
[  417.813985][ T8423] device hsr_slave_1 entered promiscuous mode
[  417.825229][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.841956][ T8423] Cannot create hsr debugfs directory
[  418.160254][ T8537] loop4: detected capacity change from 0 to 8
[  418.197725][ T5350] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  418.222341][ T8537] SQUASHFS error: Unable to read inode 0x11f
[  418.401921][ T5350] usb 7-1: Using ep0 maxpacket: 8
[  418.411515][ T5350] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  418.440433][ T5350] usb 7-1: config 179 has no interface number 0
[  418.460719][ T5350] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  418.504349][ T5350] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  418.524708][ T8423] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  418.547109][ T5350] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  418.746974][ T5350] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  418.757251][ T5350] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 19
[  418.770736][ T5350] usb 7-1: config 179 interface 65 has no altsetting 0
[  418.777755][ T5350] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  418.807505][ T5350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.832138][ T8532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  418.844836][ T8423] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  418.882516][ T5350] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input13
[  418.950607][ T8423] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  419.016489][ T8423] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  419.093768][  T127] usb 7-1: USB disconnect, device number 2
[  419.099714][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  419.153088][  T127] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  419.365000][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.420651][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  419.434208][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  419.455980][ T8423] 8021q: adding VLAN 0 to HW filter on device team0
[  419.469346][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  419.485199][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  419.509220][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.516534][ T4663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.782737][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  419.806028][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  419.823657][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  419.892052][ T8573] xt_NFQUEUE: number of total queues is 0
[  420.042012][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state
[  420.049282][ T4663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  420.208299][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  420.304659][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  420.656835][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  420.713003][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  420.721986][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  420.730981][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  420.740324][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  420.797684][ T8423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  420.820451][ T8423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  420.870574][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  420.882649][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  420.933295][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  420.972399][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  420.991450][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  422.683668][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  422.715939][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  422.802358][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.351440][ T8629] loop4: detected capacity change from 0 to 128
[  424.462088][   T26] audit: type=1800 audit(1763622111.651:77): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1190" name="bus" dev="loop4" ino=1048678 res=0 errno=0
[  424.641887][ T8631] syz.4.1190: attempt to access beyond end of device
[  424.641887][ T8631] loop4: rw=2049, sector=681, nr_sectors = 360 limit=128
[  425.253306][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  425.297590][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  425.348239][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  425.410892][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  425.905697][ T8423] device veth0_vlan entered promiscuous mode
[  425.916301][ T8644] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1195'.
[  425.933104][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  425.953297][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  426.000610][ T8423] device veth1_vlan entered promiscuous mode
[  426.127437][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  426.145165][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  426.235466][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  426.244495][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  426.257597][ T8423] device veth0_macvtap entered promiscuous mode
[  426.459262][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  426.522359][ T8423] device veth1_macvtap entered promiscuous mode
[  426.587811][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.649666][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.721510][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.800598][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.917556][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.014798][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.112939][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.158118][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.183878][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.486251][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  427.501183][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  427.529511][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.578256][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.621605][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.669508][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.696994][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.736995][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.776965][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.787823][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.824269][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.845648][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  427.865081][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  427.901074][ T8423] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.912150][ T8423] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.945358][ T8423] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.981960][ T8423] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.314123][ T8683] loop1: detected capacity change from 0 to 2048
[  428.344087][ T8683] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  428.545240][ T4967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.697403][ T4967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.066075][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.076414][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  429.123154][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.167898][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  429.954549][ T8703] 9pnet_fd: Insufficient options for proto=fd
[  434.599719][ T8751] 9pnet_fd: Insufficient options for proto=fd
[  437.272255][ T4285] Bluetooth: hci5: command 0x0406 tx timeout
[  437.560349][ T8779] loop6: detected capacity change from 0 to 512
[  437.883466][ T8779] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[  439.742206][ T8808] 9pnet_fd: Insufficient options for proto=fd
[  440.472086][ T4350] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  440.671905][ T4350] usb 2-1: Using ep0 maxpacket: 32
[  440.679626][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.764252][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.803001][ T4350] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  440.865605][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.151270][ T4350] usb 2-1: config 0 descriptor??
[  441.417833][ T4350] hub 2-1:0.0: USB hub found
[  441.610992][ T4350] hub 2-1:0.0: 1 port detected
[  441.834240][ T8835] loop6: detected capacity change from 0 to 8
[  441.961538][ T8835] SQUASHFS error: Failed to read block 0x4de: -5
[  442.013481][ T8835] SQUASHFS error: Failed to read block 0x4de: -5
[  442.054584][   T26] audit: type=1800 audit(1763622129.251:78): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1240" name="file1" dev="loop6" ino=5 res=0 errno=0
[  442.126029][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  442.136034][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  442.144913][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  442.164845][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  442.191420][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  442.200760][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.230150][   T14] hub 2-1:0.0: activate --> -90
[  443.038319][ T4383] usb 2-1: USB disconnect, device number 13
[  443.326895][ T8841] chnl_net:caif_netlink_parms(): no params data found
[  443.832811][ T8874] 9pnet_fd: Insufficient options for proto=fd
[  444.349769][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.359923][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.385720][ T8841] device bridge_slave_0 entered promiscuous mode
[  444.412102][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.427308][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.459979][ T8882] loop1: detected capacity change from 0 to 256
[  444.468197][ T8841] device bridge_slave_1 entered promiscuous mode
[  444.497853][ T4285] Bluetooth: hci3: command 0x0409 tx timeout
[  444.673520][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.705817][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.157480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  445.209761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  445.294559][   T26] audit: type=1326 audit(1763622132.491:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.359819][   T26] audit: type=1326 audit(1763622132.521:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.420168][ T8841] team0: Port device team_slave_0 added
[  445.465307][ T8841] team0: Port device team_slave_1 added
[  445.482183][   T26] audit: type=1326 audit(1763622132.521:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.581444][   T26] audit: type=1326 audit(1763622132.521:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.621704][   T26] audit: type=1326 audit(1763622132.521:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.798815][   T26] audit: type=1326 audit(1763622132.521:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.832133][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.839283][   T26] audit: type=1326 audit(1763622132.521:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.839328][   T26] audit: type=1326 audit(1763622132.521:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  445.839364][   T26] audit: type=1326 audit(1763622132.531:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.5.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09a1d8f749 code=0x7ffc0000
[  446.541991][ T4285] Bluetooth: hci3: command 0x041b tx timeout
[  446.650031][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.683013][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  446.701219][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  446.722105][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.788905][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.981306][ T8841] device hsr_slave_0 entered promiscuous mode
[  447.023974][ T8841] device hsr_slave_1 entered promiscuous mode
[  447.038993][ T8841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  447.079117][ T8841] Cannot create hsr debugfs directory
[  447.152553][ T8924] loop5: detected capacity change from 0 to 1024
[  447.407463][ T8924] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1259: Invalid block bitmap block 0 in block_group 0
[  447.426036][ T8924] Quota error (device loop5): write_blk: dquota write failed
[  447.433659][ T8924] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  447.444051][ T8924] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.1259: Failed to acquire dquot type 0
[  447.461890][ T8924] EXT4-fs error (device loop5): ext4_free_blocks:6205: comm syz.5.1259: Freeing blocks not in datazone - block = 0, count = 4096
[  447.483193][ T8924] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1259: Invalid inode bitmap blk 0 in block_group 0
[  447.507595][ T8924] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  447.517820][ T8924] EXT4-fs (loop5): 1 orphan inode deleted
[  447.523797][ T8924] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  448.188696][ T8920] loop6: detected capacity change from 0 to 2048
[  448.792632][ T4283] Bluetooth: hci3: command 0x040f tx timeout
[  448.824732][ T8920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  449.431474][ T8930] loop1: detected capacity change from 0 to 1024
[  449.438805][ T8930] EXT4-fs: Ignoring removed orlov option
[  449.641057][ T8930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  449.673414][   T26] audit: type=1800 audit(1763622136.861:88): pid=8930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1261" name="file1" dev="loop1" ino=15 res=0 errno=0
[  449.816883][ T4965] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8
[  450.012177][ T4965] EXT4-fs error (device loop5): ext4_release_dquot:6845: comm kworker/u4:16: Failed to release dquot type 0
[  450.142210][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  450.911939][ T4283] Bluetooth: hci3: command 0x0419 tx timeout
[  451.278187][ T8841] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  451.310528][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  451.840776][ T8841] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  451.961697][ T8841] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  451.986898][ T8841] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  452.394724][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.485738][ T8961] loop7: detected capacity change from 0 to 512
[  452.496688][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  452.505625][ T4965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  453.295007][ T8841] 8021q: adding VLAN 0 to HW filter on device team0
[  453.362052][ T8961] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  453.371993][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  453.418433][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  453.436313][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.443543][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.547584][ T8841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.603848][ T8841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.644031][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  453.664050][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  455.212453][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  455.255148][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.262408][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.415641][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  455.439006][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  455.508284][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  455.519173][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  455.528433][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  455.538004][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  455.746169][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  455.811414][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  455.976600][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  455.999949][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  456.298272][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  456.462422][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  456.562937][ T8988] loop7: detected capacity change from 0 to 2048
[  456.593391][ T8988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  457.035313][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  457.051602][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  457.078630][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  459.893942][ T9042] loop7: detected capacity change from 0 to 2048
[  459.913614][ T9042] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  459.936079][ T9047] kvm: emulating exchange as write
[  460.878720][ T9046] loop1: detected capacity change from 0 to 8192
[  460.931969][   T22] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  460.958315][ T9046]  loop1: p1 p2 p4
[  460.988001][ T9046] loop1: p1 size 65536 extends beyond EOD, truncated
[  461.032197][ T9046] loop1: p2 start 861536256 is beyond EOD, truncated
[  461.039115][ T9046] loop1: p4 size 65536 extends beyond EOD, truncated
[  461.134737][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.206590][   T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.222479][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  461.253112][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  461.262055][   T22] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  461.271146][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.301472][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  461.322801][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  461.356442][   T22] usb 6-1: config 0 descriptor??
[  461.377268][ T8841] device veth0_vlan entered promiscuous mode
[  461.410055][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  461.420706][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  461.474010][ T8841] device veth1_vlan entered promiscuous mode
[  461.588993][ T8841] device veth0_macvtap entered promiscuous mode
[  461.646531][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  461.674208][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  461.705948][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  461.753031][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  461.776190][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  461.802389][   T22] uclogic 0003:5543:0064.0006: item fetching failed at offset 0/1
[  461.811599][   T22] uclogic 0003:5543:0064.0006: parse failed
[  461.838219][   T22] uclogic: probe of 0003:5543:0064.0006 failed with error -22
[  461.845406][ T8841] device veth1_macvtap entered promiscuous mode
[  461.947715][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.038573][  T127] usb 6-1: USB disconnect, device number 4
[  462.047352][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.131989][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.195069][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.205664][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.217017][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.227631][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.241063][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.257600][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  462.466620][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.811017][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.944188][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.072201][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.095865][ T9078] loop6: detected capacity change from 0 to 1024
[  463.122874][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.176493][ T9083] loop5: detected capacity change from 0 to 2048
[  463.195889][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.215402][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.235014][ T9083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  463.246306][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.289157][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.351157][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.398031][ T8841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  463.436583][ T8841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  463.462573][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  463.474580][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  463.548386][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  463.618016][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  463.664126][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  463.686747][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  463.711447][   T22] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  463.723799][ T8841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  463.741887][ T8841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  463.766922][ T8841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  463.791974][ T8841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  463.922133][   T22] usb 8-1: Using ep0 maxpacket: 16
[  463.930405][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.023944][   T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.048908][   T22] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  464.291963][   T22] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  464.319845][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.710787][   T22] usb 8-1: config 0 descriptor??
[  465.122133][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.156388][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.216718][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  465.232212][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.258603][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.281912][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.290329][ T4663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.310480][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.318040][ T4663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.336386][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.359117][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  465.379330][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.394299][ T9119] kvm: pic: non byte read
[  465.407547][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.416159][ T9119] kvm: pic: non byte read
[  465.428469][ T9119] kvm: pic: non byte read
[  465.432202][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.446585][ T9119] kvm: pic: non byte read
[  465.452153][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.459433][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.461117][ T9119] kvm: pic: non byte read
[  465.487201][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.497051][ T9119] kvm: pic: non byte read
[  465.507232][ T9119] kvm: pic: non byte read
[  465.507811][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.516205][ T9119] kvm: pic: non byte read
[  465.531207][ T9119] kvm: pic: non byte read
[  465.544694][ T9119] kvm: pic: non byte read
[  465.547026][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.574963][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.599228][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.617888][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  465.649752][   T22] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0007/input/input14
[  465.686072][   T22] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  465.724721][   T22] usb 8-1: USB disconnect, device number 2
[  467.040916][ T9141] loop5: detected capacity change from 0 to 2048
[  467.091763][ T9128] fido_id[9128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  467.126539][ T9141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  468.417173][   T26] audit: type=1326 audit(1763622155.611:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.7.1317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febfc18f749 code=0x0
[  468.500072][ T9164] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.790335][ T9176] loop8: detected capacity change from 0 to 16
[  468.802048][ T4383] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  468.829592][ T9176] erofs: (device loop8): mounted with root inode @ nid 36.
[  468.974509][ T9178] loop5: detected capacity change from 0 to 2048
[  469.103815][ T9178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  469.190053][ T4383] usb 7-1: Using ep0 maxpacket: 16
[  469.198208][ T4383] usb 7-1: config 0 has an invalid interface number: 29 but max is 0
[  469.221837][ T4383] usb 7-1: config 0 has no interface number 0
[  469.228032][ T4383] usb 7-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  469.252202][ T4383] usb 7-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  469.983397][ T4383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.991993][ T4383] usb 7-1: Product: syz
[  469.996783][ T4383] usb 7-1: Manufacturer: syz
[  470.001564][ T4383] usb 7-1: SerialNumber: syz
[  470.008694][ T4383] usb 7-1: config 0 descriptor??
[  470.022216][ T9165] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  470.254568][ T4383] usb 7-1: USB disconnect, device number 3
[  470.850567][ T9211] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  470.857846][ T9211] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  470.909296][ T9211] vhci_hcd vhci_hcd.0: Device attached
[  470.944773][ T9212] vhci_hcd: connection closed
[  470.948862][ T4467] vhci_hcd: stop threads
[  470.959785][ T4467] vhci_hcd: release socket
[  471.004608][ T4467] vhci_hcd: disconnect device
[  471.013982][ T9219] loop6: detected capacity change from 0 to 16
[  471.061440][ T9219] erofs: (device loop6): mounted with root inode @ nid 36.
[  471.254498][ T9223] capability: warning: `syz.7.1338' uses 32-bit capabilities (legacy support in use)
[  471.475890][ T9229] loop7: detected capacity change from 0 to 2048
[  471.573660][ T9229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.713700][ T9234] loop5: detected capacity change from 0 to 512
[  471.769439][ T9234] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  471.844169][ T9234] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  471.911342][ T9234] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  471.994588][ T9234] System zones: 0-2, 18-18, 34-34
[  472.058444][ T9234] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1342: iget: bad i_size value: 360287970189639680
[  472.110457][ T9234] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1342: couldn't read orphan inode 15 (err -117)
[  472.172482][ T9234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  472.472123][ T9253] loop7: detected capacity change from 0 to 1024
[  472.482026][ T9253] EXT4-fs: Ignoring removed orlov option
[  472.517415][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  472.732537][ T9253] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  472.818788][   T26] audit: type=1800 audit(1763622159.951:90): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1346" name="file1" dev="loop7" ino=15 res=0 errno=0
[  472.820193][ T4283] Bluetooth: hci2: command 0x0406 tx timeout
[  475.444986][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  475.979572][ T9275] loop7: detected capacity change from 0 to 16
[  476.033434][ T9277] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  476.040121][ T9277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  476.052271][ T9275] erofs: (device loop7): mounted with root inode @ nid 36.
[  476.074232][ T9277] vhci_hcd vhci_hcd.0: Device attached
[  476.178865][ T9284] loop8: detected capacity change from 0 to 2048
[  476.260249][ T9284] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  476.341957][ T2185] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[  476.897326][ T9303] xt_CT: You must specify a L4 protocol and not use inversions on it
[  477.087293][ T9278] vhci_hcd: connection reset by peer
[  477.124620][   T32] vhci_hcd: stop threads
[  477.843358][ T9306] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1359'.
[  478.470748][   T32] vhci_hcd: release socket
[  478.501106][   T32] vhci_hcd: disconnect device
[  478.918236][ T9320] loop8: detected capacity change from 0 to 1024
[  479.188009][ T9329] loop6: detected capacity change from 0 to 16
[  479.235464][ T4965] hfsplus: b-tree write err: -5, ino 8
[  479.241536][ T9329] erofs: (device loop6): mounted with root inode @ nid 36.
[  479.366831][ T9331] loop5: detected capacity change from 0 to 2048
[  479.419963][ T9331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.734185][ T9341] loop1: detected capacity change from 0 to 164
[  479.795774][ T9341] Unable to read rock-ridge attributes
[  481.801934][ T2185] vhci_hcd: vhci_device speed not set
[  481.900419][ T9373] loop8: detected capacity change from 0 to 16
[  481.947084][ T9373] erofs: (device loop8): mounted with root inode @ nid 36.
[  482.824588][ T9381] loop7: detected capacity change from 0 to 2048
[  483.333530][ T9381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  483.402862][ T9381] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1383'.
[  484.356750][ T9417] loop1: detected capacity change from 0 to 16
[  484.368151][ T9417] erofs: (device loop1): mounted with root inode @ nid 36.
[  485.314025][ T9434] loop7: detected capacity change from 0 to 2048
[  485.420221][ T9434] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.499074][ T9439] loop1: detected capacity change from 0 to 1024
[  485.529778][ T9434] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1399'.
[  485.558487][ T9442] loop8: detected capacity change from 0 to 2048
[  485.578517][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option
[  485.683055][ T9442] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  485.712568][ T9442] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.762642][ T9439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  485.782175][ T9442] fs-verity: sha512 using implementation "sha512-avx2"
[  486.046129][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  486.185152][ T9462] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  487.068914][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  487.809137][ T9485] loop7: detected capacity change from 0 to 2048
[  488.596449][ T9489] device bridge1 entered promiscuous mode
[  488.978251][ T9500] loop1: detected capacity change from 0 to 1024
[  489.399140][ T9485] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.492302][ T9485] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1416'.
[  489.551349][ T9510] loop5: detected capacity change from 0 to 512
[  489.599253][ T9510] ext4: Unknown parameter 'context'
[  490.159506][ T9527] x_tables: ip_tables: osf match: only valid for protocol 6
[  491.338622][ T9549] loop6: detected capacity change from 0 to 1024
[  491.498800][ T9549] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  491.617860][   T26] audit: type=1800 audit(1763622178.811:91): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1434" name="bus" dev="loop6" ino=18 res=0 errno=0
[  491.809968][ T9565] loop5: detected capacity change from 0 to 1024
[  491.819658][ T9565] EXT4-fs: Ignoring removed orlov option
[  491.963004][ T9565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  492.045180][   T26] audit: type=1800 audit(1763622179.181:92): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1438" name="file1" dev="loop5" ino=15 res=0 errno=0
[  492.682071][ T9561] loop1: detected capacity change from 0 to 2048
[  492.914308][ T9561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  493.188665][ T9577] loop7: detected capacity change from 0 to 512
[  493.344162][ T9577] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  494.185160][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  494.701409][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  494.813808][ T9601] loop5: detected capacity change from 0 to 1024
[  494.872357][ T9601] EXT4-fs: Ignoring removed i_version option
[  494.878462][ T9601] EXT4-fs: inline encryption not supported
[  494.900812][ T9603] loop8: detected capacity change from 0 to 512
[  494.938947][ T9601] EXT4-fs (loop5): Test dummy encryption mode enabled
[  495.050819][ T9601] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  495.166303][ T9603] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  495.447291][ T9603] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  496.061341][ T9616] loop6: detected capacity change from 0 to 2048
[  496.102413][ T9616] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  496.399929][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  496.482693][ T9624] loop7: detected capacity change from 0 to 256
[  496.541180][ T9624] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  496.605076][ T9624] FAT-fs (loop7): Filesystem has been set read-only
[  496.638361][ T9624] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  496.676765][ T9624] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  496.748525][   T26] audit: type=1800 audit(1763622183.941:93): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1458" name="file1" dev="loop7" ino=1048692 res=0 errno=0
[  496.840492][ T9634] loop1: detected capacity change from 0 to 1024
[  496.872458][ T9636] loop6: detected capacity change from 0 to 1024
[  496.894803][ T9634] EXT4-fs: Ignoring removed orlov option
[  496.938914][ T9636] hfsplus: failed to load root directory
[  497.016426][ T9634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  497.172775][   T26] audit: type=1800 audit(1763622184.371:94): pid=9634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1457" name="file1" dev="loop1" ino=15 res=0 errno=0
[  498.582008][ T4408] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  498.781982][ T4408] usb 9-1: Using ep0 maxpacket: 16
[  498.790038][ T4408] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  498.833627][ T4408] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  498.878612][ T4408] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  498.909918][ T4408] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  498.975941][ T4408] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  499.011551][ T4408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  499.044083][ T4408] usb 9-1: SerialNumber: syz
[  499.073930][ T9656] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  499.081724][ T9656] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  499.342773][ T4408] cdc_acm 9-1:1.0: ttyACM0: USB ACM device
[  499.553529][ T4408] usb 9-1: USB disconnect, device number 2
[  500.624097][ T9691] loop7: detected capacity change from 0 to 256
[  500.659677][ T6154] EXT4-fs (loop5): unmounting filesystem.
[  500.744314][ T9691] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  502.408582][ T9698] exFAT-fs (loop7): hint_cluster is invalid (17)
[  502.578888][ T9708] loop6: detected capacity change from 0 to 512
[  502.642033][ T9708] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1477: bad orphan inode 15
[  502.654127][ T9710] loop8: detected capacity change from 0 to 512
[  502.668184][ T9708] ext4_test_bit(bit=14, block=18) = 1
[  502.711028][ T9708] is_bad_inode(inode)=0
[  502.734555][ T9710] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  502.764724][ T9708] NEXT_ORPHAN(inode)=1023
[  502.769138][ T9708] max_ino=32
[  502.788129][ T9708] i_nlink=0
[  502.811866][ T9708] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2935: inode #15: comm syz.6.1477: corrupted xattr block 19
[  502.839012][ T9716] loop5: detected capacity change from 0 to 4096
[  502.845536][ T9708] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117)
[  502.867403][ T9708] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  502.892482][ T9716] ext4: Unknown parameter 'noacl'
[  502.928868][ T9708] ext4 filesystem being mounted at /99/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  503.030329][ T5759] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  503.286602][ T9708] EXT4-fs error (device loop6): ext4_empty_dir:3139: inode #12: comm syz.6.1477: Directory hole found for htree leaf block 0
[  503.531331][ T9716] loop5: detected capacity change from 0 to 2048
[  503.603711][ T5759] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  503.718057][ T5759] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  503.744388][ T9713] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set
[  503.795479][ T5759] Buffer I/O error on dev loop5, logical block 2, async page read
[  503.870455][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  504.005910][ T9716] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  504.025165][ T9716] EXT4-fs (loop5): unmounting filesystem.
[  504.495548][ T9746] loop6: detected capacity change from 0 to 1024
[  504.574011][ T9746] EXT4-fs: Ignoring removed i_version option
[  504.609634][ T9746] EXT4-fs: inline encryption not supported
[  504.654867][ T9746] EXT4-fs (loop6): Test dummy encryption mode enabled
[  504.737892][ T9746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  505.934506][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  506.563460][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  506.657476][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  506.954587][ T9776] loop5: detected capacity change from 0 to 512
[  506.993803][ T9776] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  508.396067][ T9799] loop6: detected capacity change from 0 to 8
[  509.029805][ T9804] loop7: detected capacity change from 0 to 1024
[  509.276462][ T9804] EXT4-fs: Ignoring removed i_version option
[  509.325156][ T9804] EXT4-fs: inline encryption not supported
[  509.334214][ T9804] EXT4-fs (loop7): Test dummy encryption mode enabled
[  510.214097][ T9804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  512.293154][ T9842] loop6: detected capacity change from 0 to 1024
[  512.341939][ T4408] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  512.533590][ T4408] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.571892][ T4408] usb 6-1: New USB device found, idVendor=0eef, idProduct=0002, bcdDevice= 0.00
[  512.581187][ T4408] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.653546][ T4408] usb 6-1: config 0 descriptor??
[  512.705199][ T4408] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  512.840782][ T9851] loop8: detected capacity change from 0 to 128
[  512.869187][    T7] usb 6-1: USB disconnect, device number 5
[  512.918819][ T9851] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  512.994655][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  513.006001][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  513.017941][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  513.018460][ T9851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  513.040056][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  513.049460][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  513.057442][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  513.720540][ T9871] loop5: detected capacity change from 0 to 164
[  513.771038][ T9853] chnl_net:caif_netlink_parms(): no params data found
[  513.915098][ T9878] loop6: detected capacity change from 0 to 512
[  513.942879][ T9873] loop8: detected capacity change from 0 to 4096
[  514.019973][ T9873] EXT4-fs (loop8): Test dummy encryption mode enabled
[  514.105662][ T9878] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[  514.115256][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  514.125044][ T9873] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  514.133571][ T9873] System zones: 0-5
[  514.139923][ T9873] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  514.165817][ T9878] System zones: 0-2, 18-18, 34-34
[  514.196295][ T9878] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #3: comm syz.6.1515: corrupted inode contents
[  514.256451][ T9878] EXT4-fs error (device loop6): ext4_dirty_inode:6133: inode #3: comm syz.6.1515: mark_inode_dirty error
[  514.274318][ T9890] loop5: detected capacity change from 0 to 128
[  514.281610][ T9890] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  514.304800][ T9878] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #3: comm syz.6.1515: corrupted inode contents
[  514.317496][ T9890] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  514.328586][ T9878] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.1515: mark_inode_dirty error
[  514.344588][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  514.372879][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.381443][ T9878] Quota error (device loop6): write_blk: dquota write failed
[  514.395000][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.442089][ T9878] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  514.443259][ T9853] device bridge_slave_0 entered promiscuous mode
[  514.499003][ T9878] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.1515: Failed to acquire dquot type 0
[  514.533300][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.552341][ T9878] EXT4-fs (loop6): 1 orphan inode deleted
[  514.558524][ T9878] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  514.570966][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.573931][   T51] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  514.589676][ T8982] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  514.613446][ T9853] device bridge_slave_1 entered promiscuous mode
[  514.625039][ T9878] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  514.666770][   T51] EXT4-fs error (device loop6): ext4_release_dquot:6845: comm kworker/u4:3: Failed to release dquot type 1
[  514.860758][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.888328][ T9900] loop7: detected capacity change from 0 to 2048
[  514.927618][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.959519][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  515.102534][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[  515.136747][ T9900] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  515.157274][ T9853] team0: Port device team_slave_0 added
[  515.275142][   T26] audit: type=1804 audit(1763622202.471:95): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1520" name="/newroot/72/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  515.281328][ T9853] team0: Port device team_slave_1 added
[  515.437138][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  515.613745][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.620758][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.801336][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  515.968991][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.060014][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.548876][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.861678][ T9853] device hsr_slave_0 entered promiscuous mode
[  516.915322][ T9853] device hsr_slave_1 entered promiscuous mode
[  516.947495][ T9853] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  516.977516][ T9853] Cannot create hsr debugfs directory
[  517.181929][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[  517.232233][ T9943] loop8: detected capacity change from 0 to 512
[  517.282913][ T9943] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  517.510398][ T9944] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1532'.
[  518.414547][ T9853] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  518.471595][ T9853] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  518.594575][ T9853] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  518.644658][ T9853] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  519.262506][ T4283] Bluetooth: hci1: command 0x040f tx timeout
[  519.305686][ T9983] loop6: detected capacity change from 0 to 512
[  519.313422][ T9983] EXT4-fs: Ignoring removed orlov option
[  519.319130][ T9983] EXT4-fs: Ignoring removed i_version option
[  521.168695][ T9983] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1540: inode #1: comm syz.6.1540: iget: illegal inode #
[  521.188864][ T9983] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1540: error while reading EA inode 1 err=-117
[  521.211005][ T9983] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  521.224531][ T9983] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1540: inode #1: comm syz.6.1540: iget: illegal inode #
[  521.243438][ T9983] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1540: error while reading EA inode 1 err=-117
[  521.263470][ T9983] EXT4-fs (loop6): 1 orphan inode deleted
[  521.269510][ T9983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  521.342223][ T4283] Bluetooth: hci1: command 0x0419 tx timeout
[  521.920746][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  522.014003][ T9990] loop7: detected capacity change from 0 to 2048
[  522.041058][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.107865][ T9990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  522.169784][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  522.223084][ T9990] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1542'.
[  522.248953][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  522.285407][ T9853] 8021q: adding VLAN 0 to HW filter on device team0
[  522.334232][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  522.352684][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  522.363058][ T4920] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.370187][ T4920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.443071][ T9998] loop8: detected capacity change from 0 to 512
[  522.465631][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  522.480812][ T9998] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities
[  522.491360][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  523.010807][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  523.053700][ T4920] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.060879][ T4920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.135665][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  523.204201][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  523.431592][ T9629] EXT4-fs (loop1): unmounting filesystem.
[  523.438453][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  523.506374][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  523.545892][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  523.586760][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  523.632491][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  523.632536][T10015] loop7: detected capacity change from 0 to 1024
[  523.693503][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  523.702868][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  523.719023][T10015] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  523.732926][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  523.754348][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  523.771713][T10015] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  523.786519][ T9853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  523.835884][T10015] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  523.893407][T10015] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  524.413878][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  525.056169][T10045] loop7: detected capacity change from 0 to 1024
[  525.151467][T10045] hfsplus: failed to load attributes file
[  525.779542][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  526.563055][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  526.668952][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.879224][T10059] loop7: detected capacity change from 0 to 512
[  526.910441][ T4725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  526.942377][T10059] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  527.250097][ T4725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.424512][ T4725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  527.605996][ T4725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.808913][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  528.820039][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  529.067532][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  529.252748][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  529.313776][ T9853] device veth0_vlan entered promiscuous mode
[  529.431625][T10110] xt_hashlimit: max too large, truncated to 1048576
[  529.441975][T10110] No such timeout policy "syz1"
[  530.034127][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  530.102561][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  530.155421][ T9853] device veth1_vlan entered promiscuous mode
[  530.306440][T10115] loop6: detected capacity change from 0 to 512
[  530.361621][T10115] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  530.589800][ T9853] device veth0_macvtap entered promiscuous mode
[  530.606188][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  530.615615][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  530.628443][ T9853] device veth1_macvtap entered promiscuous mode
[  530.637522][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  530.657218][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  530.727320][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.748364][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.760596][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.771457][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  530.781885][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  530.819183][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.467770][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.729992][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.781828][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.804487][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.829274][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  531.840119][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  531.852566][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.894596][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.001845][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.011734][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.027521][T10132] loop8: detected capacity change from 0 to 512
[  532.048360][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.078052][T10132] EXT4-fs: Ignoring removed nomblk_io_submit option
[  532.079405][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.113130][T10132] EXT4-fs: inline encryption not supported
[  532.114985][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.306088][T10132] EXT4-fs (loop8): can't mount with both data=journal and delalloc
[  532.316542][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.760326][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.814511][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.853585][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.929134][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  532.951498][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  532.990829][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.019164][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  533.044172][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  533.062707][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  533.082270][ T4967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  533.288515][ T9853] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.337280][ T9853] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.367901][ T9853] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.498860][ T9853] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.878894][T10147] loop8: detected capacity change from 0 to 512
[  534.153418][T10147] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  534.221948][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  534.279096][T10147] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  534.376384][T10147] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  534.433911][T10147] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  534.454265][T10147] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[  534.476183][T10147] EXT4-fs (loop8): orphan cleanup on readonly fs
[  534.516004][T10147] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1583: bg 0: block 34: padding at end of block bitmap is not set
[  534.622306][T10147] Quota error (device loop8): write_blk: dquota write failed
[  534.629913][T10147] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  534.712486][T10147] EXT4-fs error (device loop8): ext4_acquire_dquot:6809: comm syz.8.1583: Failed to acquire dquot type 1
[  534.757928][T10147] EXT4-fs (loop8): 1 truncate cleaned up
[  534.790418][T10147] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  534.931564][ T4725] device hsr_slave_0 left promiscuous mode
[  534.952226][ T4725] device hsr_slave_1 left promiscuous mode
[  535.004681][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  535.017778][T10164] loop6: detected capacity change from 0 to 512
[  535.035892][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.080874][T10164] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  535.114091][T10165] netlink: 'syz.7.1588': attribute type 32 has an invalid length.
[  535.137497][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.215482][ T4725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.283252][ T4725] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.347788][ T4725] device bridge_slave_1 left promiscuous mode
[  535.396790][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.490539][ T4725] device bridge_slave_0 left promiscuous mode
[  535.524590][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.902971][ T4725] device veth1_macvtap left promiscuous mode
[  535.909087][ T4725] device veth0_macvtap left promiscuous mode
[  535.942050][ T4725] device veth1_vlan left promiscuous mode
[  535.985686][ T4725] device veth0_vlan left promiscuous mode
[  539.174309][T10231] loop8: detected capacity change from 0 to 512
[  539.221689][T10231] EXT4-fs (loop8): Test dummy encryption mode enabled
[  539.237041][T10231] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  539.332605][T10231] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.1599: bad orphan inode 131083
[  539.343631][T10231] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  539.369232][T10231] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  539.484266][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  539.984889][   T26] audit: type=1326 audit(1763622227.181:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.1603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ab098f749 code=0x0
[  540.053404][ T4725] team0 (unregistering): Port device team_slave_1 removed
[  540.123201][ T4725] team0 (unregistering): Port device team_slave_0 removed
[  540.222556][ T4725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.307469][ T4725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.048176][ T4725] bond0 (unregistering): Released all slaves
[  541.671349][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.681516][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.695787][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  541.705255][T10263] loop5: detected capacity change from 0 to 256
[  542.444266][T10263] FAT-fs (loop5): Directory bread(block 64) failed
[  542.503667][T10263] FAT-fs (loop5): Directory bread(block 65) failed
[  542.546060][T10263] FAT-fs (loop5): Directory bread(block 66) failed
[  542.561944][T10263] FAT-fs (loop5): Directory bread(block 67) failed
[  542.568762][T10263] FAT-fs (loop5): Directory bread(block 68) failed
[  542.599113][T10263] FAT-fs (loop5): Directory bread(block 69) failed
[  542.611690][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.631718][T10263] FAT-fs (loop5): Directory bread(block 70) failed
[  542.702160][T10263] FAT-fs (loop5): Directory bread(block 71) failed
[  542.717124][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.742130][T10263] FAT-fs (loop5): Directory bread(block 72) failed
[  542.748735][T10263] FAT-fs (loop5): Directory bread(block 73) failed
[  542.783523][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  543.111976][T10151] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  543.601443][T10289] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  543.692244][T10151] usb 8-1: Using ep0 maxpacket: 8
[  543.713894][T10151] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  543.848058][T10151] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  543.877702][T10151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.947290][T10151] usb 8-1: Product: syz
[  543.951529][T10151] usb 8-1: Manufacturer: syz
[  543.967946][T10151] usb 8-1: SerialNumber: syz
[  544.098048][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1618'.
[  544.225409][T10151] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  544.254186][T10151] cdc_ncm 8-1:1.0: bind() failure
[  544.283644][T10151] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  544.306884][T10151] cdc_ncm 8-1:1.1: bind() failure
[  544.364802][T10303] loop9: detected capacity change from 0 to 164
[  544.373352][T10151] usb 8-1: USB disconnect, device number 3
[  544.418749][T10303] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  545.233088][T10151] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  545.652764][T10328] loop6: detected capacity change from 0 to 256
[  545.752345][T10151] usb 10-1: Using ep0 maxpacket: 16
[  545.766312][T10151] usb 10-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config
[  546.098485][T10151] usb 10-1: New USB device found, idVendor=046d, idProduct=0722, bcdDevice=9c.25
[  546.351913][T10151] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  546.435666][T10151] usb 10-1: Product: syz
[  546.440075][T10151] usb 10-1: SerialNumber: syz
[  546.540259][T10151] usb 10-1: config 0 descriptor??
[  546.570048][T10151] usb 10-1: Found UVC 0.00 device syz (046d:0722)
[  546.595142][T10151] usb 10-1: No valid video chain found.
[  546.944238][ T4350] usb 10-1: USB disconnect, device number 2
[  547.703730][T10369] loop8: detected capacity change from 0 to 1024
[  547.740367][T10369] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:477: comm syz.8.1643: Invalid block bitmap block 0 in block_group 0
[  547.754895][T10369] Quota error (device loop8): write_blk: dquota write failed
[  547.763921][T10369] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  547.774010][T10369] EXT4-fs error (device loop8): ext4_acquire_dquot:6809: comm syz.8.1643: Failed to acquire dquot type 0
[  547.785781][T10369] EXT4-fs error (device loop8): ext4_free_blocks:6205: comm syz.8.1643: Freeing blocks not in datazone - block = 0, count = 4096
[  547.799521][T10369] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1643: Invalid inode bitmap blk 0 in block_group 0
[  547.814278][T10369] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem
[  547.824246][ T4409] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-8
[  547.836906][T10369] EXT4-fs (loop8): 1 orphan inode deleted
[  547.842864][T10369] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  547.868262][ T4409] EXT4-fs error (device loop8): ext4_release_dquot:6845: comm kworker/u4:7: Failed to release dquot type 0
[  548.039484][T10374] loop7: detected capacity change from 0 to 128
[  548.315123][T10378] loop5: detected capacity change from 0 to 1764
[  548.900874][T10388] device wireguard0 entered promiscuous mode
[  549.368545][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  549.741853][T10194] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  549.932135][T10194] usb 6-1: Using ep0 maxpacket: 16
[  549.943052][T10194] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.983014][T10194] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  550.024843][T10194] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  550.057827][T10194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.102285][T10194] usb 6-1: Product: syz
[  550.106529][T10194] usb 6-1: Manufacturer: syz
[  550.111173][T10194] usb 6-1: SerialNumber: syz
[  550.169095][T10412] loop7: detected capacity change from 0 to 512
[  550.220004][T10412] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1658: inode has both inline data and extents flags
[  550.251120][T10151] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  550.267089][T10194] usb 6-1: config 0 descriptor??
[  550.304897][T10412] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1658: couldn't read orphan inode 15 (err -117)
[  550.737792][T10412] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  551.091080][T10421] loop6: detected capacity change from 0 to 512
[  551.179155][T10151] usb 10-1: Using ep0 maxpacket: 32
[  551.195971][T10151] usb 10-1: unable to get BOS descriptor set
[  551.208838][T10151] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 48, using maximum allowed: 30
[  551.249118][T10421] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  551.444892][T10421] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.861194][T10429] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1660'.
[  551.886372][   T26] audit: type=1800 audit(1763622239.081:97): pid=10421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1659" name="file1" dev="loop6" ino=18 res=0 errno=0
[  551.960963][T10151] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.972438][T10151] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.974651][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  551.982638][T10151] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 48
[  551.986745][T10151] usb 10-1: string descriptor 0 read error: -22
[  552.009460][T10430] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  552.020037][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1660'.
[  552.030711][T10151] usb 10-1: New USB device found, idVendor=04f2, idProduct=1400, bcdDevice= 0.40
[  552.041399][T10151] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.098300][T10430] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  552.135377][T10430] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.1659: Failed to acquire dquot type 0
[  552.228939][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  552.263464][T10434] loop7: detected capacity change from 0 to 1024
[  552.279834][T10151] usb 10-1: USB disconnect, device number 3
[  552.289176][T10435] loop8: detected capacity change from 0 to 512
[  552.323852][T10435] EXT4-fs: Ignoring removed nobh option
[  552.329795][T10434] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #3: block 2: comm syz.7.1661: lblock 2 mapped to illegal pblock 2 (length 1)
[  552.361670][T10435] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1662: invalid indirect mapped block 256 (level 2)
[  552.371508][T10434] Quota error (device loop7): write_blk: dquota write failed
[  552.389799][T10435] EXT4-fs (loop8): Remounting filesystem read-only
[  552.397536][T10435] EXT4-fs (loop8): 2 truncates cleaned up
[  552.403746][T10435] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  552.419408][   T26] audit: type=1800 audit(1763622239.611:98): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1662" name="bus" dev="loop8" ino=18 res=0 errno=0
[  552.462467][T10434] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2
[  552.502751][T10194] usb 6-1: USB disconnect, device number 6
[  552.524039][ T8841] EXT4-fs (loop8): unmounting filesystem.
[  552.548936][   T26] audit: type=1804 audit(1763622239.651:99): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1662" name="/newroot/87/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  552.554175][T10434] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.1661: Failed to acquire dquot type 0
[  552.762290][T10434] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.1661: lblock 2 mapped to illegal pblock 2 (length 1)
[  552.766418][T10446] loop8: detected capacity change from 0 to 256
[  552.874527][T10434] __quota_error: 1 callbacks suppressed
[  552.874545][T10434] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  552.903997][T10446] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  553.018714][T10446] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  553.036110][T10449] loop5: detected capacity change from 0 to 256
[  553.107897][T10453] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  553.715290][T10434] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.1661: Failed to acquire dquot type 0
[  553.793348][T10434] EXT4-fs error (device loop7): ext4_free_blocks:6205: comm syz.7.1661: Freeing blocks not in datazone - block = 0, count = 4096
[  553.948106][T10434] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.1661: lblock 2 mapped to illegal pblock 2 (length 1)
[  554.070730][T10434] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  554.178321][T10434] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.1661: Failed to acquire dquot type 0
[  554.231127][T10434] EXT4-fs (loop7): 1 orphan inode deleted
[  554.242311][T10434] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  554.453302][T10194] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  554.744844][T10194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  554.858260][T10194] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  554.979132][T10194] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  554.995368][T10194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  555.033513][T10194] usb 6-1: SerialNumber: syz
[  555.188802][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  555.319505][T10194] usb 6-1: invalid UAC_HEADER (v1)
[  555.397538][T10194] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  555.465446][T10476] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  555.516012][T10476] FAT-fs (loop19): unable to read boot sector
[  555.589108][T10194] usb 6-1: USB disconnect, device number 7
[  555.850731][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  556.959155][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1682'.
[  558.438885][T10519] loop5: detected capacity change from 0 to 2048
[  558.506451][T10519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  558.534406][T10523] loop6: detected capacity change from 0 to 512
[  558.582262][T10519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1689'.
[  558.905969][T10523] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1690: bg 0: block 473: padding at end of block bitmap is not set
[  559.163272][T10523] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  559.239538][T10523] EXT4-fs (loop6): 1 orphan inode deleted
[  559.272216][ T4311] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  559.317394][T10523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  559.331939][ T4311] EXT4-fs error (device loop6): ext4_release_dquot:6845: comm kworker/u4:5: Failed to release dquot type 1
[  559.384576][T10523] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  559.812687][ T7557] EXT4-fs (loop6): unmounting filesystem.
[  561.014655][T10567] loop7: detected capacity change from 0 to 128
[  561.199938][T10567] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  561.211378][T10567] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  562.269068][T10577] loop9: detected capacity change from 0 to 2048
[  562.418035][T10577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  562.643369][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1704'.
[  562.773931][T10582] loop5: detected capacity change from 0 to 512
[  562.855872][T10582] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  562.896809][ T8423] EXT4-fs (loop7): unmounting filesystem.
[  565.040327][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  565.193825][T10606] loop8: detected capacity change from 0 to 256
[  565.761020][   T26] audit: type=1326 audit(1763622252.351:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  565.979795][   T26] audit: type=1326 audit(1763622252.351:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  566.093883][   T26] audit: type=1326 audit(1763622252.361:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  566.230335][   T26] audit: type=1326 audit(1763622252.361:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  566.316545][T10618] loop6: detected capacity change from 0 to 1024
[  567.382344][T10626] futex_wake_op: syz.9.1718 tries to shift op by 32; fix this program
[  567.444760][   T26] audit: type=1326 audit(1763622252.361:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  567.571943][   T26] audit: type=1326 audit(1763622252.361:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb4c798f749 code=0x7ffc0000
[  567.594899][   T26] audit: type=1326 audit(1763622252.361:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4c798f783 code=0x7ffc0000
[  567.597979][   T11] hfsplus: b-tree write err: -5, ino 4
[  567.635497][T10631] loop7: detected capacity change from 0 to 512
[  567.686406][T10631] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  567.745509][   T26] audit: type=1326 audit(1763622252.371:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4c798e1ff code=0x7ffc0000
[  567.898198][   T26] audit: type=1326 audit(1763622252.381:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb4c798f7d7 code=0x7ffc0000
[  567.989135][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  567.995561][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  568.208462][   T26] audit: type=1326 audit(1763622252.381:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.8.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb4c798df90 code=0x7ffc0000
[  568.282644][T10644] loop7: detected capacity change from 0 to 164
[  568.334057][T10644] ISOFS: unable to read i-node block
[  568.366949][T10644] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  568.514458][T10650] loop9: detected capacity change from 0 to 2048
[  568.583161][T10652] loop5: detected capacity change from 0 to 256
[  568.626307][T10650] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  568.702043][ T4350] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  568.745268][T10650] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1725'.
[  568.914698][ T4350] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  568.967241][ T4350] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  569.806191][ T4350] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  569.823215][ T4350] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  569.851882][ T4350] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.859947][ T4350] usb 7-1: Product: syz
[  569.911914][ T4350] usb 7-1: Manufacturer: syz
[  569.916608][ T4350] usb 7-1: SerialNumber: syz
[  570.282051][ T4313] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  570.311682][T10681] loop7: detected capacity change from 0 to 512
[  570.523633][T10681] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  572.321918][ T4313] usb 6-1: Using ep0 maxpacket: 8
[  572.341231][ T4313] usb 6-1: config 1 interface 0 altsetting 136 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  572.434718][ T4313] usb 6-1: config 1 interface 0 has no altsetting 0
[  572.469444][ T4313] usb 6-1: string descriptor 0 read error: -22
[  572.492547][ T4313] usb 6-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.40
[  572.520324][T10694] Bluetooth: MGMT ver 1.22
[  572.538102][ T4350] cdc_ncm 7-1:1.0: bind() failure
[  572.581841][ T4350] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  572.588583][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.622664][ T4350] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  573.068969][T10698] device wireguard0 entered promiscuous mode
[  573.363661][ T4350] usbtest: probe of 7-1:1.1 failed with error -71
[  573.411720][ T4350] usb 7-1: USB disconnect, device number 4
[  573.573127][ T4313] usbhid 6-1:1.0: can't add hid device: -71
[  573.579184][ T4313] usbhid: probe of 6-1:1.0 failed with error -71
[  573.619989][ T4313] usb 6-1: USB disconnect, device number 8
[  573.688349][    T7] kernel write not supported for file /snd/seq (pid: 7 comm: kworker/0:0)
[  573.875713][T10705] ------------[ cut here ]------------
[  573.881298][T10705] WARNING: CPU: 0 PID: 10705 at mm/page_alloc.c:5590 __alloc_pages+0x2f4/0x4e0
[  573.890459][T10705] Modules linked in:
[  573.894516][T10705] CPU: 0 PID: 10705 Comm: syz.9.1738 Not tainted syzkaller #0
[  573.902198][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  573.912464][T10705] RIP: 0010:__alloc_pages+0x2f4/0x4e0
[  573.917900][T10705] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  573.937745][T10705] RSP: 0018:ffffc9000571fa00 EFLAGS: 00010246
[  573.944084][T10705] RAX: ffffc9000571fa00 RBX: 1ffff92000ae3f44 RCX: 0000000000000000
[  573.952334][T10705] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000571fa68
[  573.960443][T10705] RBP: ffffc9000571fb00 R08: dffffc0000000000 R09: ffffc9000571fa40
[  573.969145][T10705] R10: fffff52000ae3f4d R11: 1ffff92000ae3f48 R12: 0000000000000013
[  573.977280][T10705] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  573.985359][T10705] FS:  00007fb7877df6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  573.994398][T10705] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  574.001252][T10705] CR2: 0000200000000000 CR3: 000000005e8ae000 CR4: 00000000003506f0
[  574.009324][T10705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  574.017388][T10705] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  574.025644][T10705] Call Trace:
[  574.028965][T10705]  <TASK>
[  574.031985][T10705]  ? zone_statistics+0x170/0x170
[  574.036982][T10705]  ? __might_fault+0xa6/0x120
[  574.041793][T10705]  ? __lock_acquire+0x7c50/0x7c50
[  574.046971][T10705]  ? do_vfs_ioctl+0xcb5/0x1d10
[  574.051840][T10705]  __kmalloc_large_node+0x8c/0x1e0
[  574.057039][T10705]  ? raw_ioctl+0x17c7/0x39c0
[  574.061819][T10705]  __kmalloc+0x110/0x240
[  574.066133][T10705]  ? _copy_from_user+0x10b/0x170
[  574.071135][T10705]  raw_ioctl+0x17c7/0x39c0
[  574.075675][T10705]  ? tomoyo_path_number_perm+0x4ae/0x600
[  574.081369][T10705]  ? __kmem_cache_free+0xb6/0x1f0
[  574.086505][T10705]  ? tomoyo_path_number_perm+0x503/0x600
[  574.092233][T10705]  ? tomoyo_path_number_perm+0x1b6/0x600
[  574.097922][T10705]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  574.103575][T10705]  ? make_qualifier+0x3f0/0x3f0
[  574.108620][T10705]  ? __fget_files+0x28/0x4d0
[  574.113343][T10705]  ? bpf_lsm_file_ioctl+0x5/0x10
[  574.118385][T10705]  ? security_file_ioctl+0x7c/0xa0
[  574.123705][T10705]  ? make_qualifier+0x3f0/0x3f0
[  574.128621][T10705]  __se_sys_ioctl+0xfa/0x170
[  574.133338][T10705]  do_syscall_64+0x4c/0xa0
[  574.137822][T10705]  ? clear_bhb_loop+0x60/0xb0
[  574.142662][T10705]  ? clear_bhb_loop+0x60/0xb0
[  574.147398][T10705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.153407][T10705] RIP: 0033:0x7fb78698f749
[  574.157874][T10705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.177618][T10705] RSP: 002b:00007fb7877df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  574.186141][T10705] RAX: ffffffffffffffda RBX: 00007fb786be5fa0 RCX: 00007fb78698f749
[  574.194242][T10705] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000003
[  574.202308][T10705] RBP: 00007fb786a13f91 R08: 0000000000000000 R09: 0000000000000000
[  574.210337][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  574.218620][T10705] R13: 00007fb786be6038 R14: 00007fb786be5fa0 R15: 00007fffd7e80698
[  574.226723][T10705]  </TASK>
[  574.229820][T10705] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  574.237139][T10705] CPU: 0 PID: 10705 Comm: syz.9.1738 Not tainted syzkaller #0
[  574.244727][T10705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  574.254816][T10705] Call Trace:
[  574.258112][T10705]  <TASK>
[  574.261056][T10705]  dump_stack_lvl+0x168/0x22e
[  574.265763][T10705]  ? memcpy+0x3c/0x60
[  574.269773][T10705]  ? show_regs_print_info+0x12/0x12
[  574.274991][T10705]  ? load_image+0x3b0/0x3b0
[  574.279525][T10705]  panic+0x2c9/0x710
[  574.283445][T10705]  ? bpf_jit_dump+0xd0/0xd0
[  574.287981][T10705]  __warn+0x2f8/0x4f0
[  574.291983][T10705]  ? __alloc_pages+0x2f4/0x4e0
[  574.296773][T10705]  ? __alloc_pages+0x2f4/0x4e0
[  574.301554][T10705]  report_bug+0x2ba/0x4f0
[  574.305898][T10705]  ? __alloc_pages+0x2f4/0x4e0
[  574.310782][T10705]  handle_bug+0x3a/0x70
[  574.314959][T10705]  exc_invalid_op+0x16/0x40
[  574.319506][T10705]  asm_exc_invalid_op+0x16/0x20
[  574.324371][T10705] RIP: 0010:__alloc_pages+0x2f4/0x4e0
[  574.329769][T10705] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 32 1f 45 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  574.349404][T10705] RSP: 0018:ffffc9000571fa00 EFLAGS: 00010246
[  574.355486][T10705] RAX: ffffc9000571fa00 RBX: 1ffff92000ae3f44 RCX: 0000000000000000
[  574.363470][T10705] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc9000571fa68
[  574.371469][T10705] RBP: ffffc9000571fb00 R08: dffffc0000000000 R09: ffffc9000571fa40
[  574.379560][T10705] R10: fffff52000ae3f4d R11: 1ffff92000ae3f48 R12: 0000000000000013
[  574.387985][T10705] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  574.396074][T10705]  ? zone_statistics+0x170/0x170
[  574.401039][T10705]  ? __might_fault+0xa6/0x120
[  574.405815][T10705]  ? __lock_acquire+0x7c50/0x7c50
[  574.410860][T10705]  ? do_vfs_ioctl+0xcb5/0x1d10
[  574.415705][T10705]  __kmalloc_large_node+0x8c/0x1e0
[  574.420934][T10705]  ? raw_ioctl+0x17c7/0x39c0
[  574.425536][T10705]  __kmalloc+0x110/0x240
[  574.429799][T10705]  ? _copy_from_user+0x10b/0x170
[  574.434758][T10705]  raw_ioctl+0x17c7/0x39c0
[  574.439295][T10705]  ? tomoyo_path_number_perm+0x4ae/0x600
[  574.444945][T10705]  ? __kmem_cache_free+0xb6/0x1f0
[  574.449988][T10705]  ? tomoyo_path_number_perm+0x503/0x600
[  574.455644][T10705]  ? tomoyo_path_number_perm+0x1b6/0x600
[  574.461303][T10705]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  574.466802][T10705]  ? make_qualifier+0x3f0/0x3f0
[  574.471765][T10705]  ? __fget_files+0x28/0x4d0
[  574.476467][T10705]  ? bpf_lsm_file_ioctl+0x5/0x10
[  574.481422][T10705]  ? security_file_ioctl+0x7c/0xa0
[  574.486551][T10705]  ? make_qualifier+0x3f0/0x3f0
[  574.491417][T10705]  __se_sys_ioctl+0xfa/0x170
[  574.496037][T10705]  do_syscall_64+0x4c/0xa0
[  574.500473][T10705]  ? clear_bhb_loop+0x60/0xb0
[  574.505166][T10705]  ? clear_bhb_loop+0x60/0xb0
[  574.509944][T10705]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  574.515856][T10705] RIP: 0033:0x7fb78698f749
[  574.520292][T10705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.540266][T10705] RSP: 002b:00007fb7877df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  574.548792][T10705] RAX: ffffffffffffffda RBX: 00007fb786be5fa0 RCX: 00007fb78698f749
[  574.556777][T10705] RDX: 0000200000000000 RSI: 00000000c0085508 RDI: 0000000000000003
[  574.564763][T10705] RBP: 00007fb786a13f91 R08: 0000000000000000 R09: 0000000000000000
[  574.572918][T10705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  574.580985][T10705] R13: 00007fb786be6038 R14: 00007fb786be5fa0 R15: 00007fffd7e80698
[  574.588976][T10705]  </TASK>
[  574.592398][T10705] Kernel Offset: disabled
[  574.596738][T10705] Rebooting in 86400 seconds..