last executing test programs:

19.569410035s ago: executing program 1 (id=3455):
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffea0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000640)=@phonet, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000b80)=""/89, 0x59}], 0x4, &(0x7f0000000c80)=""/26, 0x1a}, 0x7f}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/37, 0x25}], 0x1, &(0x7f0000000d40)=""/1, 0x1}, 0x6}], 0x2, 0x2, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000002280)=""/4118, 0x1016)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
clock_nanosleep(0x2, 0x1, &(0x7f0000000140), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

15.552948406s ago: executing program 1 (id=3457):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_clone3(0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, r5)

14.102217351s ago: executing program 1 (id=3461):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @broadcast}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa20000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10)
open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x0)

5.116086269s ago: executing program 3 (id=3478):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cgroup\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@resuid}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x3226034, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
socket(0x15, 0x5, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r5, 0x0, 0x20000010)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x39, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x45, &(0x7f0000000000)=[@cr4={0x1, 0x9e3}], 0x1)

4.869077284s ago: executing program 3 (id=3480):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x1a, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

4.797575021s ago: executing program 3 (id=3481):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x80, &(0x7f00000008c0)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0xf4)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_cache\x00')

4.261035444s ago: executing program 2 (id=3483):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00"], 0x0, 0x34}, 0x28)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

3.512951259s ago: executing program 4 (id=3484):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, 0x0, 0x0, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_clone3(0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, r5)

3.131636187s ago: executing program 4 (id=3485):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000001a00)=ANY=[@ANYBLOB='iocharset=koi8-ru,errors=continue,umask=00000000000000000000005,errors=remount-ro,namecase=1,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\b\x00'], 0x1, 0x1519, &(0x7f0000007640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r3 = dup(r1)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000)
signalfd4(r0, &(0x7f0000000280)={[0x8000000000000000]}, 0x8, 0x800)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=")
statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000080)=""/214)

2.776567703s ago: executing program 0 (id=3488):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write(r2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

2.681796542s ago: executing program 3 (id=3489):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00), 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, r5)

2.583405582s ago: executing program 4 (id=3490):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone3(&(0x7f00000005c0)={0x80000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3}, 0x58)

2.581522762s ago: executing program 2 (id=3491):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cgroup\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@resuid}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x3226034, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
socket(0x15, 0x5, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r5, 0x0, 0x20000010)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x39, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x45, &(0x7f0000000000)=[@cr4={0x1, 0x9e3}], 0x1)

2.520029058s ago: executing program 4 (id=3492):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_usb_connect(0x5, 0xc9, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029cf8cd08042348028c7c010203010902b70002020c508209049301039df99ab1052406000005240087000d240f01080000000e00800002022109050a10000205c2030725018102540007250180090000090505042000080001020f0905060000040508ca072501000a0700072501830901000904900005205545070905050c4000070705090505011000090013090501002000b108090905020420000100c7"], 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r5, &(0x7f0000000000), 0x10)
dup3(r4, r5, 0x0)

2.490082791s ago: executing program 3 (id=3493):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0)

2.212465359s ago: executing program 0 (id=3494):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r2 = dup(r0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r4, &(0x7f0000000080)="c0", 0x1, 0x4080, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

2.170536763s ago: executing program 2 (id=3495):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1)
writev(r3, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000484000/0x3000)=nil, 0x3000, 0x16)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

2.115479689s ago: executing program 0 (id=3496):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x7fffffffffffffff, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x1000, 0x100004, r6, r7, 0x7, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.517795179s ago: executing program 3 (id=3497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)

1.380689902s ago: executing program 0 (id=3498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x4}]}}}], 0x18}, 0x0)

1.305195389s ago: executing program 1 (id=3499):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000500)={'syz1\x00', {0xfff, 0x1, 0x100, 0x9}, 0x6, [0x0, 0x6, 0xa58, 0x0, 0x9, 0xfffffffb, 0x200, 0xe, 0x1, 0x3, 0x9, 0x5, 0x400, 0x5, 0xa, 0x3, 0x0, 0x6, 0x1ff, 0x0, 0xfae, 0x400, 0x6, 0x0, 0x1, 0x5, 0x1, 0x1ff, 0xb86, 0x10000, 0x80000001, 0x7, 0xffffffff, 0x0, 0x800, 0xc75, 0x1, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x0, 0x400, 0x1, 0xe231, 0x4, 0x5, 0x101, 0x3, 0x0, 0x10000, 0x200, 0x6, 0x9, 0x7, 0x1, 0x2, 0x4, 0xf, 0x8000, 0x500000, 0x12fe, 0x327129ec], [0xc, 0xe0a, 0xdd5d, 0x0, 0x8000, 0xded, 0x4, 0x2, 0x401, 0x0, 0x2, 0x4, 0x7, 0xe6b9, 0x1, 0x2, 0x7f, 0x10000, 0xffffff4a, 0x0, 0x3, 0x8, 0x821, 0xf74c, 0x3, 0xb73b, 0x3, 0xfffffff7, 0x8, 0x1, 0x3, 0x808, 0x5, 0x3, 0x2a, 0x8, 0x7, 0x8, 0x3bc, 0xfffff801, 0x7, 0x97, 0x3, 0x7f, 0x6, 0xfffffffe, 0xcc1, 0x6, 0x9, 0x3, 0x6171, 0x8, 0x6, 0x7, 0x5, 0x180, 0x9, 0xc7b, 0x0, 0x6, 0x1000, 0x6, 0xc4, 0x3], [0x2, 0x8000, 0x6, 0xd4a, 0x6, 0x6, 0x2, 0x1, 0x6, 0x4, 0x200, 0x7ff, 0x200, 0xfffffff7, 0x8, 0x2, 0x4, 0x7, 0x3ff, 0x5, 0x9, 0x7, 0x10, 0x3ff, 0x89, 0x8, 0x80000001, 0x8, 0x0, 0x7edf, 0x80, 0xffffff8d, 0x2, 0x0, 0x1b, 0xf, 0x1de000, 0x565, 0x5, 0x7, 0x40, 0x10001, 0x606f, 0x2, 0x3, 0x2, 0x0, 0x80000000, 0x2, 0x0, 0x3, 0xa, 0x3, 0xa99d, 0xf, 0x1, 0x3, 0xa, 0x0, 0x1, 0x5, 0x8325, 0x7, 0x10001], [0xe61, 0x8000, 0x1, 0xfdf, 0xfff, 0x2, 0x6, 0x80, 0x8, 0xcb, 0x7, 0x650, 0x7dcd, 0x5, 0x6f51, 0x1, 0x5, 0x3, 0xfffffffb, 0x2, 0xd468, 0x1, 0x60000000, 0x17, 0x1ff, 0x9, 0x7, 0xa, 0x100, 0x11e, 0x173, 0x5, 0x6, 0x400, 0x8, 0x5, 0x8, 0x7f, 0x8, 0x800, 0x63, 0x1ff, 0x3, 0x3, 0x80, 0x401, 0xf, 0x401, 0x2, 0x2, 0xbd3f, 0x6c0, 0x0, 0x8, 0x6, 0x0, 0x80800, 0x9, 0x3, 0x20000000, 0x0, 0x3, 0x786, 0xb]}, 0x45c)
close_range(r4, 0xffffffffffffffff, 0x0)

1.259959464s ago: executing program 1 (id=3500):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x282}, &(0x7f0000000080), &(0x7f0000ff4000))

1.193047591s ago: executing program 0 (id=3501):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00"], 0x0, 0x34}, 0x28)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)

1.072718923s ago: executing program 2 (id=3502):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)

282.822792ms ago: executing program 4 (id=3503):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
write(r0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, r5)

165.631453ms ago: executing program 2 (id=3504):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='W', 0x1}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014)
sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_clone3(&(0x7f00000005c0)={0x80000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x3}, 0x58)

152.645435ms ago: executing program 0 (id=3505):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write(r2, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

97.5433ms ago: executing program 1 (id=3506):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cgroup\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@resuid}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x3226034, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x1000, 0x0, @mcast2, 0x28}, 0x1c)
connect$pppl2tp(r7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)
socket(0x15, 0x5, 0x0)
sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000010)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x39, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x45, &(0x7f0000000000)=[@cr4={0x1, 0x9e3}], 0x1)

14.101589ms ago: executing program 2 (id=3507):
getuid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x1, 0x4800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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")

0s ago: executing program 4 (id=3508):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0)

kernel console output (not intermixed with test programs):

673][ T9917] EXT4-fs (loop0): mounted filesystem without journal. Opts: ЂЃ; usrquota,resuid=0x0000000000000000,bsdgroups,max_batch_time=0x0000000000000008,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  412.679093][ T9917] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback.
[  412.692807][ T9917] xt_hashlimit: size too large, truncated to 1048576
[  412.908948][ T9959] xt_policy: neither incoming nor outgoing policy selected
[  415.912434][ T9994] loop2: detected capacity change from 0 to 128
[  416.102135][T10003] attempt to access beyond end of device
[  416.102135][T10003] loop2: rw=2049, want=441, limit=128
[  416.211922][ T9994] attempt to access beyond end of device
[  416.211922][ T9994] loop2: rw=524288, want=369, limit=128
[  418.147245][T10038] loop4: detected capacity change from 0 to 128
[  418.302917][T10038] attempt to access beyond end of device
[  418.302917][T10038] loop4: rw=2049, want=1041, limit=128
[  418.514453][T10038] attempt to access beyond end of device
[  418.514453][T10038] loop4: rw=524288, want=369, limit=128
[  418.600518][T10038] attempt to access beyond end of device
[  418.600518][T10038] loop4: rw=0, want=153, limit=128
[  418.660708][ T4195] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  418.980961][ T4195] usb 4-1: Using ep0 maxpacket: 8
[  419.280830][ T4195] usb 4-1: unable to get BOS descriptor or descriptor too short
[  419.351490][ T4195] usb 4-1: unable to read config index 0 descriptor/start: -71
[  419.359137][ T4195] usb 4-1: can't read configurations, error -71
[  419.479003][T10049] loop2: detected capacity change from 0 to 1024
[  419.524167][T10049] EXT4-fs (loop2): inline encryption not supported
[  419.556390][T10049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce01c, mo2=0000]
[  419.570723][T10049] System zones: 0-1, 3-12
[  419.597499][T10049] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.2388: lblock 1 mapped to illegal pblock 1 (length 1)
[  419.636604][T10049] Quota error (device loop2): write_blk: dquota write failed
[  419.644100][T10049] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  419.654121][T10049] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.2388: Failed to acquire dquot type 0
[  419.670830][T10049] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.2388: Freeing blocks not in datazone - block = 0, count = 4096
[  419.690085][T10049] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2388: Invalid inode bitmap blk 0 in block_group 0
[  419.703064][ T1439] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  419.717480][T10049] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  419.731947][ T1439] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  419.741996][T10049] EXT4-fs (loop2): 1 orphan inode deleted
[  419.747744][T10049] EXT4-fs (loop2): mounted filesystem without journal. Opts: ЂЃ; usrquota,resuid=0x0000000000000000,bsdgroups,max_batch_time=0x0000000000000008,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  419.780691][ T1439] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:4: Failed to release dquot type 0
[  419.841366][T10049] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback.
[  419.877774][T10049] xt_hashlimit: size too large, truncated to 1048576
[  423.850466][T10073] loop1: detected capacity change from 0 to 128
[  424.003659][T10076] attempt to access beyond end of device
[  424.003659][T10076] loop1: rw=2049, want=705, limit=128
[  424.100520][T10073] attempt to access beyond end of device
[  424.100520][T10073] loop1: rw=524288, want=369, limit=128
[  424.126238][T10073] attempt to access beyond end of device
[  424.126238][T10073] loop1: rw=0, want=153, limit=128
[  424.480797][ T4249] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  424.706919][T10082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'.
[  424.736923][T10082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'.
[  424.740735][ T4249] usb 4-1: Using ep0 maxpacket: 8
[  424.900934][ T4249] usb 4-1: unable to get BOS descriptor or descriptor too short
[  425.621344][T10097] overlayfs: overlapping lowerdir path
[  425.971287][T10100] loop0: detected capacity change from 0 to 512
[  426.005090][ T4249] usb 4-1: unable to read config index 0 descriptor/start: -71
[  426.050134][ T4249] usb 4-1: can't read configurations, error -71
[  427.186987][T10100] EXT4-fs (loop0): orphan cleanup on readonly fs
[  427.250498][T10100] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2402: bg 0: block 248: padding at end of block bitmap is not set
[  427.278731][T10100] Quota error (device loop0): write_blk: dquota write failed
[  427.286673][T10100] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  427.297260][T10100] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.2402: Failed to acquire dquot type 1
[  427.344263][T10100] EXT4-fs (loop0): 1 truncate cleaned up
[  427.605974][T10100] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,noblock_validity,mb_optimize_scan=0x0000000000000000,grpjquota=,noquota,auto_da_alloc,dioread_lock,journal_dev=0x0000000056657b2b,,errors=continue. Quota mode: writeback.
[  428.440597][T10100] syz.0.2402 (10100) used greatest stack depth: 20512 bytes left
[  428.903733][T10111] loop3: detected capacity change from 0 to 512
[  429.258711][T10111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.2405: corrupted inode contents
[  429.286703][T10111] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #16: comm syz.3.2405: mark_inode_dirty error
[  429.304227][T10111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.2405: corrupted inode contents
[  429.318724][T10111] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.2405: mark_inode_dirty error
[  429.335039][T10111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.2405: corrupted inode contents
[  429.352491][T10111] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  429.379792][T10111] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #16: comm syz.3.2405: corrupted inode contents
[  429.394374][T10111] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.2405: mark_inode_dirty error
[  429.407940][T10111] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  429.424513][T10111] EXT4-fs (loop3): 1 truncate cleaned up
[  429.430241][T10111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  429.443307][T10111] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.215365][T10117] loop1: detected capacity change from 0 to 128
[  431.395703][ T4234] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  431.550715][ T4195] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  431.665941][ T4234] usb 4-1: Using ep0 maxpacket: 8
[  431.753278][ T4222] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  431.805794][ T4195] usb 2-1: Using ep0 maxpacket: 8
[  431.830818][ T4234] usb 4-1: unable to get BOS descriptor or descriptor too short
[  431.926050][ T4234] usb 4-1: unable to read config index 0 descriptor/start: -71
[  431.930794][ T4195] usb 2-1: unable to get BOS descriptor or descriptor too short
[  431.950934][ T4234] usb 4-1: can't read configurations, error -71
[  432.014961][ T4195] usb 2-1: unable to read config index 0 descriptor/start: -71
[  432.035184][ T4195] usb 2-1: can't read configurations, error -71
[  432.073969][ T4222] usb 1-1: Using ep0 maxpacket: 8
[  432.196927][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short
[  432.290778][ T4222] usb 1-1: unable to read config index 0 descriptor/start: -71
[  432.298726][ T4222] usb 1-1: can't read configurations, error -71
[  432.568048][T10159] 9pnet: Could not find request transport: fd00000000000000000004
[  433.160837][ T4195] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  433.221058][ T4222] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  433.289600][T10188] 9pnet: Could not find request transport: fd00000000000000000004
[  433.410715][ T4195] usb 2-1: Using ep0 maxpacket: 8
[  433.490770][ T4222] usb 1-1: Using ep0 maxpacket: 8
[  433.533806][ T4195] usb 2-1: unable to get BOS descriptor or descriptor too short
[  433.620873][ T4195] usb 2-1: unable to read config index 0 descriptor/start: -71
[  433.620952][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short
[  433.628573][   T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  433.655486][ T4195] usb 2-1: can't read configurations, error -71
[  433.670870][ T4195] usb usb2-port1: attempt power cycle
[  433.720982][ T4222] usb 1-1: unable to read config index 0 descriptor/start: -71
[  433.728582][ T4222] usb 1-1: can't read configurations, error -71
[  433.735792][ T4222] usb usb1-port1: attempt power cycle
[  433.910778][   T21] usb 5-1: Using ep0 maxpacket: 8
[  434.030901][   T21] usb 5-1: unable to get BOS descriptor or descriptor too short
[  434.100786][   T21] usb 5-1: unable to read config index 0 descriptor/start: -71
[  434.118613][   T21] usb 5-1: can't read configurations, error -71
[  434.283135][T10216] 9pnet: Insufficient options for proto=fd
[  434.894881][T10241] loop4: detected capacity change from 0 to 128
[  436.750842][ T4222] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  436.758529][ T4190] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  436.847839][T10251] loop4: detected capacity change from 0 to 128
[  437.040962][ T4222] usb 1-1: Using ep0 maxpacket: 8
[  437.061572][ T4190] usb 2-1: Using ep0 maxpacket: 8
[  437.201042][ T4222] usb 1-1: unable to get BOS descriptor or descriptor too short
[  437.220974][ T4190] usb 2-1: unable to get BOS descriptor or descriptor too short
[  437.270839][ T4222] usb 1-1: unable to read config index 0 descriptor/start: -71
[  437.278438][ T4222] usb 1-1: can't read configurations, error -71
[  437.301097][ T4190] usb 2-1: unable to read config index 0 descriptor/start: -71
[  437.318910][ T4190] usb 2-1: can't read configurations, error -71
[  437.576109][ T4249] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  437.830838][ T4249] usb 5-1: Using ep0 maxpacket: 8
[  437.950882][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short
[  438.016453][ T4249] usb 5-1: unable to read config index 0 descriptor/start: -71
[  438.029959][ T4249] usb 5-1: can't read configurations, error -71
[  438.305017][T10275] loop0: detected capacity change from 0 to 128
[  438.415327][T10276] xt_policy: neither incoming nor outgoing policy selected
[  439.322158][T10275] tipc: Started in network mode
[  439.327167][T10275] tipc: Node identity 4, cluster identity 4711
[  439.333447][T10275] tipc: Node number set to 4
[  440.085694][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.093008][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  441.350832][ T4249] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  441.404648][T10308] loop5: detected capacity change from 0 to 7
[  441.414493][ T7912] Dev loop5: unable to read RDB block 7
[  441.420116][ T7912]  loop5: unable to read partition table
[  441.435634][ T7912] loop5: partition table beyond EOD, truncated
[  441.458942][T10308] Dev loop5: unable to read RDB block 7
[  441.479731][T10308]  loop5: unable to read partition table
[  441.510836][T10308] loop5: partition table beyond EOD, truncated
[  441.524975][T10308] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  441.549900][ T3561] Dev loop5: unable to read RDB block 7
[  441.576257][ T3561]  loop5: unable to read partition table
[  441.583369][ T3561] loop5: partition table beyond EOD, truncated
[  441.600740][ T4249] usb 3-1: Using ep0 maxpacket: 8
[  441.720821][ T4249] usb 3-1: unable to get BOS descriptor or descriptor too short
[  441.780913][ T4249] usb 3-1: unable to read config index 0 descriptor/start: -71
[  441.809870][ T4249] usb 3-1: can't read configurations, error -71
[  442.834182][T10320] 9pnet: Insufficient options for proto=fd
[  442.940815][T10325] loop3: detected capacity change from 0 to 128
[  444.305135][T10325] tipc: Started in network mode
[  444.310312][T10325] tipc: Node identity 4, cluster identity 4711
[  444.316618][T10325] tipc: Node number set to 4
[  445.984218][T10352] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2509'.
[  446.950819][ T4222] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  447.236053][ T4222] usb 4-1: Using ep0 maxpacket: 8
[  447.360823][ T4249] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  447.390840][ T4222] usb 4-1: unable to get BOS descriptor or descriptor too short
[  447.490737][ T4222] usb 4-1: unable to read config index 0 descriptor/start: -71
[  447.498340][ T4222] usb 4-1: can't read configurations, error -71
[  447.610998][ T4249] usb 5-1: Using ep0 maxpacket: 16
[  447.730923][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.760746][ T4249] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  447.769843][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.801139][ T4249] usb 5-1: config 0 descriptor??
[  448.140851][ T4249] usbhid 5-1:0.0: can't add hid device: -71
[  448.146861][ T4249] usbhid: probe of 5-1:0.0 failed with error -71
[  448.206694][ T4249] usb 5-1: USB disconnect, device number 23
[  449.955671][T10426] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2525'.
[  450.965238][T10445] loop2: detected capacity change from 0 to 128
[  452.880691][ T4222] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  453.170678][ T4222] usb 5-1: Using ep0 maxpacket: 16
[  453.276232][T10462] loop1: detected capacity change from 0 to 256
[  453.363138][ T4222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.999842][ T4222] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  454.010028][ T4222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.022166][ T4222] usb 5-1: config 0 descriptor??
[  454.038609][T10462] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  454.060842][ T4222] usb 5-1: can't set config #0, error -71
[  454.119781][ T4222] usb 5-1: USB disconnect, device number 24
[  455.362576][T10478] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2540'.
[  458.039832][    T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  458.320754][    T7] usb 2-1: Using ep0 maxpacket: 16
[  458.480928][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.530409][    T7] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  458.657327][T10522] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2556'.
[  459.173894][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.185468][    T7] usb 2-1: config 0 descriptor??
[  459.328341][T10510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2553'.
[  459.564961][    T7] usbhid 2-1:0.0: can't add hid device: -71
[  459.575095][    T7] usbhid: probe of 2-1:0.0 failed with error -71
[  459.603621][ T6598] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  459.609413][    T7] usb 2-1: USB disconnect, device number 33
[  459.860696][ T6598] usb 4-1: Using ep0 maxpacket: 8
[  459.981783][ T6598] usb 4-1: unable to get BOS descriptor or descriptor too short
[  460.060890][ T6598] usb 4-1: unable to read config index 0 descriptor/start: -71
[  460.072791][ T6598] usb 4-1: can't read configurations, error -71
[  462.985850][    T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  463.165216][T10549] xt_policy: neither incoming nor outgoing policy selected
[  463.850723][    T7] usb 3-1: Using ep0 maxpacket: 8
[  463.993856][    T7] usb 3-1: unable to get BOS descriptor or descriptor too short
[  464.091318][    T7] usb 3-1: unable to read config index 0 descriptor/start: -71
[  464.122689][    T7] usb 3-1: can't read configurations, error -71
[  465.069692][T10569] loop5: detected capacity change from 0 to 7
[  465.176493][ T7912] Dev loop5: unable to read RDB block 7
[  465.186564][ T7912]  loop5: unable to read partition table
[  465.212859][ T7912] loop5: partition table beyond EOD, truncated
[  465.257419][T10569] Dev loop5: unable to read RDB block 7
[  465.271705][T10569]  loop5: unable to read partition table
[  465.293096][T10569] loop5: partition table beyond EOD, truncated
[  465.301549][T10569] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  466.037515][T10592] loop4: detected capacity change from 0 to 128
[  467.892385][T10600] loop2: detected capacity change from 0 to 128
[  469.763613][ T6598] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  470.031735][ T6598] usb 2-1: Using ep0 maxpacket: 8
[  470.211010][ T6598] usb 2-1: unable to get BOS descriptor or descriptor too short
[  470.346706][ T6598] usb 2-1: unable to read config index 0 descriptor/start: -71
[  470.444129][ T6598] usb 2-1: can't read configurations, error -71
[  470.915103][T10629] xt_socket: unknown flags 0x50
[  477.650950][ T4190] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  477.930693][ T4190] usb 1-1: Using ep0 maxpacket: 16
[  478.100949][ T4190] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.130758][ T4190] usb 1-1: config 0 interface 0 has no altsetting 0
[  478.170712][ T4190] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  478.179788][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.242493][ T4190] usb 1-1: config 0 descriptor??
[  479.160802][ T4190] usbhid 1-1:0.0: can't add hid device: -71
[  479.166841][ T4190] usbhid: probe of 1-1:0.0 failed with error -71
[  479.247081][ T4190] usb 1-1: USB disconnect, device number 36
[  479.939648][T10752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2636'.
[  483.790705][ T4222] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  484.091093][ T4222] usb 5-1: Using ep0 maxpacket: 16
[  484.791708][ T4222] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.805759][ T4222] usb 5-1: config 0 interface 0 has no altsetting 0
[  484.821186][ T4222] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  484.830250][ T4222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.852898][ T4222] usb 5-1: config 0 descriptor??
[  485.236116][ T4222] usbhid 5-1:0.0: can't add hid device: -71
[  485.242263][ T4222] usbhid: probe of 5-1:0.0 failed with error -71
[  485.279827][ T4222] usb 5-1: USB disconnect, device number 25
[  489.000722][T10822] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  489.240744][T10822] usb 5-1: Using ep0 maxpacket: 16
[  489.360896][T10822] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  489.380705][T10822] usb 5-1: config 0 interface 0 has no altsetting 0
[  489.390996][T10822] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  489.420381][T10822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.446348][T10822] usb 5-1: config 0 descriptor??
[  489.800797][T10822] usbhid 5-1:0.0: can't add hid device: -71
[  489.806813][T10822] usbhid: probe of 5-1:0.0 failed with error -71
[  489.847685][T10822] usb 5-1: USB disconnect, device number 26
[  491.399403][ T4190] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  493.050674][ T4190] usb 5-1: Using ep0 maxpacket: 8
[  493.214396][ T4190] usb 5-1: unable to get BOS descriptor or descriptor too short
[  493.920813][ T4190] usb 5-1: unable to read config index 0 descriptor/start: -71
[  493.939927][ T4190] usb 5-1: can't read configurations, error -71
[  497.614046][T10935] xt_socket: unknown flags 0x50
[  501.303227][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.309575][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  502.310727][ T4190] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  502.597596][T10993] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2723'.
[  502.607917][ T4190] usb 1-1: Using ep0 maxpacket: 8
[  502.781122][ T4190] usb 1-1: unable to get BOS descriptor or descriptor too short
[  502.860721][ T4190] usb 1-1: unable to read config index 0 descriptor/start: -71
[  502.878522][ T4190] usb 1-1: can't read configurations, error -71
[  505.694404][ T4190] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  505.970824][ T4190] usb 1-1: Using ep0 maxpacket: 16
[  506.117729][ T4190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.149123][ T4190] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  506.787998][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.831385][ T4190] usb 1-1: config 0 descriptor??
[  507.171471][ T4190] usbhid 1-1:0.0: can't add hid device: -71
[  507.182575][ T4190] usbhid: probe of 1-1:0.0 failed with error -71
[  507.250022][ T4190] usb 1-1: USB disconnect, device number 39
[  509.408655][T11084] xt_socket: unknown flags 0x50
[  509.572088][ T4222] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  509.866387][ T4222] usb 4-1: Using ep0 maxpacket: 16
[  510.011344][ T4222] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.029213][ T4222] usb 4-1: config 0 interface 0 has no altsetting 0
[  510.055936][ T4222] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  510.075709][ T4222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.110209][ T4222] usb 4-1: config 0 descriptor??
[  510.470757][    T7] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  510.491433][ T4222] usbhid 4-1:0.0: can't add hid device: -71
[  510.497429][ T4222] usbhid: probe of 4-1:0.0 failed with error -71
[  510.524452][ T4222] usb 4-1: USB disconnect, device number 21
[  510.760692][    T7] usb 5-1: Using ep0 maxpacket: 16
[  510.931408][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.950262][    T7] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  510.960278][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.988573][    T7] usb 5-1: config 0 descriptor??
[  511.345965][    T7] usbhid 5-1:0.0: can't add hid device: -71
[  511.360740][    T7] usbhid: probe of 5-1:0.0 failed with error -71
[  511.411260][    T7] usb 5-1: USB disconnect, device number 29
[  513.691803][T11138] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2770'.
[  514.210757][T10822] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  514.460807][T10822] usb 3-1: Using ep0 maxpacket: 16
[  514.580910][T10822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.610861][T10822] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  514.633016][T10822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.665722][T10822] usb 3-1: config 0 descriptor??
[  515.051029][T10822] usbhid 3-1:0.0: can't add hid device: -71
[  515.057035][T10822] usbhid: probe of 3-1:0.0 failed with error -71
[  515.111187][T10822] usb 3-1: USB disconnect, device number 29
[  515.300053][T11151] chnl_net:caif_netlink_parms(): no params data found
[  515.371224][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.504454][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.540705][   T21] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  515.641305][T11151] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.648409][T11151] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.663459][T11151] device bridge_slave_0 entered promiscuous mode
[  515.686194][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.729672][T11151] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.747464][T11151] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.782047][T11151] device bridge_slave_1 entered promiscuous mode
[  515.790767][   T21] usb 5-1: Using ep0 maxpacket: 8
[  515.861135][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.925208][T11151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.965507][T11151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.048990][T11151] team0: Port device team_slave_0 added
[  516.129480][T11151] team0: Port device team_slave_1 added
[  516.130778][   T21] usb 5-1: unable to get BOS descriptor or descriptor too short
[  516.211538][   T21] usb 5-1: unable to read config index 0 descriptor/start: -71
[  516.333965][   T21] usb 5-1: can't read configurations, error -71
[  516.692674][T11151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  516.699656][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.820650][T11151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.881836][T11151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.888817][T11151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.970866][T10822] Bluetooth: hci5: command 0x0409 tx timeout
[  517.015455][T11151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  517.061524][    T9] tipc: Left network mode
[  517.162251][T11151] device hsr_slave_0 entered promiscuous mode
[  517.184033][T11151] device hsr_slave_1 entered promiscuous mode
[  517.216968][T11151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  517.234564][T11151] Cannot create hsr debugfs directory
[  517.594026][T11200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2795'.
[  518.972336][T11151] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  519.053722][   T26] Bluetooth: hci5: command 0x041b tx timeout
[  519.148350][T11151] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  519.177234][T11151] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  519.204756][T11151] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  519.331922][    T9] device hsr_slave_0 left promiscuous mode
[  519.373833][    T9] device hsr_slave_1 left promiscuous mode
[  519.403034][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.410535][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  519.452205][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.459647][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  519.502666][    T9] device bridge_slave_1 left promiscuous mode
[  519.512576][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.556725][    T9] device bridge_slave_0 left promiscuous mode
[  519.577741][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.671937][    T9] device veth1_macvtap left promiscuous mode
[  519.678937][    T9] device veth0_macvtap left promiscuous mode
[  519.723343][    T9] device veth1_vlan left promiscuous mode
[  519.729483][    T9] device veth0_vlan left promiscuous mode
[  520.506590][    T9] team0 (unregistering): Port device team_slave_1 removed
[  520.539023][    T9] team0 (unregistering): Port device team_slave_0 removed
[  520.559344][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.580866][ T4249] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  520.588793][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  520.705378][    T9] bond0 (unregistering): Released all slaves
[  520.833163][ T4249] usb 5-1: Using ep0 maxpacket: 16
[  520.951065][ T4249] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.970818][T11151] 8021q: adding VLAN 0 to HW filter on device bond0
[  520.976416][ T4249] usb 5-1: config 0 interface 0 has no altsetting 0
[  520.999519][ T4249] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  521.016492][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.024764][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  521.039294][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  521.079319][ T4249] usb 5-1: config 0 descriptor??
[  521.093730][T11151] 8021q: adding VLAN 0 to HW filter on device team0
[  521.108718][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  521.130990][T10822] Bluetooth: hci5: command 0x040f tx timeout
[  521.143687][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  521.158056][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.165227][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  521.203195][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  521.219355][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  521.220760][   T26] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  521.253141][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  521.290336][T10115] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.297512][T10115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  521.401643][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  521.428058][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  521.447757][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  521.472334][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  521.490874][ T4249] usbhid 5-1:0.0: can't add hid device: -71
[  521.496902][ T4249] usbhid: probe of 5-1:0.0 failed with error -71
[  521.503868][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  521.513717][ T4249] usb 5-1: USB disconnect, device number 32
[  521.521931][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  521.530463][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  521.561445][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  521.581325][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  521.591187][   T26] usb 2-1: Using ep0 maxpacket: 8
[  521.608285][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  521.629353][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  521.650890][T11151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  521.731904][   T26] usb 2-1: unable to get BOS descriptor or descriptor too short
[  521.805925][   T26] usb 2-1: unable to read config index 0 descriptor/start: -71
[  521.825914][   T26] usb 2-1: can't read configurations, error -71
[  522.201769][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  522.209320][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  522.290978][T11151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  522.369541][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  522.388458][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  522.503395][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  522.660534][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  522.940125][T11151] device veth0_vlan entered promiscuous mode
[  523.096366][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  523.210843][ T4249] Bluetooth: hci5: command 0x0419 tx timeout
[  523.256931][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  523.308335][T11151] device veth1_vlan entered promiscuous mode
[  523.409332][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  523.441824][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  523.495196][T11151] device veth0_macvtap entered promiscuous mode
[  523.518639][T11151] device veth1_macvtap entered promiscuous mode
[  523.731238][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.847348][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.920685][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  523.950849][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  523.984685][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.031283][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.076500][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  524.117022][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.163357][T11151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  524.203868][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  524.217621][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  524.275571][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  524.309606][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  524.341411][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.364650][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.403157][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.450691][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.480664][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.560654][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.650660][T11151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  524.710660][T11151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  524.742304][T11151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  524.755778][T11151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.781441][T11151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.809467][T11151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.839073][T11151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.875838][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  524.897622][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  525.000932][ T4249] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  525.062941][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.107822][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.145209][T10115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  525.158497][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  525.169082][T10115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  525.202837][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  525.240715][ T4249] usb 3-1: Using ep0 maxpacket: 8
[  525.504051][ T4249] usb 3-1: unable to get BOS descriptor or descriptor too short
[  525.573075][ T4249] usb 3-1: unable to read config index 0 descriptor/start: -71
[  525.600712][ T4249] usb 3-1: can't read configurations, error -71
[  526.495693][T11375] fuse: Bad value for 'fd'
[  527.526779][T11388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2843'.
[  531.643393][T11434] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2866'.
[  531.991475][T10822] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  532.110914][T11440] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2870'.
[  532.124636][T11440] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2870'.
[  532.251046][T10822] usb 5-1: Using ep0 maxpacket: 8
[  532.391054][T10822] usb 5-1: unable to get BOS descriptor or descriptor too short
[  532.501207][T10822] usb 5-1: unable to read config index 0 descriptor/start: -71
[  532.564698][T10822] usb 5-1: can't read configurations, error -71
[  532.607282][ T4234] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  532.876046][ T4234] usb 4-1: Using ep0 maxpacket: 16
[  533.035386][ T4234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.060731][ T4234] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  533.087938][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.119856][ T4234] usb 4-1: config 0 descriptor??
[  533.511926][ T4234] usbhid 4-1:0.0: can't add hid device: -71
[  533.524723][ T4234] usbhid: probe of 4-1:0.0 failed with error -71
[  533.555701][ T4234] usb 4-1: USB disconnect, device number 22
[  534.236894][T11472] loop5: detected capacity change from 0 to 7
[  534.274436][ T7912] Dev loop5: unable to read RDB block 7
[  534.280209][ T7912]  loop5: unable to read partition table
[  534.291583][ T7912] loop5: partition table beyond EOD, truncated
[  534.318679][T11472] Dev loop5: unable to read RDB block 7
[  534.340754][T11472]  loop5: unable to read partition table
[  534.360095][T11472] loop5: partition table beyond EOD, truncated
[  534.400885][T11472] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  534.516257][ T3561] Dev loop5: unable to read RDB block 7
[  534.532270][ T3561]  loop5: unable to read partition table
[  534.548298][ T3561] loop5: partition table beyond EOD, truncated
[  535.401100][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.574900][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.684974][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.762143][T11475] chnl_net:caif_netlink_parms(): no params data found
[  535.798796][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.046352][T11475] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.060830][T11475] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.068883][T11475] device bridge_slave_0 entered promiscuous mode
[  536.213718][T11475] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.233736][T11475] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.248763][T11475] device bridge_slave_1 entered promiscuous mode
[  536.286213][T11492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2887'.
[  536.382257][    T9] tipc: Left network mode
[  536.411121][ T4249] Bluetooth: hci3: command 0x0409 tx timeout
[  536.448486][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.626226][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.845759][T11475] team0: Port device team_slave_0 added
[  537.042049][T11475] team0: Port device team_slave_1 added
[  537.206379][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.231652][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  537.685568][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.025067][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.046030][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.252344][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.495360][T11475] device hsr_slave_0 entered promiscuous mode
[  538.552804][T11475] device hsr_slave_1 entered promiscuous mode
[  538.586972][T11475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  538.636263][T11475] Cannot create hsr debugfs directory
[  538.804632][ T4190] Bluetooth: hci3: command 0x041b tx timeout
[  539.475859][    T9] device hsr_slave_0 left promiscuous mode
[  539.531064][    T9] device hsr_slave_1 left promiscuous mode
[  539.567054][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.596652][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.606260][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.620845][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.645721][    T9] device bridge_slave_1 left promiscuous mode
[  539.665579][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.695810][    T9] device bridge_slave_0 left promiscuous mode
[  539.720919][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.762650][    T9] device veth1_macvtap left promiscuous mode
[  539.768731][    T9] device veth0_macvtap left promiscuous mode
[  539.803328][    T9] device veth1_vlan left promiscuous mode
[  539.823499][    T9] device veth0_vlan left promiscuous mode
[  540.090895][ T1324] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  540.248103][    T9] team0 (unregistering): Port device team_slave_1 removed
[  540.277327][    T9] team0 (unregistering): Port device team_slave_0 removed
[  540.298744][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  540.337683][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  540.374142][ T1324] usb 5-1: Using ep0 maxpacket: 8
[  540.478604][    T9] bond0 (unregistering): Released all slaves
[  540.851053][ T1324] usb 5-1: unable to get BOS descriptor or descriptor too short
[  540.891135][ T4190] Bluetooth: hci3: command 0x040f tx timeout
[  540.940756][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -71
[  540.948364][ T1324] usb 5-1: can't read configurations, error -71
[  541.229643][T11475] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  541.250425][T11475] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  541.263564][T11475] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  541.320478][T11600] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2906'.
[  541.335018][T11600] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2906'.
[  541.502302][T11475] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  543.145469][ T4222] Bluetooth: hci3: command 0x0419 tx timeout
[  543.659982][T11475] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.843602][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  543.881645][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  543.907867][T11475] 8021q: adding VLAN 0 to HW filter on device team0
[  543.947506][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  543.966686][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  544.002446][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.009577][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.067114][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  544.081926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  544.113149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  544.136082][    T7] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  544.141186][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.150791][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.199305][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  544.237596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  544.251813][ T4195] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  544.279291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  544.300192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  544.332718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  544.377027][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  544.406581][    T7] usb 1-1: Using ep0 maxpacket: 8
[  544.413474][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  544.461321][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  544.500507][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  544.510721][ T4195] usb 2-1: Using ep0 maxpacket: 8
[  544.521774][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  544.551836][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  544.577977][T11475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  544.650926][ T4195] usb 2-1: unable to get BOS descriptor or descriptor too short
[  544.655700][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  544.720776][ T4195] usb 2-1: unable to read config index 0 descriptor/start: -71
[  544.728380][ T4195] usb 2-1: can't read configurations, error -71
[  544.742463][    T7] usb 1-1: unable to read config index 0 descriptor/start: -71
[  544.759783][    T7] usb 1-1: can't read configurations, error -71
[  544.931899][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  544.939480][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  544.976069][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.038035][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  545.054404][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  545.125404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  545.148457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  545.191520][T11475] device veth0_vlan entered promiscuous mode
[  545.215952][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  545.254285][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  545.297680][T11475] device veth1_vlan entered promiscuous mode
[  545.380339][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  545.403224][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  545.552417][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  545.607181][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  545.838577][T11475] device veth0_macvtap entered promiscuous mode
[  546.157306][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  546.255934][T11475] device veth1_macvtap entered promiscuous mode
[  546.318043][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.371777][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.420661][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.465621][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.495935][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.535094][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.575821][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.635296][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.694853][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.724423][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  546.746549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  546.777498][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.807685][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.853769][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.884759][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.900725][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  546.950399][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.982463][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.003149][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.013263][ T1324] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  547.042960][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.083602][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  547.101596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  547.135327][T11475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.158015][T11475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.190302][T11475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.220737][T11475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.300855][ T1324] usb 2-1: Using ep0 maxpacket: 8
[  547.375222][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.416178][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.448835][ T3094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.457170][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  547.465263][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short
[  547.478048][ T3094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.503166][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  547.540906][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71
[  547.548510][ T1324] usb 2-1: can't read configurations, error -71
[  548.491587][ T1324] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  548.780858][ T1324] usb 2-1: Using ep0 maxpacket: 16
[  548.951038][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.000773][ T1324] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  549.020072][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.056784][ T1324] usb 2-1: config 0 descriptor??
[  549.410802][ T1324] usbhid 2-1:0.0: can't add hid device: -71
[  549.417039][ T1324] usbhid: probe of 2-1:0.0 failed with error -71
[  549.443625][ T1324] usb 2-1: USB disconnect, device number 41
[  549.490958][    T7] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  549.781301][    T7] usb 1-1: Using ep0 maxpacket: 8
[  549.920894][    T7] usb 1-1: unable to get BOS descriptor or descriptor too short
[  549.980927][    T7] usb 1-1: unable to read config index 0 descriptor/start: -71
[  549.989141][    T7] usb 1-1: can't read configurations, error -71
[  551.490696][ T4190] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  551.800700][ T4190] usb 2-1: Using ep0 maxpacket: 16
[  551.951179][ T4190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.983164][ T4190] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  552.030454][ T4190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.098452][ T4190] usb 2-1: config 0 descriptor??
[  552.483805][ T4190] usbhid 2-1:0.0: can't add hid device: -71
[  552.500048][ T4190] usbhid: probe of 2-1:0.0 failed with error -71
[  552.541328][ T4190] usb 2-1: USB disconnect, device number 42
[  552.781212][ T4249] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  552.830044][T11808] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2964'.
[  552.843933][T11808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2964'.
[  553.050811][ T4249] usb 5-1: Using ep0 maxpacket: 8
[  553.190979][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short
[  553.311248][ T4249] usb 5-1: unable to read config index 0 descriptor/start: -71
[  553.367938][ T4249] usb 5-1: can't read configurations, error -71
[  554.530865][ T4190] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  554.790720][ T4190] usb 1-1: Using ep0 maxpacket: 16
[  554.925988][ T4190] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  554.939230][ T4190] usb 1-1: config 0 interface 0 has no altsetting 0
[  554.951383][ T4190] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  554.960582][ T4190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.001563][ T4190] usb 1-1: config 0 descriptor??
[  555.056072][ T1324] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  555.156998][T11835] chnl_net:caif_netlink_parms(): no params data found
[  555.184066][ T4188] syz-executor (4188) used greatest stack depth: 20320 bytes left
[  555.245320][T10115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.340845][ T1324] usb 3-1: Using ep0 maxpacket: 16
[  555.347051][T11835] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.358584][T11835] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.377089][T11835] device bridge_slave_0 entered promiscuous mode
[  555.377147][ T4190] usbhid 1-1:0.0: can't add hid device: -71
[  555.398447][ T4190] usbhid: probe of 1-1:0.0 failed with error -71
[  555.435237][ T4190] usb 1-1: USB disconnect, device number 44
[  555.490948][ T1324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.504423][T10115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.523003][ T1324] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  555.536797][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.545188][T11835] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.549237][ T1324] usb 3-1: config 0 descriptor??
[  555.567670][T11835] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.575811][T11835] device bridge_slave_1 entered promiscuous mode
[  555.621245][T10115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.672617][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.697987][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.732959][T10115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.832602][T11835] team0: Port device team_slave_0 added
[  555.913537][ T1324] usbhid 3-1:0.0: can't add hid device: -71
[  555.924460][T11835] team0: Port device team_slave_1 added
[  555.942980][ T1324] usbhid: probe of 3-1:0.0 failed with error -71
[  555.997635][ T1324] usb 3-1: USB disconnect, device number 32
[  556.098464][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.129805][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.194552][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.232512][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.239948][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.269460][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.199614][T11835] device hsr_slave_0 entered promiscuous mode
[  557.209774][T11835] device hsr_slave_1 entered promiscuous mode
[  557.229759][T11835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.255735][T11835] Cannot create hsr debugfs directory
[  557.808940][ T4239] Bluetooth: hci0: command 0x0409 tx timeout
[  559.252511][T10115] device hsr_slave_0 left promiscuous mode
[  559.268754][T10115] device hsr_slave_1 left promiscuous mode
[  559.289200][T10115] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.313725][T10115] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.337730][T10115] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.365449][T10115] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.392100][T10115] device bridge_slave_1 left promiscuous mode
[  559.418604][T10115] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.447187][T10115] device bridge_slave_0 left promiscuous mode
[  559.461706][T10115] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.546479][T10115] device veth1_macvtap left promiscuous mode
[  559.573851][T10115] device veth0_macvtap left promiscuous mode
[  559.595525][T10115] device veth1_vlan left promiscuous mode
[  559.620463][T10115] device veth0_vlan left promiscuous mode
[  559.850820][ T4249] Bluetooth: hci0: command 0x041b tx timeout
[  560.209929][T10115] team0 (unregistering): Port device team_slave_1 removed
[  560.243580][T10115] team0 (unregistering): Port device team_slave_0 removed
[  560.272460][T10115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  560.321150][T10115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  560.507682][T10115] bond0 (unregistering): Released all slaves
[  560.659591][T11835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  560.690975][T11835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  560.718006][T11835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  560.746059][T11835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  560.861085][   T26] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  561.102426][T11835] 8021q: adding VLAN 0 to HW filter on device bond0
[  561.114759][   T26] usb 1-1: Using ep0 maxpacket: 16
[  561.149485][T11835] 8021q: adding VLAN 0 to HW filter on device team0
[  561.170428][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  561.187436][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  561.207682][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  561.223019][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  561.239675][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.241161][   T26] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.246808][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.278378][   T26] usb 1-1: config 0 interface 0 has no altsetting 0
[  561.294595][   T26] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  561.309049][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.314360][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  561.324895][ T4195] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  561.351611][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  561.356353][T11942] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3006'.
[  561.375037][   T26] usb 1-1: config 0 descriptor??
[  561.401351][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  561.432143][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.439264][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.478109][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  561.510268][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  561.529425][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  561.553027][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  561.571355][ T4195] usb 5-1: Using ep0 maxpacket: 16
[  561.585672][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  561.606528][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  561.657880][T11835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  561.672894][T11835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  561.698471][ T4195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.702307][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  561.720809][   T26] usbhid 1-1:0.0: can't add hid device: -71
[  561.726832][   T26] usbhid: probe of 1-1:0.0 failed with error -71
[  561.742231][ T4195] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  561.751209][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  561.759801][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  561.789566][   T26] usb 1-1: USB disconnect, device number 45
[  561.796543][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  561.799021][ T4195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.831816][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  561.873841][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  561.979292][ T4195] usb 5-1: config 0 descriptor??
[  561.986738][ T1106] Bluetooth: hci0: command 0x040f tx timeout
[  562.304271][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  562.317612][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  562.320786][ T4195] usbhid 5-1:0.0: can't add hid device: -71
[  562.332171][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.345950][ T4195] usbhid: probe of 5-1:0.0 failed with error -71
[  562.379146][ T4195] usb 5-1: USB disconnect, device number 39
[  562.402963][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  562.431470][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  562.486655][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  562.498654][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  562.526420][T11835] device veth0_vlan entered promiscuous mode
[  562.540078][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  562.550707][   T26] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  562.558497][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  562.593128][T11835] device veth1_vlan entered promiscuous mode
[  562.639285][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  562.658006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  562.680484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  562.701756][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  562.733600][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  562.739912][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  562.751055][T11835] device veth0_macvtap entered promiscuous mode
[  562.758486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  562.770292][T11835] device veth1_macvtap entered promiscuous mode
[  562.800696][   T26] usb 1-1: Using ep0 maxpacket: 8
[  562.837222][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.858069][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.876946][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.890839][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.906204][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.917288][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.932561][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.950670][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.973232][T11835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  563.002168][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  563.017817][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  563.065760][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  563.082114][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  563.093381][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  563.104006][   T26] usb 1-1: unable to get BOS descriptor or descriptor too short
[  563.127606][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  563.146316][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  563.158238][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  563.160756][   T26] usb 1-1: unable to read config index 0 descriptor/start: -71
[  563.196476][   T26] usb 1-1: can't read configurations, error -71
[  563.197346][T11835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  563.220641][T11835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  563.259106][T11835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.274560][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  563.293409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  563.318077][T11835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  563.343269][T11835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  563.370655][T11835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  563.389980][T11835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  563.534096][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.550967][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.590785][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  563.614680][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.649560][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.689860][T11989] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3020'.
[  563.692462][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  564.010842][ T4195] Bluetooth: hci0: command 0x0419 tx timeout
[  567.193874][T12033] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3036'.
[  567.352737][ T6483] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.445396][ T6483] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.529822][ T6483] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.664957][ T6483] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.726535][T12039] chnl_net:caif_netlink_parms(): no params data found
[  567.998512][T12049] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3039'.
[  568.011649][T12049] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3039'.
[  569.130803][ T4249] Bluetooth: hci1: command 0x0409 tx timeout
[  569.139210][T12039] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.152041][T12039] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.173022][T12039] device bridge_slave_0 entered promiscuous mode
[  569.214428][T12039] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.245611][T12039] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.396256][T12039] device bridge_slave_1 entered promiscuous mode
[  569.525602][ T6483] tipc: Left network mode
[  569.574042][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  569.631821][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  569.786742][T12039] team0: Port device team_slave_0 added
[  569.817288][T12039] team0: Port device team_slave_1 added
[  569.944213][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  569.971296][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.166470][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.241361][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  570.261363][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  570.328466][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.188230][T12039] device hsr_slave_0 entered promiscuous mode
[  571.219841][   T21] Bluetooth: hci1: command 0x041b tx timeout
[  571.256958][T12039] device hsr_slave_1 entered promiscuous mode
[  572.047988][ T6483] device hsr_slave_0 left promiscuous mode
[  572.069380][ T6483] device hsr_slave_1 left promiscuous mode
[  572.104530][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.428922][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.611014][ T6483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.752047][ T6483] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.805094][ T6483] device bridge_slave_1 left promiscuous mode
[  572.858627][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.893731][ T6483] device bridge_slave_0 left promiscuous mode
[  572.930668][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.001327][ T6483] device veth1_macvtap left promiscuous mode
[  573.036367][ T6483] device veth0_macvtap left promiscuous mode
[  573.062858][ T6483] device veth1_vlan left promiscuous mode
[  573.068702][ T6483] device veth0_vlan left promiscuous mode
[  573.290844][ T4195] Bluetooth: hci1: command 0x040f tx timeout
[  573.787261][ T4239] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  574.010812][ T4239] usb 2-1: device descriptor read/64, error -71
[  574.133774][ T6483] team0 (unregistering): Port device team_slave_1 removed
[  574.940898][ T4239] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  574.971942][ T6483] team0 (unregistering): Port device team_slave_0 removed
[  575.018674][ T6483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  575.075988][ T6483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.283173][ T6483] bond0 (unregistering): Released all slaves
[  575.376882][   T21] Bluetooth: hci1: command 0x0419 tx timeout
[  575.621863][T12039] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  575.687842][T12039] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  575.705292][T12039] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  575.715811][T12039] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  575.980685][ T4249] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  576.065339][T12039] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.112572][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  576.126317][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  576.173459][T12039] 8021q: adding VLAN 0 to HW filter on device team0
[  576.180763][ T4249] usb 3-1: device descriptor read/64, error -71
[  576.199386][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  576.222207][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  576.240815][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.247918][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.291999][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  576.300487][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  576.336870][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  576.371163][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.378255][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.411099][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  576.436251][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  576.451269][ T4249] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  576.484219][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  576.495816][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  576.526247][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  576.545738][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  576.577171][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  576.602370][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  576.632005][T12039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  576.649490][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  576.652008][ T4249] usb 3-1: device descriptor read/64, error -71
[  576.663879][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  576.707846][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  576.726120][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  576.791913][ T4249] usb usb3-port1: attempt power cycle
[  577.060110][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.078540][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.290950][ T4249] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  577.422724][ T4249] usb 3-1: device descriptor read/8, error -71
[  577.658269][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.820721][ T4249] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  577.911038][ T4249] usb 3-1: device descriptor read/8, error -71
[  578.042751][ T4249] usb usb3-port1: unable to enumerate USB device
[  579.861521][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  579.913336][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  580.015372][T12039] device veth0_vlan entered promiscuous mode
[  580.091531][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  580.101174][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  580.149177][T12039] device veth1_vlan entered promiscuous mode
[  580.183366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  580.201201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  580.231548][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  580.311606][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  580.822364][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  580.864612][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  581.054270][T12039] device veth0_macvtap entered promiscuous mode
[  581.074390][T12039] device veth1_macvtap entered promiscuous mode
[  581.167779][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.210937][ T1106] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  581.228526][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.259233][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.290881][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.320779][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.340770][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.360999][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.383971][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.405512][T12039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.424390][ T1106] usb 3-1: device descriptor read/64, error -71
[  581.433967][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.495407][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.531025][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.552191][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.572648][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.614770][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.665876][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.700841][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.710866][ T1106] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  581.748334][T12039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.790730][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  581.802935][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  581.861139][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  581.900479][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  581.920673][ T1106] usb 3-1: device descriptor read/64, error -71
[  581.942617][T12039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.961163][T12039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.980654][T12039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.999720][T12039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.042310][ T1106] usb usb3-port1: attempt power cycle
[  582.161432][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.173104][ T4234] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  582.191476][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.232298][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  582.252835][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.279396][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.306172][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  582.450772][ T1106] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  582.462276][T12300] loop5: detected capacity change from 0 to 7
[  582.470759][ T4234] usb 4-1: Using ep0 maxpacket: 16
[  582.502794][T12300] Dev loop5: unable to read RDB block 7
[  582.508413][T12300]  loop5: unable to read partition table
[  582.554997][T12300] loop5: partition table beyond EOD, truncated
[  582.560869][ T1106] usb 3-1: device descriptor read/8, error -71
[  582.585271][T12300] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  582.601215][ T4234] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  582.622466][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0
[  582.640689][ T4234] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  582.660097][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.707007][ T4234] usb 4-1: config 0 descriptor??
[  582.855641][ T1106] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  582.960872][ T1106] usb 3-1: device descriptor read/8, error -71
[  583.066851][ T4234] usbhid 4-1:0.0: can't add hid device: -71
[  583.074561][ T4234] usbhid: probe of 4-1:0.0 failed with error -71
[  583.095239][ T4234] usb 4-1: USB disconnect, device number 23
[  583.141487][ T1106] usb usb3-port1: unable to enumerate USB device
[  583.493313][T12336] loop5: detected capacity change from 0 to 7
[  583.504895][ T7912] Dev loop5: unable to read RDB block 7
[  583.510552][ T7912]  loop5: unable to read partition table
[  583.540069][ T7912] loop5: partition table beyond EOD, truncated
[  583.567314][T12336] Dev loop5: unable to read RDB block 7
[  583.581321][T12336]  loop5: unable to read partition table
[  583.618660][T12336] loop5: partition table beyond EOD, truncated
[  583.666381][T12336] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  584.660757][T12369] loop5: detected capacity change from 0 to 7
[  584.721037][T12369] Dev loop5: unable to read RDB block 7
[  584.726840][T12369]  loop5: unable to read partition table
[  584.746464][T12369] loop5: partition table beyond EOD, truncated
[  584.776794][T12369] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  588.255387][T12424] loop5: detected capacity change from 0 to 7
[  588.275796][ T7912] Dev loop5: unable to read RDB block 7
[  588.281640][ T7912]  loop5: unable to read partition table
[  588.305577][ T7912] loop5: partition table beyond EOD, truncated
[  588.323238][T12424] Dev loop5: unable to read RDB block 7
[  588.330294][T12424]  loop5: unable to read partition table
[  588.358137][T12424] loop5: partition table beyond EOD, truncated
[  588.396900][T12424] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  590.812357][T12460] loop4: detected capacity change from 0 to 512
[  591.111122][T12460] EXT4-fs (loop4): orphan cleanup on readonly fs
[  591.133140][T12460] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3167: bg 0: block 248: padding at end of block bitmap is not set
[  591.157878][T12460] Quota error (device loop4): write_blk: dquota write failed
[  591.165784][T12460] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  591.175961][T12460] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.3167: Failed to acquire dquot type 1
[  591.200441][T12460] EXT4-fs (loop4): 1 truncate cleaned up
[  591.216436][T12460] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,noblock_validity,mb_optimize_scan=0x0000000000000000,grpjquota=,noquota,auto_da_alloc,dioread_lock,journal_dev=0x0000000056657b2b,,errors=continue. Quota mode: writeback.
[  592.230642][T12469] loop5: detected capacity change from 0 to 7
[  592.267878][ T7912] Dev loop5: unable to read RDB block 7
[  592.275149][ T7912]  loop5: unable to read partition table
[  592.299627][ T7912] loop5: partition table beyond EOD, truncated
[  592.452553][T12469] Dev loop5: unable to read RDB block 7
[  592.469146][T12469]  loop5: unable to read partition table
[  592.512430][T12469] loop5: partition table beyond EOD, truncated
[  592.521630][T12469] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  594.150731][ T4190] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  594.400713][ T4190] usb 5-1: Using ep0 maxpacket: 32
[  594.540917][ T4190] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  594.553023][ T4190] usb 5-1: config 0 has no interface number 0
[  594.559162][ T4190] usb 5-1: config 0 interface 184 has no altsetting 0
[  594.780960][ T4190] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  594.801606][ T4190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.820218][ T4190] usb 5-1: Product: syz
[  594.830737][ T4190] usb 5-1: Manufacturer: syz
[  594.846650][ T4190] usb 5-1: SerialNumber: syz
[  594.883804][ T4190] usb 5-1: config 0 descriptor??
[  595.345410][ T4190] smsc75xx v1.0.0
[  595.349087][ T4190] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  595.360808][ T4190] smsc75xx: probe of 5-1:0.184 failed with error -22
[  595.370058][ T4190] usb 5-1: USB disconnect, device number 40
[  596.790725][ T1106] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  597.030721][ T1106] usb 4-1: Using ep0 maxpacket: 16
[  597.150971][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.151767][ T4190] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  597.167030][ T1106] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  597.199519][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.226040][ T1106] usb 4-1: config 0 descriptor??
[  597.450796][ T4190] usb 3-1: Using ep0 maxpacket: 8
[  597.580810][ T1106] usbhid 4-1:0.0: can't add hid device: -71
[  597.586914][ T1106] usbhid: probe of 4-1:0.0 failed with error -71
[  597.615522][ T4190] usb 3-1: unable to get BOS descriptor or descriptor too short
[  597.621100][ T1106] usb 4-1: USB disconnect, device number 24
[  597.701040][ T4190] usb 3-1: unable to read config index 0 descriptor/start: -71
[  597.719625][ T4190] usb 3-1: can't read configurations, error -71
[  599.530781][ T1106] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  599.600752][   T21] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  599.860704][ T1106] usb 4-1: Using ep0 maxpacket: 16
[  599.957834][   T21] usb 3-1: Using ep0 maxpacket: 8
[  599.964573][   T26] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  600.022333][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.141069][   T21] usb 3-1: unable to get BOS descriptor or descriptor too short
[  600.179533][ T1106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.231013][   T21] usb 3-1: unable to read config index 0 descriptor/start: -71
[  600.250947][   T26] usb 1-1: Using ep0 maxpacket: 16
[  600.285738][   T21] usb 3-1: can't read configurations, error -71
[  600.313266][ T1106] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  600.371401][   T26] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.433247][   T26] usb 1-1: config 0 interface 0 has no altsetting 0
[  600.445504][ T1106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.454054][   T26] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  600.472756][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.481822][ T1106] usb 4-1: config 0 descriptor??
[  600.497997][   T26] usb 1-1: config 0 descriptor??
[  600.549968][T12607] device syzkaller0 entered promiscuous mode
[  600.940900][   T26] usbhid 1-1:0.0: can't add hid device: -71
[  600.948366][   T26] usbhid: probe of 1-1:0.0 failed with error -71
[  600.964451][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  600.984723][   T26] usb 1-1: USB disconnect, device number 48
[  600.996424][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.017822][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.035233][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.049321][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.070891][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.077794][ T1106] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  601.114349][ T1106] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0
[  601.185017][ T1106] usb 4-1: USB disconnect, device number 25
[  601.439088][T12628] fido_id[12628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  602.741396][T12631] chnl_net:caif_netlink_parms(): no params data found
[  603.013685][ T4310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.117990][T12631] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.161547][T12631] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.169691][T12631] device bridge_slave_0 entered promiscuous mode
[  603.231824][ T4310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.278711][T12631] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.288702][T12631] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.309969][T12631] device bridge_slave_1 entered promiscuous mode
[  603.447508][ T4190] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  603.762772][ T4195] Bluetooth: hci2: command 0x0409 tx timeout
[  603.898446][ T4310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  603.953680][T12631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.986195][T12631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  604.029508][ T4310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.159014][T12631] team0: Port device team_slave_0 added
[  604.247438][T12631] team0: Port device team_slave_1 added
[  604.431923][ T4310] tipc: Left network mode
[  604.443096][T12631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  604.450072][T12631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  604.638618][T12631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  604.990478][T12673] loop3: detected capacity change from 0 to 128
[  605.167761][T12631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.175021][T12631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  605.350210][T12631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  605.420714][ T4190] usb 1-1: Using ep0 maxpacket: 8
[  605.668219][T12631] device hsr_slave_0 entered promiscuous mode
[  605.690992][ T4190] usb 1-1: unable to get BOS descriptor or descriptor too short
[  605.729961][T12631] device hsr_slave_1 entered promiscuous mode
[  605.772272][ T4190] usb 1-1: unable to read config index 0 descriptor/start: -71
[  605.792485][ T4190] usb 1-1: can't read configurations, error -71
[  605.840837][T12631] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  605.853005][T12631] Cannot create hsr debugfs directory
[  606.594648][   T21] Bluetooth: hci2: command 0x041b tx timeout
[  607.718041][T12713] loop0: detected capacity change from 0 to 512
[  607.833543][T12713] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  607.853807][T12713] EXT4-fs (loop0): inline encryption not supported
[  607.860421][T12713] EXT4-fs (loop0): Test dummy encryption mode enabled
[  607.939752][ T4310] device hsr_slave_0 left promiscuous mode
[  607.942767][T12713] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  608.045914][T12713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  608.256349][ T4310] device hsr_slave_1 left promiscuous mode
[  608.271476][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.330981][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.371219][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.378658][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.393222][T12713] EXT4-fs (loop0): 1 truncate cleaned up
[  608.399058][T12713] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  608.481514][ T4310] device bridge_slave_1 left promiscuous mode
[  608.487801][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.618948][ T4310] device bridge_slave_0 left promiscuous mode
[  608.630947][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.650925][ T4249] Bluetooth: hci2: command 0x040f tx timeout
[  608.791561][ T4310] device veth1_macvtap left promiscuous mode
[  608.836454][ T4310] device veth0_macvtap left promiscuous mode
[  608.870883][ T4310] device veth1_vlan left promiscuous mode
[  608.900880][ T4310] device veth0_vlan left promiscuous mode
[  609.535044][ T4249] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  609.689761][ T4310] team0 (unregistering): Port device team_slave_1 removed
[  609.737435][ T4310] team0 (unregistering): Port device team_slave_0 removed
[  609.759435][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  609.799543][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  609.904941][ T4310] bond0 (unregistering): Released all slaves
[  609.940802][ T4249] usb 1-1: unable to get BOS descriptor or descriptor too short
[  609.995883][T12631] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  610.010910][   T21] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  610.018655][ T4249] usb 1-1: not running at top speed; connect to a high speed hub
[  610.028869][T12631] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  610.118306][T12631] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  610.257263][T12747] loop3: detected capacity change from 0 to 128
[  610.290704][   T21] usb 2-1: Using ep0 maxpacket: 8
[  610.301343][ T4249] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  610.322583][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.361932][ T4249] usb 1-1: Product: syz
[  610.401626][ T4249] usb 1-1: Manufacturer: syz
[  611.021829][ T4249] usb 1-1: SerialNumber: syz
[  611.142712][ T4195] Bluetooth: hci2: command 0x0419 tx timeout
[  611.169835][T12631] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  611.220925][   T21] usb 2-1: unable to get BOS descriptor or descriptor too short
[  611.300956][   T21] usb 2-1: unable to read config index 0 descriptor/start: -71
[  611.308612][   T21] usb 2-1: can't read configurations, error -71
[  611.521075][ T4249] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  611.647610][T12631] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.654554][ T4249] usb 1-1: USB disconnect, device number 51
[  611.758162][T12744] udevd[12744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  611.823091][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  611.831978][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  611.904957][T12631] 8021q: adding VLAN 0 to HW filter on device team0
[  611.941591][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  612.017590][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  612.076442][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.083611][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.211197][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  612.244258][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  612.278116][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  612.290308][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.297468][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.328400][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  612.421020][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  612.450389][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  612.475822][ T4234] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  612.477837][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  612.526684][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  612.556357][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  612.608412][T12631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  612.631014][T12631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  612.664398][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  612.674333][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  612.680866][ T4234] usb 4-1: device descriptor read/64, error -71
[  612.718292][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  612.747367][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  612.775726][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  612.809235][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  612.980822][ T4234] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  613.189939][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  613.211169][ T4234] usb 4-1: device descriptor read/64, error -71
[  613.222291][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  613.256237][T12631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  613.338511][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  613.351427][ T4234] usb usb4-port1: attempt power cycle
[  613.359322][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  613.416810][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  613.425876][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  613.462692][T12631] device veth0_vlan entered promiscuous mode
[  613.472401][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  613.493164][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  613.527535][T12631] device veth1_vlan entered promiscuous mode
[  613.612067][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  613.640843][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  613.662728][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  613.681706][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  613.714658][T12631] device veth0_macvtap entered promiscuous mode
[  613.741901][T12631] device veth1_macvtap entered promiscuous mode
[  613.800982][ T4234] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  613.818074][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.857036][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.887413][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  613.924370][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  613.935477][ T4234] usb 4-1: device descriptor read/8, error -71
[  613.965339][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.009676][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.050170][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.096929][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.131688][T12631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.159991][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  614.180039][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  614.203925][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  614.231931][ T4234] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  614.241493][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  614.288444][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.314446][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.324774][ T4234] usb 4-1: device descriptor read/8, error -71
[  614.355027][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.390769][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.421735][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.455526][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.466020][ T4234] usb usb4-port1: unable to enumerate USB device
[  614.495086][T12631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.526597][T12631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.588291][T12631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.619017][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  614.681037][ T6483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  614.747910][T12631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.771676][T12631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.830662][T12631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.085569][T12631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.761245][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.769397][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.829337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  615.857799][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  615.895815][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  615.906816][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  615.960702][ T4300] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  616.176147][T12833] Illegal XDP return value 4294967274, expect packet loss!
[  616.210722][ T4300] usb 1-1: Using ep0 maxpacket: 16
[  616.331012][ T4300] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.355488][ T4300] usb 1-1: config 0 interface 0 has no altsetting 0
[  616.384486][ T4300] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00
[  616.412588][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.581998][ T4300] usb 1-1: config 0 descriptor??
[  616.921284][ T4300] usbhid 1-1:0.0: can't add hid device: -71
[  616.933962][ T4300] usbhid: probe of 1-1:0.0 failed with error -71
[  617.177255][ T4300] usb 1-1: USB disconnect, device number 52
[  617.825879][ T1324] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  618.720909][ T1324] usb 2-1: Using ep0 maxpacket: 8
[  618.865712][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short
[  618.964640][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71
[  618.982663][ T1324] usb 2-1: can't read configurations, error -71
[  619.051226][ T4234] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  619.250774][ T4234] usb 1-1: device descriptor read/64, error -71
[  619.430748][ T4239] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  619.533126][ T4234] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  619.597807][T12868] loop2: detected capacity change from 0 to 256
[  619.662889][T12868] FAT-fs (loop2): Directory bread(block 64) failed
[  619.670570][T12868] FAT-fs (loop2): Directory bread(block 65) failed
[  619.677242][T12868] FAT-fs (loop2): Directory bread(block 66) failed
[  619.684093][T12868] FAT-fs (loop2): Directory bread(block 67) failed
[  619.691565][T12868] FAT-fs (loop2): Directory bread(block 68) failed
[  619.698273][T12868] FAT-fs (loop2): Directory bread(block 69) failed
[  619.706166][T12868] FAT-fs (loop2): Directory bread(block 70) failed
[  619.715380][T12868] FAT-fs (loop2): Directory bread(block 71) failed
[  619.726775][T12868] FAT-fs (loop2): Directory bread(block 72) failed
[  619.809771][T12870] loop4: detected capacity change from 0 to 512
[  619.867416][T12868] FAT-fs (loop2): Directory bread(block 73) failed
[  621.598471][ T4234] usb 1-1: device descriptor read/64, error -71
[  621.939616][T12870] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3280: corrupted inode contents
[  621.955080][T12870] EXT4-fs error (device loop4): ext4_dirty_inode:6054: inode #16: comm syz.4.3280: mark_inode_dirty error
[  621.970673][T12870] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3280: corrupted inode contents
[  621.989979][T12870] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.3280: mark_inode_dirty error
[  622.007567][T12870] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3280: corrupted inode contents
[  622.021524][T12870] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  622.032051][T12870] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3280: corrupted inode contents
[  622.045915][T12870] EXT4-fs error (device loop4): ext4_truncate:4279: inode #16: comm syz.4.3280: mark_inode_dirty error
[  622.060531][T12870] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  622.075109][T12870] EXT4-fs (loop4): 1 truncate cleaned up
[  622.081251][T12870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  622.093038][T12870] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  622.165454][ T1324] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  622.179760][ T4234] usb usb1-port1: attempt power cycle
[  622.251494][ T4239] usb 4-1: unable to read config index 0 descriptor/all
[  622.354316][ T4239] usb 4-1: can't read configurations, error -71
[  623.170771][ T1324] usb 2-1: device descriptor read/all, error -71
[  623.179439][ T1324] usb usb2-port1: attempt power cycle
[  623.450817][ T4239] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  623.890923][ T4239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.920670][ T4239] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  623.940126][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.948401][ T1324] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  623.984210][ T4239] usb 4-1: config 0 descriptor??
[  624.042065][ T1324] usb 2-1: Using ep0 maxpacket: 8
[  624.183788][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.190157][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.210757][ T1324] usb 2-1: unable to get BOS descriptor or descriptor too short
[  624.290779][ T1324] usb 2-1: unable to read config index 0 descriptor/start: -71
[  624.298379][ T1324] usb 2-1: can't read configurations, error -71
[  624.483432][ T4239] logitech-djreceiver 0003:046D:C71F.0002: unbalanced collection at end of report description
[  624.511114][ T4239] logitech-djreceiver 0003:046D:C71F.0002: logi_dj_probe: parse failed
[  624.526662][ T4239] logitech-djreceiver: probe of 0003:046D:C71F.0002 failed with error -22
[  624.685872][ T4239] usb 4-1: USB disconnect, device number 31
[  625.779374][T12924] loop3: detected capacity change from 0 to 256
[  627.417637][   T25] audit: type=1800 audit(1763362875.293:14): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3300" name="file1" dev="loop3" ino=1048631 res=0 errno=0
[  627.476118][T12924] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152)
[  627.510900][T12924] FAT-fs (loop3): Filesystem has been set read-only
[  627.537920][T12924] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152)
[  627.591372][T12942] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152)
[  627.736761][T12946] loop4: detected capacity change from 0 to 128
[  627.899045][T12946] tipc: Started in network mode
[  627.904102][T12946] tipc: Node identity 4, cluster identity 4711
[  627.910297][T12946] tipc: Node number set to 4
[  630.085536][T12970] loop1: detected capacity change from 0 to 512
[  630.188498][T12970] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  630.240655][T12970] EXT4-fs (loop1): inline encryption not supported
[  630.291183][T12970] EXT4-fs (loop1): Test dummy encryption mode enabled
[  630.315776][T12970] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  630.324113][T12970] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  630.448476][T12970] EXT4-fs (loop1): 1 truncate cleaned up
[  630.454356][T12970] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none.
[  631.062730][ T4300] usb 2-1: new low-speed USB device number 51 using dummy_hcd
[  632.750840][ T4300] usb 2-1: descriptor type invalid, skip
[  632.830832][ T4300] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  632.859535][ T4300] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  632.930717][ T4300] usb 2-1: config 1 interface 0 has no altsetting 0
[  633.180956][ T4300] usb 2-1: string descriptor 0 read error: -22
[  633.187235][ T4300] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.40
[  633.240754][ T4300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.301544][T12976] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  633.630827][ T4300] usbhid 2-1:1.0: can't add hid device: -71
[  633.636841][ T4300] usbhid: probe of 2-1:1.0 failed with error -71
[  633.818063][ T4300] usb 2-1: USB disconnect, device number 51
[  634.816981][T13016] loop4: detected capacity change from 0 to 128
[  638.089263][T13029] loop0: detected capacity change from 0 to 40427
[  638.109678][T13029] F2FS-fs (loop0): build fault injection attr: rate: 684, type: 0x1ffff
[  638.131258][T13029] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  638.180087][T13029] F2FS-fs (loop0): invalid crc value
[  638.226196][T13029] F2FS-fs (loop0): Found nat_bits in checkpoint
[  638.336403][T13049] loop5: detected capacity change from 0 to 7
[  638.355511][T13049] Dev loop5: unable to read RDB block 7
[  638.365744][T13029] F2FS-fs (loop0): Start checkpoint disabled!
[  638.379278][T13049]  loop5: unable to read partition table
[  638.400905][T13049] loop5: partition table beyond EOD, truncated
[  638.437643][T13049] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  638.463338][T13029] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  638.475968][ T3561] Dev loop5: unable to read RDB block 7
[  638.481692][ T3561]  loop5: unable to read partition table
[  638.513901][ T3561] loop5: partition table beyond EOD, truncated
[  639.449844][T13066] xt_CT: You must specify a L4 protocol and not use inversions on it
[  640.123096][  T154] attempt to access beyond end of device
[  640.123096][  T154] loop0: rw=2049, want=40976, limit=40427
[  640.347740][T13057] loop2: detected capacity change from 0 to 512
[  640.784286][T13057] EXT4-fs (loop2): orphan cleanup on readonly fs
[  640.860485][T13057] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3352: bg 0: block 248: padding at end of block bitmap is not set
[  640.991606][T13057] Quota error (device loop2): write_blk: dquota write failed
[  641.047150][T13057] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  641.115831][T13057] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.3352: Failed to acquire dquot type 1
[  641.221526][T13057] EXT4-fs (loop2): 1 truncate cleaned up
[  641.291912][T13057] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,noblock_validity,mb_optimize_scan=0x0000000000000000,grpjquota=,noquota,auto_da_alloc,dioread_lock,journal_dev=0x0000000056657b2b,,errors=continue. Quota mode: writeback.
[  641.610828][ T4195] Bluetooth: hci5: command 0x0406 tx timeout
[  643.259239][T13125] loop2: detected capacity change from 0 to 512
[  643.623978][T13125] EXT4-fs (loop2): orphan cleanup on readonly fs
[  643.644640][T13125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3376: bg 0: block 248: padding at end of block bitmap is not set
[  643.665848][T13125] Quota error (device loop2): write_blk: dquota write failed
[  643.673772][T13125] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  643.684123][T13125] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.3376: Failed to acquire dquot type 1
[  643.707376][T13125] EXT4-fs (loop2): 1 truncate cleaned up
[  643.724215][T13125] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,noblock_validity,mb_optimize_scan=0x0000000000000000,grpjquota=,noquota,auto_da_alloc,dioread_lock,journal_dev=0x0000000056657b2b,,errors=continue. Quota mode: writeback.
[  645.391198][ T4239] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  645.780743][ T4239] usb 3-1: Using ep0 maxpacket: 16
[  645.933330][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.962710][ T4239] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  645.975768][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.036083][ T4239] usb 3-1: config 0 descriptor??
[  646.411195][ T4239] usbhid 3-1:0.0: can't add hid device: -71
[  646.418447][ T4239] usbhid: probe of 3-1:0.0 failed with error -71
[  646.445950][ T4239] usb 3-1: USB disconnect, device number 45
[  648.652968][ T4249] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  649.000700][ T4249] usb 5-1: Using ep0 maxpacket: 8
[  649.160931][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short
[  649.177587][T13210] loop5: detected capacity change from 0 to 7
[  649.196544][T12744] Dev loop5: unable to read RDB block 7
[  649.202257][T12744]  loop5: unable to read partition table
[  649.208010][T12744] loop5: partition table beyond EOD, truncated
[  649.351378][ T4249] usb 5-1: unable to read config index 0 descriptor/start: -71
[  649.358978][ T4249] usb 5-1: can't read configurations, error -71
[  649.375864][T13210] Dev loop5: unable to read RDB block 7
[  649.388342][T13210]  loop5: unable to read partition table
[  650.268825][T13210] loop5: partition table beyond EOD, truncated
[  650.310584][T13210] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  650.358484][ T1324] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  650.625938][ T1324] usb 1-1: Using ep0 maxpacket: 16
[  650.762027][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.784187][ T1324] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  650.825918][T13245] loop5: detected capacity change from 0 to 7
[  650.837403][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.874746][T13245] Dev loop5: unable to read RDB block 7
[  650.899016][ T1324] usb 1-1: config 0 descriptor??
[  650.909398][T13245]  loop5: unable to read partition table
[  650.915710][T13245] loop5: partition table beyond EOD, truncated
[  650.964483][T13245] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5)
[  651.261547][ T1324] usbhid 1-1:0.0: can't add hid device: -71
[  651.273908][ T1324] usbhid: probe of 1-1:0.0 failed with error -71
[  651.512012][ T1324] usb 1-1: USB disconnect, device number 56
[  652.587787][ T4249] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  652.774150][T13282] loop0: detected capacity change from 0 to 512
[  653.060944][ T4249] usb 5-1: Using ep0 maxpacket: 8
[  653.173044][T13282] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.3437: corrupted inode contents
[  653.192026][T13282] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #16: comm syz.0.3437: mark_inode_dirty error
[  653.211534][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short
[  653.224515][T13282] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.3437: corrupted inode contents
[  653.294000][T13282] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.3437: mark_inode_dirty error
[  653.324682][T13282] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.3437: corrupted inode contents
[  653.338668][T13282] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem
[  653.347820][T13282] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #16: comm syz.0.3437: corrupted inode contents
[  653.361371][T13282] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.3437: mark_inode_dirty error
[  653.373112][T13282] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem
[  653.385306][T13282] EXT4-fs (loop0): 1 truncate cleaned up
[  653.391033][T13282] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  653.402751][T13282] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  653.490883][ T4249] usb 5-1: unable to read config index 0 descriptor/start: -71
[  653.500756][ T4249] usb 5-1: can't read configurations, error -71
[  654.891637][ T4234] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  655.001834][T13304] netlink: 'syz.4.3445': attribute type 4 has an invalid length.
[  655.188567][ T4234] usb 2-1: Using ep0 maxpacket: 16
[  655.308676][T13310] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  655.350967][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.393236][ T4234] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  655.423031][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.468104][ T4234] usb 2-1: config 0 descriptor??
[  656.897032][T13324] loop4: detected capacity change from 0 to 128
[  657.063492][ T1106] Bluetooth: hci3: command 0x0406 tx timeout
[  658.865008][T13335] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  661.663029][T13337] loop3: detected capacity change from 0 to 512
[  661.781644][ T4195] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  663.010841][ T4234] usbhid 2-1:0.0: can't add hid device: -71
[  663.017040][ T4234] usbhid: probe of 2-1:0.0 failed with error -71
[  663.336201][ T4234] usb 2-1: USB disconnect, device number 52
[  663.574618][T13353] xt_hashlimit: size too large, truncated to 1048576
[  664.413184][ T4234] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  664.587153][T13372] loop3: detected capacity change from 0 to 512
[  664.645176][T13372] EXT4-fs (loop3): Ignoring removed oldalloc option
[  664.652237][T13372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  664.801787][T13372] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.3464: invalid indirect mapped block 4294967295 (level 0)
[  664.817950][T13372] EXT4-fs (loop3): Remounting filesystem read-only
[  664.824613][T13372] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.3464: invalid indirect mapped block 4294967295 (level 1)
[  664.843280][T13372] EXT4-fs (loop3): Remounting filesystem read-only
[  664.851628][T13372] EXT4-fs (loop3): 1 orphan inode deleted
[  664.857404][T13372] EXT4-fs (loop3): 1 truncate cleaned up
[  664.863134][T13372] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,errors=remount-ro,init_itable,block_validity,block_validity,quota,. Quota mode: writeback.
[  667.050780][T13381] loop2: detected capacity change from 0 to 128
[  668.074434][T13385] loop4: detected capacity change from 0 to 512
[  668.255355][T13385] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3469: corrupted inode contents
[  668.269697][T13385] EXT4-fs error (device loop4): ext4_dirty_inode:6054: inode #16: comm syz.4.3469: mark_inode_dirty error
[  668.281957][T13385] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3469: corrupted inode contents
[  668.294373][T13385] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.3469: mark_inode_dirty error
[  668.306508][T13385] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3469: corrupted inode contents
[  668.318852][T13385] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  668.328231][T13385] EXT4-fs error (device loop4): ext4_do_update_inode:5218: inode #16: comm syz.4.3469: corrupted inode contents
[  668.342173][T13385] EXT4-fs error (device loop4): ext4_truncate:4279: inode #16: comm syz.4.3469: mark_inode_dirty error
[  668.353796][T13385] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  668.367407][T13385] EXT4-fs (loop4): 1 truncate cleaned up
[  668.373114][T13385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  668.384291][T13385] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  668.771776][ T4234] usb 5-1: device not accepting address 45, error -71
[  670.024542][T13402] loop0: detected capacity change from 0 to 512
[  670.256531][T13402] EXT4-fs (loop0): orphan cleanup on readonly fs
[  670.274755][T13402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3474: bg 0: block 248: padding at end of block bitmap is not set
[  670.295979][T13402] Quota error (device loop0): write_blk: dquota write failed
[  670.303848][T13402] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  670.314108][T13402] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.3474: Failed to acquire dquot type 1
[  670.339653][T13402] EXT4-fs (loop0): 1 truncate cleaned up
[  670.651762][T13403] netlink: 'syz.2.3471': attribute type 4 has an invalid length.
[  670.687120][T13402] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,usrjquota=,noblock_validity,mb_optimize_scan=0x0000000000000000,grpjquota=,noquota,auto_da_alloc,dioread_lock,journal_dev=0x0000000056657b2b,,errors=continue. Quota mode: writeback.
[  672.470784][ T4234] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  672.720708][ T4234] usb 5-1: Using ep0 maxpacket: 8
[  672.858522][T13430] loop3: detected capacity change from 0 to 128
[  672.866298][T10822] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  673.800831][T10822] usb 1-1: Using ep0 maxpacket: 8
[  673.980844][T10822] usb 1-1: unable to get BOS descriptor or descriptor too short
[  674.030746][ T4234] usb 5-1: device descriptor read/all, error -71
[  674.210747][T10822] usb 1-1: unable to read config index 0 descriptor/start: -71
[  674.228637][T10822] usb 1-1: can't read configurations, error -71
[  674.242111][T13434] xt_CT: You must specify a L4 protocol and not use inversions on it
[  674.524773][T13438] loop4: detected capacity change from 0 to 256
[  674.569978][T13438] exfat: Deprecated parameter 'namecase'
[  674.614886][T13438] exfat: Bad value for 'uid'
[  675.410675][ T4234] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  676.220739][ T4234] usb 5-1: Using ep0 maxpacket: 8
[  676.360729][ T4234] usb 5-1: unable to get BOS descriptor or descriptor too short
[  676.451799][ T4234] usb 5-1: unable to read config index 0 descriptor/start: -71
[  676.462450][ T4234] usb 5-1: can't read configurations, error -71
[  676.480114][ T4234] usb usb5-port1: attempt power cycle
[  676.613227][T13480] xt_CT: You must specify a L4 protocol and not use inversions on it
[  677.450903][T10822] Bluetooth: hci0: command 0x0406 tx timeout
[  677.848229][T13499] loop2: detected capacity change from 0 to 512
[  677.974984][T13499] 
[  677.977354][T13499] ======================================================
[  677.984358][T13499] WARNING: possible circular locking dependency detected
[  677.991374][T13499] syzkaller #0 Not tainted
[  677.995776][T13499] ------------------------------------------------------
[  678.002778][T13499] syz.2.3507/13499 is trying to acquire lock:
[  678.008829][T13499] ffff88806029c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  678.017707][T13499] 
[  678.017707][T13499] but task is already holding lock:
[  678.025052][T13499] ffff88804d422060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0
[  678.034365][T13499] 
[  678.034365][T13499] which lock already depends on the new lock.
[  678.034365][T13499] 
[  678.044751][T13499] 
[  678.044751][T13499] the existing dependency chain (in reverse order) is:
[  678.053748][T13499] 
[  678.053748][T13499] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  678.061564][T13499]        down_write+0x38/0x60
[  678.066238][T13499]        ext4_map_blocks+0x8b2/0x1b30
[  678.071612][T13499]        ext4_getblk+0x16d/0x630
[  678.076543][T13499]        ext4_bread+0x26/0x180
[  678.081305][T13499]        ext4_quota_write+0x230/0x570
[  678.086667][T13499]        do_insert_tree+0x115c/0x1970
[  678.092035][T13499]        do_insert_tree+0x5b1/0x1970
[  678.097318][T13499]        do_insert_tree+0x5b1/0x1970
[  678.102597][T13499]        do_insert_tree+0x5b1/0x1970
[  678.107873][T13499]        qtree_write_dquot+0x361/0x4b0
[  678.113325][T13499]        v2_write_dquot+0x108/0x190
[  678.118513][T13499]        dquot_acquire+0x2d5/0x520
[  678.123616][T13499]        ext4_acquire_dquot+0x2d9/0x4a0
[  678.129154][T13499]        dqget+0x778/0xeb0
[  678.133562][T13499]        __dquot_initialize+0x3b6/0xcb0
[  678.139098][T13499]        ext4_process_orphan+0x54/0x300
[  678.144631][T13499]        ext4_orphan_cleanup+0xaa9/0x12e0
[  678.150337][T13499]        ext4_fill_super+0x92f0/0x9a60
[  678.155789][T13499]        mount_bdev+0x287/0x3c0
[  678.160630][T13499]        legacy_get_tree+0xe6/0x180
[  678.165825][T13499]        vfs_get_tree+0x88/0x270
[  678.170752][T13499]        do_new_mount+0x24a/0xa40
[  678.175769][T13499]        __se_sys_mount+0x2d6/0x3c0
[  678.180957][T13499]        do_syscall_64+0x4c/0xa0
[  678.185886][T13499]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  678.192299][T13499] 
[  678.192299][T13499] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  678.200374][T13499]        down_read+0x44/0x2e0
[  678.205052][T13499]        v2_read_dquot+0x4a/0x110
[  678.210073][T13499]        dquot_acquire+0x152/0x520
[  678.215178][T13499]        ext4_acquire_dquot+0x2d9/0x4a0
[  678.220717][T13499]        dqget+0x778/0xeb0
[  678.225209][T13499]        __dquot_initialize+0x3b6/0xcb0
[  678.230756][T13499]        ext4_process_orphan+0x54/0x300
[  678.236295][T13499]        ext4_orphan_cleanup+0xaa9/0x12e0
[  678.242001][T13499]        ext4_fill_super+0x92f0/0x9a60
[  678.247548][T13499]        mount_bdev+0x287/0x3c0
[  678.252388][T13499]        legacy_get_tree+0xe6/0x180
[  678.257577][T13499]        vfs_get_tree+0x88/0x270
[  678.262502][T13499]        do_new_mount+0x24a/0xa40
[  678.267513][T13499]        __se_sys_mount+0x2d6/0x3c0
[  678.272703][T13499]        do_syscall_64+0x4c/0xa0
[  678.277630][T13499]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  678.284128][T13499] 
[  678.284128][T13499] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  678.291775][T13499]        __lock_acquire+0x2c33/0x7c60
[  678.297148][T13499]        lock_acquire+0x197/0x3f0
[  678.302180][T13499]        __mutex_lock_common+0x1eb/0x2390
[  678.307896][T13499]        mutex_lock_nested+0x17/0x20
[  678.313180][T13499]        dquot_commit+0x5a/0x410
[  678.318112][T13499]        ext4_write_dquot+0x1f0/0x360
[  678.323475][T13499]        mark_all_dquot_dirty+0xf9/0x400
[  678.329111][T13499]        __dquot_free_space+0x7ca/0xb90
[  678.334638][T13499]        ext4_free_blocks+0x1af5/0x2480
[  678.340168][T13499]        ext4_ext_remove_space+0x1eaa/0x43a0
[  678.346131][T13499]        ext4_ext_truncate+0x192/0x240
[  678.351570][T13499]        ext4_truncate+0x9f1/0x10d0
[  678.356749][T13499]        ext4_process_orphan+0x1cb/0x300
[  678.362359][T13499]        ext4_orphan_cleanup+0xaa9/0x12e0
[  678.368145][T13499]        ext4_fill_super+0x92f0/0x9a60
[  678.373581][T13499]        mount_bdev+0x287/0x3c0
[  678.378413][T13499]        legacy_get_tree+0xe6/0x180
[  678.383676][T13499]        vfs_get_tree+0x88/0x270
[  678.388595][T13499]        do_new_mount+0x24a/0xa40
[  678.393598][T13499]        __se_sys_mount+0x2d6/0x3c0
[  678.398779][T13499]        do_syscall_64+0x4c/0xa0
[  678.403695][T13499]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  678.410091][T13499] 
[  678.410091][T13499] other info that might help us debug this:
[  678.410091][T13499] 
[  678.420325][T13499] Chain exists of:
[  678.420325][T13499]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  678.420325][T13499] 
[  678.433945][T13499]  Possible unsafe locking scenario:
[  678.433945][T13499] 
[  678.441372][T13499]        CPU0                    CPU1
[  678.446710][T13499]        ----                    ----
[  678.452051][T13499]   lock(&ei->i_data_sem/2);
[  678.456625][T13499]                                lock(&s->s_dquot.dqio_sem);
[  678.463969][T13499]                                lock(&ei->i_data_sem/2);
[  678.471060][T13499]   lock(&dquot->dq_lock);
[  678.475457][T13499] 
[  678.475457][T13499]  *** DEADLOCK ***
[  678.475457][T13499] 
[  678.483660][T13499] 4 locks held by syz.2.3507/13499:
[  678.488832][T13499]  #0: ffff88802ab8c0e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[  678.498915][T13499]  #1: ffff88804d4221d8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_process_orphan+0x187/0x300
[  678.509856][T13499]  #2: ffff88804d422060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x96d/0x10d0
[  678.519581][T13499]  #3: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  678.528605][T13499] 
[  678.528605][T13499] stack backtrace:
[  678.534468][T13499] CPU: 0 PID: 13499 Comm: syz.2.3507 Not tainted syzkaller #0
[  678.541990][T13499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  678.552050][T13499] Call Trace:
[  678.555314][T13499]  <TASK>
[  678.558231][T13499]  dump_stack_lvl+0x168/0x230
[  678.562893][T13499]  ? load_image+0x3b0/0x3b0
[  678.567379][T13499]  ? show_regs_print_info+0x20/0x20
[  678.572562][T13499]  ? print_circular_bug+0x12b/0x1a0
[  678.577742][T13499]  check_noncircular+0x274/0x310
[  678.582659][T13499]  ? add_chain_block+0x940/0x940
[  678.587573][T13499]  ? lockdep_lock+0xdc/0x1e0
[  678.592145][T13499]  ? mark_lock+0x94/0x320
[  678.596458][T13499]  ? mark_lock+0x94/0x320
[  678.600770][T13499]  __lock_acquire+0x2c33/0x7c60
[  678.605607][T13499]  ? hlock_conflict+0x59/0x1f0
[  678.610350][T13499]  ? check_path+0x40/0x40
[  678.614657][T13499]  ? verify_lock_unused+0x140/0x140
[  678.619839][T13499]  ? check_path+0x21/0x40
[  678.624155][T13499]  ? check_noncircular+0x16f/0x310
[  678.629250][T13499]  ? add_chain_block+0x940/0x940
[  678.634165][T13499]  ? lockdep_lock+0xdc/0x1e0
[  678.638739][T13499]  ? lockdep_unlock+0x134/0x2d0
[  678.643569][T13499]  ? lockdep_lock+0x1e0/0x1e0
[  678.648230][T13499]  lock_acquire+0x197/0x3f0
[  678.652722][T13499]  ? dquot_commit+0x5a/0x410
[  678.657310][T13499]  ? __might_sleep+0xf0/0xf0
[  678.661884][T13499]  ? read_lock_is_recursive+0x10/0x10
[  678.667245][T13499]  ? kasan_set_free_info+0x1f/0x40
[  678.672347][T13499]  ? dquot_commit+0x5a/0x410
[  678.676924][T13499]  __mutex_lock_common+0x1eb/0x2390
[  678.682109][T13499]  ? dquot_commit+0x5a/0x410
[  678.686688][T13499]  ? mark_lock+0x94/0x320
[  678.691004][T13499]  ? __might_sleep+0xf0/0xf0
[  678.695573][T13499]  ? mutex_lock_io_nested+0x60/0x60
[  678.700754][T13499]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  678.706724][T13499]  mutex_lock_nested+0x17/0x20
[  678.711471][T13499]  dquot_commit+0x5a/0x410
[  678.715869][T13499]  ? __ext4_journal_start_sb+0x1bd/0x360
[  678.721482][T13499]  ext4_write_dquot+0x1f0/0x360
[  678.726316][T13499]  mark_all_dquot_dirty+0xf9/0x400
[  678.731410][T13499]  __dquot_free_space+0x7ca/0xb90
[  678.736425][T13499]  ext4_free_blocks+0x1af5/0x2480
[  678.741440][T13499]  ? ext4_mb_discard_preallocations_should_retry+0x690/0x690
[  678.748794][T13499]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  678.754846][T13499]  ? ext4_inode_journal_mode+0x18f/0x460
[  678.760461][T13499]  ext4_ext_remove_space+0x1eaa/0x43a0
[  678.765901][T13499]  ? rcu_lock_release+0x5/0x20
[  678.770646][T13499]  ? rcu_is_watching+0x11/0xa0
[  678.775400][T13499]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  678.781198][T13499]  ? ext4_es_remove_extent+0x24f/0x3e0
[  678.786654][T13499]  ext4_ext_truncate+0x192/0x240
[  678.791576][T13499]  ext4_truncate+0x9f1/0x10d0
[  678.796239][T13499]  ? __might_sleep+0xf0/0xf0
[  678.800811][T13499]  ? rwsem_write_trylock+0x12f/0x1b0
[  678.806082][T13499]  ? __ext4_mark_inode_dirty+0x700/0x700
[  678.811700][T13499]  ext4_process_orphan+0x1cb/0x300
[  678.816797][T13499]  ext4_orphan_cleanup+0xaa9/0x12e0
[  678.821978][T13499]  ? ext4_orphan_del+0xb90/0xb90
[  678.826897][T13499]  ? errseq_check_and_advance+0x62/0x120
[  678.832513][T13499]  ext4_fill_super+0x92f0/0x9a60
[  678.837453][T13499]  ? ext4_mount+0x40/0x40
[  678.841764][T13499]  ? set_blocksize+0x1f1/0x370
[  678.846516][T13499]  ? sb_set_blocksize+0xa5/0xe0
[  678.851448][T13499]  mount_bdev+0x287/0x3c0
[  678.855855][T13499]  ? ext4_mount+0x40/0x40
[  678.860166][T13499]  legacy_get_tree+0xe6/0x180
[  678.864978][T13499]  ? ext4_errno_to_code+0x160/0x160
[  678.870163][T13499]  vfs_get_tree+0x88/0x270
[  678.874563][T13499]  do_new_mount+0x24a/0xa40
[  678.879054][T13499]  __se_sys_mount+0x2d6/0x3c0
[  678.883713][T13499]  ? __x64_sys_mount+0xc0/0xc0
[  678.888457][T13499]  ? lockdep_hardirqs_on+0x94/0x140
[  678.893635][T13499]  ? __x64_sys_mount+0x1c/0xc0
[  678.898380][T13499]  do_syscall_64+0x4c/0xa0
[  678.902779][T13499]  ? clear_bhb_loop+0x30/0x80
[  678.907439][T13499]  ? clear_bhb_loop+0x30/0x80
[  678.912098][T13499]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  678.917985][T13499] RIP: 0033:0x7f553b69de6a
[  678.922386][T13499] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  678.941987][T13499] RSP: 002b:00007f55398e1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  678.950380][T13499] RAX: ffffffffffffffda RBX: 00007f55398e1ef0 RCX: 00007f553b69de6a
[  678.958331][T13499] RDX: 00002000000000c0 RSI: 0000200000000640 RDI: 00007f55398e1eb0
[  678.966284][T13499] RBP: 00002000000000c0 R08: 00007f55398e1ef0 R09: 0000000003000010
[  678.974234][T13499] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000640
[  678.982191][T13499] R13: 00007f55398e1eb0 R14: 000000000000051b R15: 0000200000000000
[  678.990158][T13499]  </TASK>
[  678.996185][T13499] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3507: corrupted inode contents
[  679.071888][T13499] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #16: comm syz.2.3507: mark_inode_dirty error
[  679.083573][T13499] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3507: corrupted inode contents
[  679.095669][T13499] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.3507: mark_inode_dirty error
[  679.107188][T13499] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3507: corrupted inode contents
[  679.120511][T13499] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  679.129330][T13499] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #16: comm syz.2.3507: corrupted inode contents
[  679.141450][T13499] EXT4-fs error (device loop2): ext4_truncate:4279: inode #16: comm syz.2.3507: mark_inode_dirty error
[  679.152735][T13499] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  679.162966][T13499] EXT4-fs (loop2): 1 truncate cleaned up
[  679.168607][T13499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  679.179637][T13499] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  685.612295][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  685.618576][ T1421] ieee802154 phy1 wpan1: encryption failed: -22