last executing test programs:

10m41.147878403s ago: executing program 0 (id=13):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x7}, 0x5})

10m40.952487758s ago: executing program 0 (id=15):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto(r3, 0x0, 0x0, 0x804, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r1, 0x0, 0x0, 0x300)
setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x14, 0x6, "bafde2f2719b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

10m38.239827944s ago: executing program 0 (id=28):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r5)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

10m37.426173694s ago: executing program 0 (id=32):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0xcde, 0x9})

10m37.308010627s ago: executing program 0 (id=33):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)

10m32.825745046s ago: executing program 0 (id=55):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000000101040000000000000000eaff0000240001801400018008000100e000000108000200640101000c0002800500010000000000240002800c00028005080100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x14)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xf, 0x71, 0x2, 0x2, 0x2d7, 0x70, 0x7ffffffffffffffd, 0x5, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m32.629731041s ago: executing program 32 (id=55):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000000101040000000000000000eaff0000240001801400018008000100e000000108000200640101000c0002800500010000000000240002800c00028005080100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x14)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xf, 0x71, 0x2, 0x2, 0x2d7, 0x70, 0x7ffffffffffffffd, 0x5, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.86909296s ago: executing program 3 (id=3490):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_gstrings})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000002900)='./control\x00', 0x45800, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX, @ANYRES8=0x0], 0x1, 0xc4b, &(0x7f0000002940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040026bd7000fddbdf25410000000e00657673696d0000000f0002006e657464657673696d87006c325f64726f70730000000000000000000051ab66a37d1421f3f5a21d3dcd57d8783e60843d2f8f218c2c111fe8bf1dcb49"], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x1)
open_by_handle_at(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1)

26.350368367s ago: executing program 3 (id=3493):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)

26.204699421s ago: executing program 3 (id=3494):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040844)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x4000000c, 0x8, 0xa, 0x0, 0x1}, 0x8)

25.876109769s ago: executing program 3 (id=3495):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040), 0x1, 0x44a, &(0x7f0000000880)="$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")
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
chdir(&(0x7f0000000180)='./file0\x00')
listxattr(&(0x7f0000000240)='.\x00', &(0x7f0000000280)=""/29, 0x1d)

25.401850711s ago: executing program 3 (id=3496):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x3, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

24.252070379s ago: executing program 3 (id=3503):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
syz_read_part_table(0x5d4, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x557)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000ac0), 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000003c0)=0x8)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000280)=""/69, &(0x7f0000000300)=0x45)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r7, 0x0, 0x0)
sendfile(r6, r7, &(0x7f0000000000)=0x31, 0xfffc)
write$FUSE_LSEEK(r5, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})

23.878756247s ago: executing program 33 (id=3503):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279r02kcB/BPqiF3OrgIBy6nDg6HHCiOZlBJoqKQi3aRGxQUETNFECIXEHTQDIoZxNFFCln6Y2qaoVNLC517pUOPQocud7RLoUtzhD5dyg0tlx4cvF7w5cPzfN/f5/N8/oBv8L82FH/1er1MRPRyEd8d8uvhdqF462z5WuV+RKZ/WPz+8w+/9N/8mBL9U/vOp/VKWn/7eqL7fvNmtr18b+vCw5nm0N51IuJ1RJwc6QwPYj6O1mh+9tSbt7XSh3r+2VKpsfZuceHu2Eah0rnTbI3fzt54nHJzqR5P9UXU41U8j0dRjWo8idqA+n9pr17aOVNqTz69ul3sfpy+nHLlfznnQfu/PPfpQatx/eLE6c9X6lPzlfVju7lq7oguAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQI3mZ0+9eVsrfajncxGx9m5x4e7YRqHSudNsjd/O3niccnOpHk/1RdTjVTyPR1GNajyJ2t6Bvd5B2n7/D/2fLZUaa1/aq5d2zpTak0+vbhe7H6cvp1x5UAPvs7//y3OfHrQa1y9OnP58pT41X1k/tpur5o7oAgAAAAAAAAAAAAAAAAAAABARheKts+VrlfsRmfg1In7687eh/n4v/e+eSbnzqa6k/W9fT3Tfb97MtpfvbV14ONP8I+2/Ts/Jkc7wfz4Mh/Z3AAAA///sR5Sb")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x557)
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000ac0), 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000003c0)=0x8)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000280)=""/69, &(0x7f0000000300)=0x45)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r7, 0x0, 0x0)
sendfile(r6, r7, &(0x7f0000000000)=0x31, 0xfffc)
write$FUSE_LSEEK(r5, &(0x7f0000002700)={0x4e, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})

4.188927598s ago: executing program 5 (id=3646):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffefef7b, 0x0, 0x2, 0x10, "1b09000040000000000000e678000000101000"})
r1 = syz_open_pts(r0, 0x20800)
ioctl$TIOCSBRK(r1, 0x5427)

3.888867556s ago: executing program 5 (id=3649):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{r0, &(0x7f0000000140)='xfrm0\x00', 0x8000, &(0x7f0000000240)={@align=0xffffffff, {0x4, 0xfffb, 0x5, 0x9}}, 0x80000000, &(0x7f0000000340)={@_ha_fsid}, 0x0}, 0x2, &(0x7f0000000ac0)=[{0x1, 0x9, &(0x7f0000000400)='\x00', &(0x7f0000000440)="e414904ff40a03957e6fffcc4fa84ad1982b63b3c665b85c099164c5dc34d51f935db35fbeeb971fa317a9f57e2e26d6ad3dd3eb2c9ed720a235134ef33e2cc7aa3af381d1cb45c05b9e778be646fb834ea831e598d6f065ab433d2189242fd7d7d700c40153514579c845c54c22878a8784cc3056e6d51034982d739e4c1b5d46a67147e4d1e5d4cefe83f844fdf05086d5b053faab897cccc405aa81e7b756", 0xa0, 0x8}, {0x2, 0x7, 0x0, 0x0, 0x0, 0x38}]})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x4004000)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

3.7064529s ago: executing program 5 (id=3652):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x80800)
socket$inet6(0xa, 0x3, 0x87)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r2], 0x30}], 0x1}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

1.912515984s ago: executing program 2 (id=3674):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000800000000000000faffffff8500000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

1.832721385s ago: executing program 1 (id=3675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c)
ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, 0x0)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write(r6, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b)
ioctl(r6, 0x40104d06, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

1.66092458s ago: executing program 2 (id=3678):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.570311642s ago: executing program 2 (id=3680):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a010000000000611148000000000085000000ba0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34)

1.420868666s ago: executing program 2 (id=3682):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x7}, 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(r3)

1.264927819s ago: executing program 2 (id=3686):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x3, 0x9, 0x2, 0x8a56})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)

1.22887254s ago: executing program 6 (id=3688):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5890c6a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

1.052825745s ago: executing program 6 (id=3690):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

1.013430376s ago: executing program 4 (id=3691):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlink(&(0x7f0000000280)='./config/usb_gadget/g1/functions/gser.usb0\x00', &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='Manufacturer', 0xc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0)
write(r1, &(0x7f00000003c0)='Product\x00', 0x8)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='dummy_udc.0\x00', 0xc)

969.375527ms ago: executing program 6 (id=3692):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

899.468168ms ago: executing program 1 (id=3693):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000680)={'batadv_slave_0\x00', 0x400})

886.186739ms ago: executing program 4 (id=3694):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

816.92009ms ago: executing program 6 (id=3695):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x3, 0xfffffffe}, {}, {0xb1, 0x0, 0x28, 0x8000}]})

714.795523ms ago: executing program 4 (id=3696):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x4000000)

628.652535ms ago: executing program 4 (id=3697):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8804)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40000100)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc)

568.920167ms ago: executing program 1 (id=3698):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

566.929116ms ago: executing program 6 (id=3699):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

512.557298ms ago: executing program 5 (id=3700):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

469.421349ms ago: executing program 1 (id=3701):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0xc2d7, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)

420.97502ms ago: executing program 4 (id=3702):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000042000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc9, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

392.451171ms ago: executing program 6 (id=3703):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c)
ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, 0x0)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r9, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write(r6, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-bac', 0x2b)
ioctl(r6, 0x40104d06, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x99)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13)

342.079152ms ago: executing program 5 (id=3704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlink(&(0x7f0000000280)='./config/usb_gadget/g1/functions/gser.usb0\x00', &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='Manufacturer\x00', 0xd)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f00000003c0)='Product\x00', 0x8)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='dummy_udc.0\x00', 0xc)

209.516365ms ago: executing program 4 (id=3705):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0xfffffffffffffe3c}, 0x48)

209.107715ms ago: executing program 1 (id=3706):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

189.058436ms ago: executing program 2 (id=3707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

126.631847ms ago: executing program 5 (id=3708):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)

0s ago: executing program 1 (id=3709):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r0=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

rors=continue. Quota mode: writeback.
[  627.595556][T15251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  627.629075][T15251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  627.634708][T15403] ext4 filesystem being mounted at /622/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  627.640866][T15251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  627.656848][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  627.668377][T15414] binder: 15411:15414 ioctl c0306201 0 returned -14
[  627.689608][ T2305] Bluetooth: hci0: command 0x040f tx timeout
[  627.698039][T15414] binder: 15411:15414 ioctl c0306201 0 returned -14
[  627.715832][T15414] binder: 15411:15414 ioctl 40189206 0 returned -22
[  627.729715][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  627.780907][T15251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.808332][T15251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.829693][T15417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  627.864326][   T26] audit: type=1800 audit(1785573688.608:139): pid=15403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3132" name="file1" dev="loop5" ino=15 res=0 errno=0
[  627.907809][T15251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.941727][T15251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.971179][T15415] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3133'.
[  628.100862][T15423] device syzkaller0 entered promiscuous mode
[  628.294893][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.354293][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.448706][ T4210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.448812][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  628.467264][ T4210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.485591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  628.621744][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'.
[  628.946082][T15438] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  628.990970][T15442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3143'.
[  629.002156][T15438] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  629.026409][T15442] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3143'.
[  629.173080][T15444] loop2: detected capacity change from 0 to 2048
[  629.702294][T15458] device syzkaller0 entered promiscuous mode
[  629.771551][ T1331] Bluetooth: hci0: command 0x0419 tx timeout
[  629.871711][T15466] loop3: detected capacity change from 0 to 8
[  629.898825][T15466] squashfs: Unknown parameter 'Ói.vö%è½¥¹£†lÀs@lòEó;öŠM}’Ý-VËç	|9™S`°Îþ–ÎȤc%;žùµÝè¤Çª‡I�³	¦;£c„”fùħk»"‚U©ÿ{d+U£Å
&dÊ#XT¨ÐGßg°uÌDL­ŒH'°¯é¤ÍºSûØz+”g7?±hAÂ#+Å—ôD+I/ÏsøÜ!�„þ?•¸Ôá•|·EQŽ¼õB£€…|¹ÈÔ	 ˆ4•0¢9N8·	å`"ŸžKF#j"à0177777777777777777'
[  630.094353][T15446] chnl_net:caif_netlink_parms(): no params data found
[  630.148515][T15475] loop1: detected capacity change from 0 to 512
[  630.226809][T15475] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  630.300011][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'.
[  630.317788][T15475] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  630.385449][T15481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.410400][T15475] EXT4-fs (loop1): 1 truncate cleaned up
[  630.428342][T15446] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.437109][T15475] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,nombcache,quota,quota,,errors=continue. Quota mode: writeback.
[  630.463885][T15446] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.489425][T15446] device bridge_slave_0 entered promiscuous mode
[  630.512178][T15481] tipc: Resetting bearer <eth:syzkaller0>
[  630.534745][T15446] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.574375][T15446] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.619577][T15446] device bridge_slave_1 entered promiscuous mode
[  630.822664][T15477] tipc: Disabling bearer <eth:syzkaller0>
[  630.890575][T15493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3154'.
[  630.961233][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.050029][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.093144][T15495] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  631.129986][T15495] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  631.263625][T15446] team0: Port device team_slave_0 added
[  631.290519][ T2305] Bluetooth: hci1: command 0x0409 tx timeout
[  631.299638][T15446] team0: Port device team_slave_1 added
[  631.347384][T15524] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3157'.
[  631.433798][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'.
[  631.464555][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  631.483780][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.612714][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.628154][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.635534][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.678809][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.782094][T15543] kvm [15542]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0x80ffffff
[  631.843777][T15446] device hsr_slave_0 entered promiscuous mode
[  631.865883][T15446] device hsr_slave_1 entered promiscuous mode
[  631.883128][T15446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  631.906476][T15446] Cannot create hsr debugfs directory
[  631.925696][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'.
[  632.384444][T15557] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3166'.
[  632.390035][T15559] tipc: Started in network mode
[  632.510027][T15559] tipc: Node identity 568176d0e402, cluster identity 4711
[  632.527613][T15559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  632.609780][T15446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.638579][T15446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.686032][T15446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  632.788786][T15559] tipc: Resetting bearer <eth:syzkaller0>
[  632.824163][T15558] tipc: Disabling bearer <eth:syzkaller0>
[  632.872743][T15579] loop1: detected capacity change from 0 to 764
[  632.901130][T15446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.943854][T15446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.991481][T15446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  633.199789][T15446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.262982][T15446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.314432][T15599] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3176'.
[  633.315373][T15594] loop4: detected capacity change from 0 to 512
[  633.323575][T15446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  633.353705][T15597] loop2: detected capacity change from 0 to 2048
[  633.379421][ T4232] Bluetooth: hci1: command 0x041b tx timeout
[  633.409911][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'.
[  633.500866][T15446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.518366][T15597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  633.523956][T15446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.587118][T15446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39052 - 0
[  633.669455][ T4230] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  633.753878][T15612] loop2: detected capacity change from 0 to 256
[  633.858687][T15612] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  634.049112][T15615] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3179'.
[  634.160416][T15446] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  634.173933][T15446] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  634.219793][ T4230] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  634.228116][ T4230] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  634.252326][ T4230] usb 2-1: config 220 has no interface number 2
[  634.258680][ T4230] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  634.297150][T15446] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  634.332068][T15628] device syzkaller0 entered promiscuous mode
[  634.333273][ T4230] usb 2-1: config 220 interface 0 has no altsetting 0
[  634.348502][T15446] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  634.355457][ T4230] usb 2-1: config 220 interface 76 has no altsetting 0
[  634.362756][ T4230] usb 2-1: config 220 interface 1 has no altsetting 0
[  634.445409][T15625] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  634.484187][T15625] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  634.511684][T15639] loop3: detected capacity change from 0 to 16
[  634.529633][ T4230] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  634.556930][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.581133][ T4230] usb 2-1: Product: syz
[  634.585357][ T4230] usb 2-1: Manufacturer: syz
[  634.590471][T15639] erofs: (device loop3): mounted with root inode @ nid 36.
[  634.647015][T15446] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.672099][T15446] 8021q: adding VLAN 0 to HW filter on device team0
[  634.739883][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  634.748133][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  634.778731][ T4230] usb 2-1: SerialNumber: syz
[  634.784289][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'.
[  634.824310][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  634.844599][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  634.905011][T15651] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  634.915148][T15651] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  634.924358][T15651] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  634.934363][T15651] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  634.944196][T15651] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  634.954235][T15651] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  634.963541][T15651] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  634.973526][T15651] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  634.982863][T15651] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  634.992488][T15651] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36
[  635.001569][T15651] attempt to access beyond end of device
[  635.001569][T15651] loop3: rw=524288, want=312, limit=16
[  635.012735][T15651] attempt to access beyond end of device
[  635.012735][T15651] loop3: rw=524288, want=1049280, limit=16
[  635.024324][T15651] attempt to access beyond end of device
[  635.024324][T15651] loop3: rw=524288, want=24, limit=16
[  635.035542][T15651] attempt to access beyond end of device
[  635.035542][T15651] loop3: rw=524288, want=736, limit=16
[  635.047112][T15651] attempt to access beyond end of device
[  635.047112][T15651] loop3: rw=524288, want=776, limit=16
[  635.061214][T15651] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  635.070031][T15651] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  635.242473][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.249853][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  635.395007][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  635.500355][ T5213] Bluetooth: hci1: command 0x040f tx timeout
[  635.507234][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  635.555179][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.562506][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  635.663249][T15664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  635.801838][T15446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  635.878648][T15446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  635.978627][T15670] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  636.570876][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  636.659196][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  636.680595][ T4230] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  636.708470][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  636.725114][ T4230] usb 2-1: No valid video chain found.
[  636.739130][ T4230] usb 2-1: selecting invalid altsetting 0
[  636.746396][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  636.782554][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  636.829031][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  636.862345][ T4230] usb 2-1: selecting invalid altsetting 0
[  636.869544][ T4230] usbtest: probe of 2-1:220.1 failed with error -22
[  636.898746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  636.910365][ T4230] usb 2-1: USB disconnect, device number 15
[  636.960962][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  637.043485][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  637.090217][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  637.119758][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  637.128394][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  637.138506][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  637.146460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  637.161361][T15688] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3192'.
[  637.169483][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  637.192890][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  637.302295][T15701] Illegal XDP return value 4294967274, expect packet loss!
[  637.416569][T15706] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  637.545209][ T1108] Bluetooth: hci1: command 0x0419 tx timeout
[  637.565112][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3200'.
[  637.639727][T15708] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  637.669586][T15708] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  637.716215][T15729] loop1: detected capacity change from 0 to 16
[  637.756232][T15729] erofs: (device loop1): mounted with root inode @ nid 36.
[  637.952604][T15446] device veth0_vlan entered promiscuous mode
[  637.971577][T15736] loop4: detected capacity change from 0 to 128
[  637.989105][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  638.023925][T15736] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  638.028847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  638.078364][T15738] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  638.088542][T15738] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  638.098082][T15738] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  638.108424][T15738] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  638.118105][T15738] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  638.130464][T15738] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  638.139836][T15738] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  638.150048][T15738] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  638.159799][T15738] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  638.169753][T15738] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[  638.178882][T15738] attempt to access beyond end of device
[  638.178882][T15738] loop1: rw=524288, want=312, limit=16
[  638.189987][T15738] attempt to access beyond end of device
[  638.189987][T15738] loop1: rw=524288, want=1049280, limit=16
[  638.201392][T15738] attempt to access beyond end of device
[  638.201392][T15738] loop1: rw=524288, want=24, limit=16
[  638.213484][T15738] attempt to access beyond end of device
[  638.213484][T15738] loop1: rw=524288, want=736, limit=16
[  638.224666][T15738] attempt to access beyond end of device
[  638.224666][T15738] loop1: rw=524288, want=776, limit=16
[  638.239102][T15738] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  638.247846][T15738] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  638.297477][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  638.364313][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  638.449210][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  638.506082][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  638.528688][T15743] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  638.690896][T15743] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  639.425363][T15762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.450434][T15762] device syzkaller0 entered promiscuous mode
[  639.498054][T15762] tipc: Resetting bearer <eth:syzkaller0>
[  639.511191][T15760] tipc: Resetting bearer <eth:syzkaller0>
[  639.547046][T15760] tipc: Disabling bearer <eth:syzkaller0>
[  639.730075][ T1108] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  639.816056][T15446] device veth1_vlan entered promiscuous mode
[  639.951803][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  639.970370][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  640.000463][T15446] device veth0_macvtap entered promiscuous mode
[  640.001550][T15772] loop4: detected capacity change from 0 to 512
[  640.059842][T15446] device veth1_macvtap entered promiscuous mode
[  640.128914][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.179703][ T1108] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  640.195663][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.197677][ T1108] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  640.269805][ T1108] usb 4-1: config 220 has no interface number 2
[  640.277968][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.293281][ T1108] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  640.299162][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.318080][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.328948][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.339320][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.359433][ T1108] usb 4-1: config 220 interface 0 has no altsetting 0
[  640.389308][ T1108] usb 4-1: config 220 interface 76 has no altsetting 0
[  640.396229][ T1108] usb 4-1: config 220 interface 1 has no altsetting 0
[  640.396997][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.443051][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.474464][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.497247][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.656868][T15806] loop3: detected capacity change from 0 to 164
[  640.665122][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  640.684784][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  640.692831][ T1108] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  640.710662][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.720186][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  640.740401][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  640.769450][T15806] iso9660: Corrupted directory entry in block 2 of inode 1920
[  640.779558][ T1108] usb 4-1: can't set config #220, error -71
[  640.780966][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.806577][ T1108] usb 4-1: USB disconnect, device number 13
[  640.839206][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.877995][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.901632][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.920322][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.947129][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.966095][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.999328][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.018376][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.040009][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.061903][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.190907][T15822] loop3: detected capacity change from 0 to 16
[  641.228405][T15822] erofs: (device loop3): mounted with root inode @ nid 36.
[  641.457849][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  641.467153][T15822] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  641.477277][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36
[  641.486722][T15822] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  641.497379][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36
[  641.506746][T15822] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  641.511172][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  641.517370][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36
[  641.529899][T15828] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  641.535865][T15822] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  641.555656][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36
[  641.564830][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36
[  641.564942][T15822] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  641.583578][T15822] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36
[  641.583671][T15822] attempt to access beyond end of device
[  641.583671][T15822] loop3: rw=524288, want=312, limit=16
[  641.604208][T15822] attempt to access beyond end of device
[  641.604208][T15822] loop3: rw=524288, want=1049280, limit=16
[  641.604267][T15822] attempt to access beyond end of device
[  641.604267][T15822] loop3: rw=524288, want=24, limit=16
[  641.626825][T15822] attempt to access beyond end of device
[  641.626825][T15822] loop3: rw=524288, want=736, limit=16
[  641.638038][T15822] attempt to access beyond end of device
[  641.638038][T15822] loop3: rw=524288, want=776, limit=16
[  641.651658][T15828] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  641.660364][T15822] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  641.674456][T15822] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  641.686593][T15446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.785341][T15446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.798994][T15446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.823486][T15446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.254072][T15845] device syzkaller0 entered promiscuous mode
[  642.341513][T15849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3224'.
[  642.361441][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3226'.
[  642.550028][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.557935][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.616887][T15866] loop4: detected capacity change from 0 to 16
[  642.656187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  642.669891][T15865] loop1: detected capacity change from 0 to 2048
[  642.689499][ T2305] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  642.690008][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.710987][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.712788][T15866] erofs: (device loop4): mounted with root inode @ nid 36.
[  642.775311][T15865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  642.801312][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  642.938855][T15866] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  642.948943][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  642.958125][T15866] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  642.968162][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  642.977513][T15866] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  642.987521][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  642.997841][T15866] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  643.000863][T15869] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  643.010149][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  643.027822][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36
[  643.027938][T15866] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  643.027957][T15866] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  643.028037][T15866] attempt to access beyond end of device
[  643.028037][T15866] loop4: rw=524288, want=312, limit=16
[  643.028103][T15866] attempt to access beyond end of device
[  643.028103][T15866] loop4: rw=524288, want=1049280, limit=16
[  643.028161][T15866] attempt to access beyond end of device
[  643.028161][T15866] loop4: rw=524288, want=24, limit=16
[  643.028229][T15866] attempt to access beyond end of device
[  643.028229][T15866] loop4: rw=524288, want=736, limit=16
[  643.028332][T15866] attempt to access beyond end of device
[  643.028332][T15866] loop4: rw=524288, want=776, limit=16
[  643.116478][T15869] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  643.125637][T15866] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  643.140159][T15866] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117]
[  643.258430][T15871] bridge0: port 3(vlan2) entered blocking state
[  643.299534][ T2305] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  643.309640][T15871] bridge0: port 3(vlan2) entered disabled state
[  643.325169][ T2305] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  643.334024][T15871] device vlan2 entered promiscuous mode
[  643.341743][ T2305] usb 3-1: config 220 has no interface number 2
[  643.348289][ T2305] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  643.356723][T15871] device geneve0 entered promiscuous mode
[  643.363640][ T2305] usb 3-1: config 220 interface 0 has no altsetting 0
[  643.391642][ T2305] usb 3-1: config 220 interface 76 has no altsetting 0
[  643.403685][ T2305] usb 3-1: config 220 interface 1 has no altsetting 0
[  643.471127][T15881] loop1: detected capacity change from 0 to 2048
[  643.571831][ T2305] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  643.589356][   T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  643.606382][T15881] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  643.619911][ T2305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.654993][ T2305] usb 3-1: Product: syz
[  643.661721][ T2305] usb 3-1: Manufacturer: syz
[  643.669085][ T2305] usb 3-1: SerialNumber: syz
[  643.684096][T15885] loop4: detected capacity change from 0 to 512
[  643.738962][T15885] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.3237: missing EA_INODE flag
[  643.757968][T15885] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.3237: error while reading EA inode 2 err=-117
[  643.785114][T15885] EXT4-fs (loop4): 1 orphan inode deleted
[  643.818333][T15889] loop1: detected capacity change from 0 to 128
[  643.829712][   T13] usb 4-1: Using ep0 maxpacket: 16
[  643.839499][T15885] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  643.871962][T15889] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  643.892185][T15889] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  643.959560][   T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  643.980810][   T13] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  644.029645][ T2305] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  644.036415][ T2305] usb 3-1: No valid video chain found.
[  644.079493][ T2305] usb 3-1: selecting invalid altsetting 0
[  644.162067][   T13] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  644.183191][ T2305] usb 3-1: selecting invalid altsetting 0
[  644.188989][ T2305] usbtest: probe of 3-1:220.1 failed with error -22
[  644.214730][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  644.235060][ T2305] usb 3-1: USB disconnect, device number 12
[  644.254931][   T13] usb 4-1: SerialNumber: syz
[  644.313341][   T13] usb 4-1: 0:2 : does not exist
[  644.321625][T15896] device syzkaller0 entered promiscuous mode
[  644.351794][T15891] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  644.361792][T15891] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  644.540826][T15898] loop4: detected capacity change from 0 to 16
[  644.623184][T15898] erofs: (device loop4): mounted with root inode @ nid 36.
[  644.709506][   T13] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  644.760652][   T13] usb 4-1: USB disconnect, device number 14
[  644.892159][T15905] loop1: detected capacity change from 0 to 16
[  644.923033][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  644.952209][T15905] erofs: (device loop1): mounted with root inode @ nid 36.
[  645.169921][T15906] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  645.192290][T15905] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  645.202397][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  645.211726][T15905] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  645.221750][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  645.231076][T15905] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  645.241238][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  645.242804][T15907] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  645.250496][T15905] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  645.271014][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  645.280414][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36
[  645.280561][T15905] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  645.280581][T15905] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[  645.311872][T15907] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  645.320252][T15905] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  645.334293][T15905] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  645.386161][T15906] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  645.458260][T15906] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  645.554469][T15906] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  645.563797][T15906] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  645.669762][T15906] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  645.695054][T15916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  645.736328][T15906] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  645.756658][T15906] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  645.772554][T15906] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  645.784177][ T4195] batman_adv: batadv0: Interface deactivated: syz_tun
[  645.796115][T15906] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  645.905889][ T4195] batman_adv: batadv0: Removing interface: syz_tun
[  645.928330][T15921] binder: 15920:15921 ioctl c0306201 0 returned -14
[  645.938742][ T4195] device syz_tun left promiscuous mode
[  646.004595][T15923] binder: 15920:15923 ioctl c0306201 0 returned -14
[  646.048028][T15923] binder: 15920:15923 ioctl 40189206 0 returned -22
[  646.291127][T15908] chnl_net:caif_netlink_parms(): no params data found
[  646.494855][T15908] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.573814][T15908] bridge0: port 1(bridge_slave_0) entered disabled state
[  646.592257][T15908] device bridge_slave_0 entered promiscuous mode
[  646.615989][T15908] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.631895][T15908] bridge0: port 2(bridge_slave_1) entered disabled state
[  646.652435][T15908] device bridge_slave_1 entered promiscuous mode
[  646.754655][T15908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.791213][T15908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.852329][T15934] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  646.868818][T15940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3253'.
[  646.878156][T15934] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  646.905880][T15908] team0: Port device team_slave_0 added
[  646.941557][T15908] team0: Port device team_slave_1 added
[  647.016790][T15944] tipc: Started in network mode
[  647.046015][T15944] tipc: Node identity 164a28d6c5cd, cluster identity 4711
[  647.058078][T15944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.072426][T15946] loop1: detected capacity change from 0 to 16
[  647.107816][T15946] erofs: (device loop1): mounted with root inode @ nid 36.
[  647.124247][T15947] device syzkaller0 entered promiscuous mode
[  647.145386][T15946] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  647.155580][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 15 @ nid 36
[  647.164342][T15908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  647.164802][T15946] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  647.181842][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 14 @ nid 36
[  647.188841][T15908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.191922][T15946] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  647.191952][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36
[  647.192079][T15946] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  647.229134][T15948] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  647.238520][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36
[  647.238623][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36
[  647.259422][T15946] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  647.277466][T15946] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[  647.277560][T15946] handle_bad_sector: 10 callbacks suppressed
[  647.277575][T15946] attempt to access beyond end of device
[  647.277575][T15946] loop1: rw=524288, want=312, limit=16
[  647.296386][T15946] attempt to access beyond end of device
[  647.296386][T15946] loop1: rw=524288, want=1049280, limit=16
[  647.296443][T15946] attempt to access beyond end of device
[  647.296443][T15946] loop1: rw=524288, want=24, limit=16
[  647.296510][T15946] attempt to access beyond end of device
[  647.296510][T15946] loop1: rw=524288, want=736, limit=16
[  647.296615][T15946] attempt to access beyond end of device
[  647.296615][T15946] loop1: rw=524288, want=776, limit=16
[  647.307629][T15908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  647.329764][T15908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  647.361411][T15908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.409164][T15948] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  647.417555][T15693] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  647.417602][T15946] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -25 in[58, 4038] out[2639]
[  647.440391][T15946] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  647.485332][T15908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  647.512736][T15949] tipc: Resetting bearer <eth:syzkaller0>
[  647.567942][T15943] tipc: Resetting bearer <eth:syzkaller0>
[  647.590792][T15951] loop1: detected capacity change from 0 to 512
[  647.610413][ T4232] Bluetooth: hci2: command 0x0409 tx timeout
[  647.617489][T15943] tipc: Disabling bearer <eth:syzkaller0>
[  647.695993][T15951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  647.703183][T15908] device hsr_slave_0 entered promiscuous mode
[  647.725093][T15908] device hsr_slave_1 entered promiscuous mode
[  647.744519][T15951] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  647.760816][T15908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  647.768516][T15908] Cannot create hsr debugfs directory
[  647.809643][T15693] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  647.827164][T15693] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  647.907686][T15693] usb 4-1: config 220 has no interface number 2
[  647.936169][T15693] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  647.958868][T15693] usb 4-1: config 220 interface 0 has no altsetting 0
[  647.966136][T15693] usb 4-1: config 220 interface 76 has no altsetting 0
[  647.973460][T15693] usb 4-1: config 220 interface 1 has no altsetting 0
[  647.980574][T15955] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3257'.
[  648.147898][T15908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.158964][T15693] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  648.178404][T15693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.198708][T15693] usb 4-1: Product: syz
[  648.205600][T15908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.206971][T15693] usb 4-1: Manufacturer: syz
[  648.258942][T15693] usb 4-1: SerialNumber: syz
[  648.356650][T15959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  648.412401][T15964] loop1: detected capacity change from 0 to 2048
[  648.423787][T15908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.479383][T15908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.540095][T15966] binder: 15965:15966 ioctl c0306201 0 returned -14
[  648.568551][T15964] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  648.601815][T15964] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  648.619819][T15970] binder: 15965:15970 ioctl c0306201 0 returned -14
[  648.639913][T15693] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  648.646632][T15693] usb 4-1: No valid video chain found.
[  648.659691][T15908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.672850][T15908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.675583][T15971] binder: 15965:15971 ioctl 40189206 0 returned -22
[  648.728058][T15693] usb 4-1: selecting invalid altsetting 0
[  648.787047][T15908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  648.802959][T15908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  648.841347][T15693] usb 4-1: selecting invalid altsetting 0
[  648.847768][T15693] usbtest: probe of 4-1:220.1 failed with error -22
[  648.857978][T15693] usb 4-1: USB disconnect, device number 15
[  649.052465][T15908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  649.082688][T15908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  649.123163][T15908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  649.141793][T15908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  649.163252][T15977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  649.191120][T15977] device syzkaller0 entered promiscuous mode
[  649.227481][T15977] tipc: Resetting bearer <eth:syzkaller0>
[  649.256938][T15975] tipc: Resetting bearer <eth:syzkaller0>
[  649.285435][T15975] tipc: Disabling bearer <eth:syzkaller0>
[  649.467771][T15984] loop5: detected capacity change from 0 to 1024
[  649.504203][T15908] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.568838][T15986] loop3: detected capacity change from 0 to 512
[  649.591831][T15984] EXT4-fs error (device loop5): ext4_quota_enable:6444: inode #4: comm syz.5.3267: iget: immutable or append flags not allowed on symlinks
[  649.600662][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  649.625935][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  649.635621][T15984] EXT4-fs error (device loop5): ext4_quota_enable:6447: comm syz.5.3267: Bad quota inode: 4, type: 1
[  649.649163][T15984] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  649.676161][T15908] 8021q: adding VLAN 0 to HW filter on device team0
[  649.689456][T15693] Bluetooth: hci2: command 0x041b tx timeout
[  649.713331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  649.790258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  649.815101][T15984] EXT4-fs (loop5): mount failed
[  649.822501][T15986] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.3268: Invalid block bitmap block 0 in block_group 0
[  649.891979][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.899157][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.919841][T15986] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  649.959874][T15986] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.3268: attempt to clear invalid blocks 983261 len 1
[  649.990564][T15986] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3268: invalid indirect mapped block 2683928664 (level 0)
[  650.015914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  650.029978][T15986] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.3268: Invalid inode table block 0 in block_group 0
[  650.048926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  650.100052][T15986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  650.110395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  650.140496][T15986] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  650.149619][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.157044][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.206051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  650.210174][T15986] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.3268: Invalid inode table block 0 in block_group 0
[  650.261897][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  650.279074][T15986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  650.293823][T16000] loop5: detected capacity change from 0 to 1024
[  650.301936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  650.326194][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  650.334262][T15986] EXT4-fs error (device loop3): ext4_truncate:4286: inode #13: comm syz.3.3268: mark_inode_dirty error
[  650.334668][T15986] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  650.368514][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  650.382177][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  650.406008][T15908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  650.412995][T16002] loop1: detected capacity change from 0 to 16
[  650.422016][T16000] EXT4-fs (loop5): inline encryption not supported
[  650.428748][T15986] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.3268: Invalid inode table block 0 in block_group 0
[  650.437967][T16000] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  650.452728][T15986] EXT4-fs (loop3): 1 truncate cleaned up
[  650.458418][T15986] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[  650.468408][T16000] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  650.511486][T16002] erofs: (device loop1): mounted with root inode @ nid 36.
[  650.512993][T15908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  650.574375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  650.605869][T16000] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[  650.613073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  650.664931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  650.674237][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  650.693635][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  650.711432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  650.719420][T16000] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  650.865460][T16011] device syzkaller0 entered promiscuous mode
[  650.945458][T16014] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  651.110363][T16021] loop5: detected capacity change from 0 to 256
[  651.113668][T16018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.142429][T16021] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  651.170484][T16020] device syzkaller0 entered promiscuous mode
[  651.214540][T16018] tipc: Resetting bearer <eth:syzkaller0>
[  651.253399][T16016] tipc: Resetting bearer <eth:syzkaller0>
[  651.270278][T16016] tipc: Disabling bearer <eth:syzkaller0>
[  651.292414][T16024] device syzkaller0 entered promiscuous mode
[  651.355398][T15908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.374844][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  651.390118][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  651.484554][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  651.507087][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  651.522481][T16028] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3281'.
[  651.636288][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  651.685098][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  651.723278][T16037] loop4: detected capacity change from 0 to 16
[  651.744237][T15908] device veth0_vlan entered promiscuous mode
[  651.748609][T16039] loop1: detected capacity change from 0 to 512
[  651.761182][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  651.771428][   T13] Bluetooth: hci2: command 0x040f tx timeout
[  651.786836][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  651.809828][T16037] erofs: (device loop4): mounted with root inode @ nid 36.
[  651.850312][T16039] EXT4-fs (loop1): orphan cleanup on readonly fs
[  651.879911][T15908] device veth1_vlan entered promiscuous mode
[  651.887855][T16039] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.3285: corrupted inode contents
[  652.001892][T16039] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  652.011407][T16039] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.3285: corrupted inode contents
[  652.027663][T16039] EXT4-fs error (device loop1): ext4_evict_inode:332: inode #15: comm syz.1.3285: mark_inode_dirty error
[  652.053190][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  652.059877][T16039] EXT4-fs (loop1): 1 orphan inode deleted
[  652.067632][T16039] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  652.087085][T16039] binder: 16038:16039 ioctl c0306201 200000000080 returned -14
[  652.088523][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  652.102259][T16039] binder: 16038:16039 ioctl c0306201 2000000003c0 returned -14
[  652.180433][T15908] device veth0_macvtap entered promiscuous mode
[  652.191906][T16045] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  652.220456][T15908] device veth1_macvtap entered promiscuous mode
[  652.232170][T16045] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  652.249403][T16045] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  652.333349][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.386435][T16045] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  652.405501][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.439369][T16045] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  652.445261][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.464860][T16048] loop1: detected capacity change from 0 to 2048
[  652.489368][T16045] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  652.498697][T16045] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  652.550754][T16048] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[  652.550754][T16048] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  652.550754][T16048] 
[  652.559374][T16045] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  652.570536][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.623882][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.645306][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.665578][T16048] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nouser_xattr,,errors=continue. Quota mode: none.
[  652.669371][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.699867][T16045] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  652.759424][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.761521][T16045] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  652.784541][T16045] attempt to access beyond end of device
[  652.784541][T16045] loop4: rw=524288, want=312, limit=16
[  652.800584][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.803717][T16045] attempt to access beyond end of device
[  652.803717][T16045] loop4: rw=524288, want=1049280, limit=16
[  652.819092][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.839423][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  652.859370][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  652.922852][T16045] attempt to access beyond end of device
[  652.922852][T16045] loop4: rw=524288, want=24, limit=16
[  652.937306][T15908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.985099][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  653.004724][T16045] attempt to access beyond end of device
[  653.004724][T16045] loop4: rw=524288, want=736, limit=16
[  653.006264][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  653.044151][T16045] attempt to access beyond end of device
[  653.044151][T16045] loop4: rw=524288, want=776, limit=16
[  653.097516][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  653.130323][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  653.161890][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.211861][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.272882][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.324037][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.373976][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.408106][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.442681][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.481056][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.513917][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.547888][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.584677][T15908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  653.617845][T15908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  653.652891][T15908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.684896][T16061] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3291'.
[  653.719813][T16061] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3291'.
[  653.773716][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  653.840303][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  653.849387][ T2305] Bluetooth: hci2: command 0x0419 tx timeout
[  653.891127][T16066] device syzkaller0 entered promiscuous mode
[  653.920716][T16062] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  653.943451][T15908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.959407][T15908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.988576][T15908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.039220][T15908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.144867][T16070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.301683][T16069] tipc: Resetting bearer <eth:syzkaller0>
[  654.384637][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.408714][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.409227][T16071] device syzkaller0 entered promiscuous mode
[  654.438994][T16071] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  654.482232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  654.526017][T16067] tipc: Resetting bearer <eth:syzkaller0>
[  654.547696][T16067] tipc: Disabling bearer <eth:syzkaller0>
[  654.594253][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.666927][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.711317][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  654.760228][T16080] device syzkaller0 entered promiscuous mode
[  654.900500][T16078] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3294'.
[  656.238596][T16097] input: syz1 as /devices/virtual/input/input10
[  656.405940][T16104] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3301'.
[  656.429715][T16104] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3301'.
[  656.455507][T16106] device syzkaller0 entered promiscuous mode
[  656.482881][T16106] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  656.525866][T16098] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  656.550053][T16098] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  656.599562][T16108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'.
[  656.715002][T16113] device syzkaller0 entered promiscuous mode
[  656.789426][T16115] device syzkaller0 entered promiscuous mode
[  657.053786][T16124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3308'.
[  657.257456][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3313'.
[  657.268089][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3313'.
[  657.332928][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3313'.
[  657.409511][   T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  657.521425][T16140] device syzkaller0 entered promiscuous mode
[  657.539195][T16140] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  657.763114][   T21] usb 3-1: Using ep0 maxpacket: 16
[  657.781086][T16143] loop5: detected capacity change from 0 to 1024
[  657.825882][T16143] hfsplus: invalid length 32517 has been corrected to 255
[  657.871861][   T26] audit: type=1800 audit(1785573718.618:140): pid=16143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3316" name="file1" dev="loop5" ino=20 res=0 errno=0
[  657.899793][   T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  657.918655][T16143] hfsplus: b-tree write err: -5, ino 20
[  657.926413][   T21] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  658.051236][ T4289] hfsplus: b-tree write err: -5, ino 20
[  658.107003][T16151] device syzkaller0 entered promiscuous mode
[  658.119620][   T21] usb 3-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.40
[  658.147659][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.176527][   T21] usb 3-1: Product: syz
[  658.189386][   T21] usb 3-1: Manufacturer: syz
[  658.194052][   T21] usb 3-1: SerialNumber: syz
[  658.309050][T16158] loop3: detected capacity change from 0 to 2048
[  658.426177][T16158] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  658.442699][T16158] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  658.451311][T16161] device syzkaller0 entered promiscuous mode
[  658.669648][   T21] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  658.753629][   T21] usb 3-1: USB disconnect, device number 13
[  658.798380][T16169] __nla_validate_parse: 5 callbacks suppressed
[  658.798398][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'.
[  658.830561][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'.
[  658.853970][T16174] device syzkaller0 entered promiscuous mode
[  658.878062][T16174] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  659.173222][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  659.507139][T16186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  660.457440][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3335'.
[  660.537080][T16210] loop4: detected capacity change from 0 to 512
[  660.682297][T16210] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.3336: bg 0: block 5: invalid block bitmap
[  660.711852][T16215] loop2: detected capacity change from 0 to 128
[  660.714068][T16218] loop1: detected capacity change from 0 to 256
[  660.742409][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3338'.
[  660.765836][T16210] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  660.781735][T16210] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3336: invalid indirect mapped block 3 (level 2)
[  660.789530][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3338'.
[  660.812434][T16210] EXT4-fs (loop4): 1 orphan inode deleted
[  660.818509][T16210] EXT4-fs (loop4): 1 truncate cleaned up
[  660.829609][T16210] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  660.839549][T16215] EXT4-fs (loop2): filesystem is read-only
[  660.854693][T16218] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  660.877957][T16215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  660.899329][T16218] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  660.966039][T16218] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  661.073519][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3338'.
[  661.099423][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3338'.
[  661.170203][T16225] device syzkaller0 entered promiscuous mode
[  661.235421][T16225] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  661.500279][T16238] loop5: detected capacity change from 0 to 16
[  661.512973][T16230] device syzkaller0 entered promiscuous mode
[  661.552736][T16238] erofs: (device loop5): mounted with root inode @ nid 36.
[  661.927005][T16247] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3346'.
[  661.936318][T16247] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3346'.
[  661.952300][T16247] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3346'.
[  663.383284][T16268] loop4: detected capacity change from 0 to 2048
[  663.917914][T16279] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  663.999027][T16282] loop2: detected capacity change from 0 to 512
[  664.263778][T16290] __nla_validate_parse: 2 callbacks suppressed
[  664.263797][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'.
[  664.291160][T16282] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.3360: inode has both inline data and extents flags
[  664.320453][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[  664.334396][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'.
[  664.398366][T16282] EXT4-fs (loop2): Remounting filesystem read-only
[  664.410843][T16282] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.3360: couldn't read orphan inode 15 (err -117)
[  664.444071][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'.
[  664.461998][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'.
[  664.471864][T16282] EXT4-fs (loop2): Remounting filesystem read-only
[  664.478458][T16282] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,usrquota,errors=remount-ro,grpid,. Quota mode: writeback.
[  665.037844][T16310] loop4: detected capacity change from 0 to 256
[  665.171596][T16310] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  665.191144][T16313] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3369'.
[  665.377961][T16318] loop2: detected capacity change from 0 to 2048
[  665.577457][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'.
[  665.798431][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'.
[  665.817618][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3378'.
[  665.893138][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3378'.
[  666.209855][T16342] loop1: detected capacity change from 0 to 512
[  666.340783][T16342] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  666.372121][T16342] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3383: invalid indirect mapped block 8 (level 2)
[  666.390512][T16348] device syzkaller0 entered promiscuous mode
[  666.431489][T16350] device syzkaller0 entered promiscuous mode
[  666.499808][T16342] EXT4-fs (loop1): Remounting filesystem read-only
[  666.508325][T16342] EXT4-fs (loop1): 1 truncate cleaned up
[  666.530683][T16342] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x00000000000000a6,journal_dev=0x0000000000009676,errors=remount-ro,data_err=ignore,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback.
[  666.603207][T16342] EXT4-fs (loop1): Unrecognized mount option "" or missing value
[  667.504453][T16376] loop2: detected capacity change from 0 to 2048
[  667.552272][  T154] tipc: Disabling bearer <eth:wg1>
[  667.575850][  T154] tipc: Left network mode
[  667.703461][T16381] loop1: detected capacity change from 0 to 512
[  667.838529][T16381] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  667.959006][T16381] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  667.980330][T16381] Quota error (device loop1): write_blk: dquota write failed
[  667.988366][T16381] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  667.997952][T16381] Quota error (device loop1): write_blk: dquota write failed
[  668.005922][T16381] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  668.016942][T16381] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3394: Failed to acquire dquot type 1
[  668.033638][T16381] EXT4-fs (loop1): 1 truncate cleaned up
[  668.042060][T16381] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,init_itable=0x0000000000000080,noauto_da_alloc,resuid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  668.143041][T16389] device syzkaller0 entered promiscuous mode
[  668.397544][T16394] device syzkaller0 entered promiscuous mode
[  668.829658][T16412] loop1: detected capacity change from 0 to 4096
[  668.866449][T16412] EXT4-fs (loop1): Test dummy encryption mode enabled
[  668.913797][T16412] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=6
[  668.973835][T16412] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  669.001443][T16418] devpts: called with bogus options
[  669.033401][T16412] EXT4-fs (loop1): mount failed
[  669.175028][T16420] loop4: detected capacity change from 0 to 2048
[  669.306268][T16427] __nla_validate_parse: 13 callbacks suppressed
[  669.306286][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'.
[  669.358751][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  669.411878][T16426] device syzkaller0 entered promiscuous mode
[  669.500550][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'.
[  669.532586][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  669.624282][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3415'.
[  669.746151][T16439] device syzkaller0 entered promiscuous mode
[  669.898670][  T154] device hsr_slave_0 left promiscuous mode
[  669.907278][T16448] loop4: detected capacity change from 0 to 16
[  669.915058][  T154] device hsr_slave_1 left promiscuous mode
[  669.933886][  T154] device vlan2 left promiscuous mode
[  669.948881][  T154] device geneve0 left promiscuous mode
[  669.955372][  T154] bridge0: port 3(vlan2) entered disabled state
[  669.967058][  T154] device bridge_slave_1 left promiscuous mode
[  669.976239][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.989217][  T154] device bridge_slave_0 left promiscuous mode
[  670.003500][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.038862][  T154] device veth1_macvtap left promiscuous mode
[  670.039370][ T4233] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  670.052616][T16448] erofs: (device loop4): mounted with root inode @ nid 36.
[  670.070360][  T154] device veth0_macvtap left promiscuous mode
[  670.151394][  T154] device veth1_vlan left promiscuous mode
[  670.175365][  T154] device veth0_vlan left promiscuous mode
[  670.380024][T16452] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  670.449602][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.471220][T16452] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  670.486776][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.517966][T16452] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  670.529526][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  670.559479][T16452] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  670.588051][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  670.599533][T16452] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  670.636992][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.646842][T16452] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  670.675299][ T4233] usb 2-1: config 0 descriptor??
[  670.681292][  T154] bond1 (unregistering): (slave dummy0): Releasing active interface
[  670.696606][T16452] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  670.727931][  T154] bond1 (unregistering): Released all slaves
[  670.744393][T16452] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  670.771847][T16452] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  670.783628][T16452] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  670.830038][T16452] attempt to access beyond end of device
[  670.830038][T16452] loop4: rw=524288, want=312, limit=16
[  670.879689][T16452] attempt to access beyond end of device
[  670.879689][T16452] loop4: rw=524288, want=1049280, limit=16
[  670.902168][T16452] attempt to access beyond end of device
[  670.902168][T16452] loop4: rw=524288, want=24, limit=16
[  671.065673][T16452] attempt to access beyond end of device
[  671.065673][T16452] loop4: rw=524288, want=736, limit=16
[  671.077614][T16452] attempt to access beyond end of device
[  671.077614][T16452] loop4: rw=524288, want=776, limit=16
[  671.218193][  T154] team0 (unregistering): Port device team_slave_1 removed
[  671.277500][  T154] team0 (unregistering): Port device team_slave_0 removed
[  671.328420][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  671.389688][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  671.471304][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.478768][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.499342][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.506789][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.529474][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.536918][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.549349][  T154] bond0 (unregistering): Released all slaves
[  671.569353][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.576885][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.584468][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.591941][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.600053][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.607471][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.629353][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.636785][ T4233] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  671.654369][ T4233] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  671.705381][ T4233] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  671.751869][ T4233] usb 2-1: USB disconnect, device number 16
[  671.826562][T16457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.838771][T16465] fido_id[16465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  672.182091][T16457] tipc: Disabling bearer <eth:syzkaller0>
[  672.244664][T16476] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3426'.
[  672.428962][T16479] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3427'.
[  672.477898][T16481] device syzkaller0 entered promiscuous mode
[  672.618187][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3430'.
[  672.716870][T16487] loop2: detected capacity change from 0 to 1024
[  673.110630][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3435'.
[  673.148853][T16499] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3435'.
[  673.204213][T16500] device syzkaller0 entered promiscuous mode
[  673.270848][T16501] loop1: detected capacity change from 0 to 2048
[  673.353752][T16504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  673.370345][T16504] device syzkaller0 entered promiscuous mode
[  673.439960][T16504] tipc: Resetting bearer <eth:syzkaller0>
[  673.447846][T16503] tipc: Resetting bearer <eth:syzkaller0>
[  673.480195][T16503] tipc: Disabling bearer <eth:syzkaller0>
[  673.692142][T16509] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  673.715032][T16509] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  674.549771][ T4233] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  674.884973][T16530] loop1: detected capacity change from 0 to 128
[  674.924856][T16530] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  674.970509][T16530] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: none.
[  674.999538][ T4233] usb 3-1: Using ep0 maxpacket: 8
[  675.042718][T16530] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  675.062136][T16530] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted
[  675.159620][ T4233] usb 3-1: unable to get BOS descriptor or descriptor too short
[  675.197723][T16540] __nla_validate_parse: 2 callbacks suppressed
[  675.197741][T16540] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3447'.
[  675.238168][T16541] device syzkaller0 entered promiscuous mode
[  675.264368][ T4233] usb 3-1: config 9 has an invalid interface number: 119 but max is 0
[  675.285238][ T4233] usb 3-1: config 9 has no interface number 0
[  675.317940][ T4233] usb 3-1: config 9 interface 119 has no altsetting 0
[  675.508495][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  675.516305][ T4233] usb 3-1: New USB device found, idVendor=12d1, idProduct=e94d, bcdDevice= c.03
[  675.533180][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.567713][ T4233] usb 3-1: Product: syz
[  675.579832][ T4233] usb 3-1: Manufacturer: syz
[  675.591309][ T4233] usb 3-1: SerialNumber: syz
[  675.618911][T16548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  675.636818][T16549] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  675.657249][T16549] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  675.800297][T16556] device batadv_slave_1 entered promiscuous mode
[  675.829358][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  675.850613][T16556] device batadv_slave_1 left promiscuous mode
[  675.942821][ T4233] usb 3-1: USB disconnect, device number 14
[  675.994547][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3453'.
[  676.055395][T16560] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3453'.
[  676.091274][T16558] loop1: detected capacity change from 0 to 2048
[  676.104759][   T23] usb 4-1: Using ep0 maxpacket: 16
[  676.239427][   T23] usb 4-1: config index 0 descriptor too short (expected 65535, got 1289)
[  676.248768][   T23] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  676.281107][   T23] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  676.315602][   T23] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  676.450905][   T23] usb 4-1: config index 1 descriptor too short (expected 65535, got 1289)
[  676.482714][   T23] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  676.506827][   T23] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  676.519533][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3455'.
[  676.540880][   T23] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  676.669645][   T23] usb 4-1: config index 2 descriptor too short (expected 65535, got 1289)
[  676.684361][   T23] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  676.708938][   T23] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  676.909358][   T23] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  677.004781][T16572] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3456'.
[  677.177700][T16548] loop3: detected capacity change from 0 to 2048
[  677.740992][T16577] loop1: detected capacity change from 0 to 512
[  678.974669][T16577] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  678.999613][   T23] usb 4-1: string descriptor 0 read error: -71
[  679.015157][T16577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  679.026004][T16577] System zones: 1-12
[  679.039286][T16577] EXT4-fs (loop1): orphan cleanup on readonly fs
[  679.053851][T16577] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3457: invalid indirect mapped block 12 (level 1)
[  679.086138][T16577] EXT4-fs (loop1): Remounting filesystem read-only
[  679.092895][T16577] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3457: invalid indirect mapped block 2 (level 2)
[  679.113460][T16577] EXT4-fs (loop1): Remounting filesystem read-only
[  679.121445][T16577] EXT4-fs (loop1): 1 truncate cleaned up
[  679.127882][T16577] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none.
[  679.211974][   T23] usb 4-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba
[  679.615262][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.971946][   T23] usb 4-1: rejected 3 configurations due to insufficient available bus power
[  680.018103][   T23] usb 4-1: no configuration chosen from 3 choices
[  680.040434][T16596] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3463'.
[  680.070326][   T23] usb 4-1: USB disconnect, device number 16
[  680.113012][T16596] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3463'.
[  680.161655][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3462'.
[  680.173180][T16597] device syzkaller0 entered promiscuous mode
[  680.359853][T16602] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3465'.
[  680.556160][T16609] loop4: detected capacity change from 0 to 16
[  680.624361][T16609] erofs: (device loop4): mounted with root inode @ nid 36.
[  680.873293][ T4233] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  680.996916][T16619] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[  681.058316][T16619] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36
[  681.073589][  T154] tipc: Left network mode
[  681.149579][T16619] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36
[  681.189838][ T4233] usb 3-1: too many configurations: 203, using maximum allowed: 8
[  681.197393][T16619] erofs: (device loop4): z_erofs_readahead: readahead error at page 14 @ nid 36
[  681.237582][T16619] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36
[  681.279572][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  681.299607][T16619] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  681.304248][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  681.322588][  T154] device ip6gretap0 left promiscuous mode
[  681.334494][T16619] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36
[  681.360797][T16619] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  681.405536][T16624] device syzkaller0 entered promiscuous mode
[  681.420916][T16619] erofs: (device loop4): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  681.456300][T16619] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  681.479505][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  681.502300][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  681.512437][T16619] attempt to access beyond end of device
[  681.512437][T16619] loop4: rw=524288, want=312, limit=16
[  681.557631][T16619] attempt to access beyond end of device
[  681.557631][T16619] loop4: rw=524288, want=1049280, limit=16
[  681.650701][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  681.657277][T16619] attempt to access beyond end of device
[  681.657277][T16619] loop4: rw=524288, want=24, limit=16
[  681.692377][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  681.781867][T16619] attempt to access beyond end of device
[  681.781867][T16619] loop4: rw=524288, want=736, limit=16
[  681.829105][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3477'.
[  681.839694][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  681.858500][T16619] attempt to access beyond end of device
[  681.858500][T16619] loop4: rw=524288, want=776, limit=16
[  681.870917][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  681.969583][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  681.990364][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.099537][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  682.128251][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.249664][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  682.266097][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.372459][ T4233] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  682.389028][ T4233] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.406946][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3477'.
[  682.527491][T16645] loop1: detected capacity change from 0 to 128
[  682.563738][ T4233] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  682.577990][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.586678][ T4233] usb 3-1: Product: syz
[  682.607040][ T4233] usb 3-1: Manufacturer: syz
[  682.620411][ T4233] usb 3-1: SerialNumber: syz
[  682.649495][T16645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  682.706153][T16645] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  682.908129][ T4233] rtl8150 3-1:1.0: couldn't find required endpoints
[  683.066127][ T4233] rtl8150: probe of 3-1:1.0 failed with error -5
[  683.310777][ T1331] usb 3-1: USB disconnect, device number 15
[  683.745402][T16671] device syzkaller0 entered promiscuous mode
[  684.158370][T16681] loop3: detected capacity change from 0 to 2048
[  685.576303][  T154] device hsr_slave_0 left promiscuous mode
[  685.593542][  T154] device hsr_slave_1 left promiscuous mode
[  685.642536][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  685.681965][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  685.755263][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  685.773591][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  685.823762][  T154] device vlan2 left promiscuous mode
[  685.829665][  T154] device geneve0 left promiscuous mode
[  685.836224][  T154] bridge0: port 2(vlan2) entered disabled state
[  685.869813][  T154] device bridge_slave_0 left promiscuous mode
[  685.876423][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  685.906202][  T154] device veth1_macvtap left promiscuous mode
[  685.943496][  T154] device veth0_macvtap left promiscuous mode
[  685.955995][  T154] device veth1_vlan left promiscuous mode
[  685.963288][  T154] device veth0_vlan left promiscuous mode
[  686.025822][T16702] loop3: detected capacity change from 0 to 512
[  686.085320][T16702] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.3495: inode #1: comm syz.3.3495: iget: illegal inode #
[  686.165561][T16702] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.3495: error while reading EA inode 1 err=-117
[  686.245482][T16702] EXT4-fs (loop3): 1 orphan inode deleted
[  686.260661][T16702] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  686.333745][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  686.340188][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  686.389620][T15251] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  686.482306][T15251] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15
[  686.559636][T15251] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15
[  686.824118][T16708] loop5: detected capacity change from 0 to 2048
[  686.864889][T16708] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051
[  686.885133][T16708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  686.925625][  T154] team0 (unregistering): Port device team_slave_1 removed
[  686.992456][  T154] team0 (unregistering): Port device team_slave_0 removed
[  687.046022][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  687.068098][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  687.233343][  T154] bond0 (unregistering): Released all slaves
[  687.488432][T16718] loop1: detected capacity change from 0 to 1024
[  687.604593][T16721] loop2: detected capacity change from 0 to 512
[  687.682564][T16721] EXT4-fs (loop2): 1 truncate cleaned up
[  687.706149][T16722] device syzkaller0 entered promiscuous mode
[  687.713028][T16721] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,sysvgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nodiscard,. Quota mode: none.
[  687.751131][ T4234] hid-generic 0005:4C4A:5505.0009: item fetching failed at offset 0/1
[  687.789611][ T4234] hid-generic: probe of 0005:4C4A:5505.0009 failed with error -22
[  688.726152][T16738] chnl_net:caif_netlink_parms(): no params data found
[  688.857887][T16738] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.909336][T16738] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.917257][T16738] device bridge_slave_0 entered promiscuous mode
[  688.951772][T16738] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.998662][T16738] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.042739][T16738] device bridge_slave_1 entered promiscuous mode
[  689.081568][T16747] device syzkaller0 entered promiscuous mode
[  689.367639][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.396737][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.448516][T16752] device syzkaller0 entered promiscuous mode
[  689.619022][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3515'.
[  689.638414][T16757] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3515'.
[  689.667156][T16738] team0: Port device team_slave_0 added
[  689.708459][T16757] loop4: detected capacity change from 0 to 2048
[  689.717686][T16738] team0: Port device team_slave_1 added
[  689.805608][T16760] device syzkaller0 entered promiscuous mode
[  689.818567][T16762] loop1: detected capacity change from 0 to 2048
[  689.828435][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.846011][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  689.939427][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  689.942258][T16762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  689.986979][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.030072][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.073909][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.139421][T16762] netlink: 'syz.1.3517': attribute type 49 has an invalid length.
[  690.247937][T16762] device ip6gretap0 entered promiscuous mode
[  690.382459][T16738] device hsr_slave_0 entered promiscuous mode
[  690.402961][T16764] loop2: detected capacity change from 0 to 1024
[  690.409538][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  690.446881][T16738] device hsr_slave_1 entered promiscuous mode
[  690.475730][T16738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  690.499316][T16738] Cannot create hsr debugfs directory
[  691.631586][T16776] loop1: detected capacity change from 0 to 128
[  691.719424][   T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  691.738685][T16778] device syzkaller0 entered promiscuous mode
[  691.979445][   T13] usb 5-1: Using ep0 maxpacket: 16
[  692.101787][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.119700][T16784] device syzkaller0 entered promiscuous mode
[  692.136337][   T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.161122][T16788] device syzkaller0 entered promiscuous mode
[  692.167334][   T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  692.201469][   T13] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  692.221706][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.241379][   T13] usb 5-1: config 0 descriptor??
[  692.401364][T16738] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  692.500204][ T1331] Bluetooth: hci0: command 0x041b tx timeout
[  692.523999][T16738] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  692.544819][T16738] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  692.583609][T16798] device syzkaller0 entered promiscuous mode
[  692.631472][T16738] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  692.706305][T16806] bridge0: port 3(vlan2) entered blocking state
[  692.730450][T16806] bridge0: port 3(vlan2) entered disabled state
[  692.731757][   T13] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  692.757325][T16806] device vlan2 entered promiscuous mode
[  692.760888][   T13] microsoft 0003:045E:07DA.000A: unsupported Resolution Multiplier 0
[  692.776677][   T13] microsoft 0003:045E:07DA.000A: implement() called with n (152) > 32! (kworker/0:1)
[  692.777579][T16806] device geneve0 entered promiscuous mode
[  692.939598][   T13] microsoft 0003:045E:07DA.000A: unsupported Resolution Multiplier 0
[  692.948093][   T13] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  692.993055][   T13] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  693.021920][T16738] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.038870][   T13] microsoft 0003:045E:07DA.000A: no inputs found
[  693.056177][   T13] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  693.987807][   T13] usb 5-1: USB disconnect, device number 11
[  694.064854][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  694.090036][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  694.142864][T16738] 8021q: adding VLAN 0 to HW filter on device team0
[  694.173618][T16827] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3530'.
[  694.212544][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  694.221627][T16829] loop5: detected capacity change from 0 to 1024
[  694.231264][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  694.240218][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.247364][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.258293][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  694.276650][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  694.286645][T16826] fido_id[16826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  694.289925][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  694.326144][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.333454][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.359400][T16829] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  694.398680][T16829] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  694.409913][T16829] EXT4-fs error (device loop5): ext4_get_journal_inode:5187: comm syz.5.3531: inode #1: comm syz.5.3531: iget: illegal inode #
[  694.435894][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.458388][T16829] EXT4-fs (loop5): no journal found
[  694.464351][T16829] EXT4-fs (loop5): can't get journal size
[  694.489553][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  694.532636][T16829] EXT4-fs (loop5): failed to initialize system zone (-22)
[  694.548832][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  694.556716][T16829] EXT4-fs (loop5): mount failed
[  694.557903][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  694.569454][   T13] Bluetooth: hci0: command 0x040f tx timeout
[  694.571807][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  694.585208][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  694.594773][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  694.604399][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  694.617058][T16838] device syzkaller0 entered promiscuous mode
[  694.654214][T16738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  694.667858][T16738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  694.708376][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.741495][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  694.764593][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  694.776642][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  694.787863][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  694.820567][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  694.879932][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.940275][T16845] device syzkaller0 entered promiscuous mode
[  695.107250][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.199856][T16856] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  695.211864][T16856] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  695.253178][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  695.265230][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  695.293740][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  695.405643][T16869] bridge0: port 3(vlan2) entered blocking state
[  695.423905][T16869] bridge0: port 3(vlan2) entered disabled state
[  695.440594][T16869] device vlan2 entered promiscuous mode
[  695.448923][T16869] device geneve0 entered promiscuous mode
[  695.793646][  T154] tipc: Left network mode
[  695.921684][T16890] device syzkaller0 entered promiscuous mode
[  695.992960][T16898] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3550'.
[  696.061243][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  696.090723][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  696.203688][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  696.223220][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  696.269499][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  696.278312][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  696.321356][T16738] device veth0_vlan entered promiscuous mode
[  696.342682][T16907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  696.388678][T16907] tipc: Resetting bearer <eth:syzkaller0>
[  696.435940][T16913] device syzkaller0 entered promiscuous mode
[  696.449671][T16913] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  696.525791][T16738] device veth1_vlan entered promiscuous mode
[  696.542718][T16905] tipc: Resetting bearer <eth:syzkaller0>
[  696.558065][T16905] tipc: Disabling bearer <eth:syzkaller0>
[  696.585004][T16923] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3552'.
[  696.649580][ T4233] Bluetooth: hci0: command 0x0419 tx timeout
[  696.686474][T16738] device veth0_macvtap entered promiscuous mode
[  696.711201][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  696.732421][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  696.792229][T16738] device veth1_macvtap entered promiscuous mode
[  696.808573][T16926] loop5: detected capacity change from 0 to 2048
[  696.820552][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  696.832326][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  696.855973][T16928] device syzkaller0 entered promiscuous mode
[  696.938727][T16926] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  696.976923][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  696.988441][T16926] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  697.038124][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.083258][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.096074][T16926] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  697.131973][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.142623][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.153142][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.159381][T15693] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  697.162995][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.163017][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.175310][T16926] EXT4-fs (loop5): This should not happen!! Data will be lost
[  697.175310][T16926] 
[  697.181181][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.181204][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.181228][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  697.233804][T16926] EXT4-fs (loop5): Total free blocks count 0
[  697.242014][T16926] EXT4-fs (loop5): Free/Dirty block details
[  697.247989][T16926] EXT4-fs (loop5): free_blocks=4096
[  697.253303][T16926] EXT4-fs (loop5): dirty_blocks=512
[  697.258516][T16926] EXT4-fs (loop5): Block reservation details
[  697.264562][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.287251][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  697.287881][T16926] EXT4-fs (loop5): i_reserved_data_blocks=32
[  697.309603][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.320150][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.341299][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.356700][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.367883][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.378818][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.388824][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.399503][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.429804][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.442857][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.454166][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  697.465946][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  697.477872][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  697.496737][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  697.510250][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  697.546738][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  697.566477][T15693] usb 2-1: config 0 interface 0 altsetting 89 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  697.587507][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  697.607117][T15693] usb 2-1: config 0 interface 0 altsetting 89 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  697.871512][T16738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  697.887940][T16738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  697.901146][T15693] usb 2-1: config 0 interface 0 has no altsetting 0
[  697.909294][T16738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  697.915401][T15693] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  697.937267][T15693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.939709][T16738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  697.972066][T15693] usb 2-1: config 0 descriptor??
[  697.997065][ T4291] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28
[  697.999729][T16932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  698.025200][ T4291] EXT4-fs (loop5): This should not happen!! Data will be lost
[  698.025200][ T4291] 
[  698.311811][T16966] loop5: detected capacity change from 0 to 128
[  698.351373][T16966] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  698.391125][T16966] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  698.526713][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.555417][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x2
[  698.569923][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x6
[  698.578374][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x0
[  698.578400][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.578443][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x1
[  698.603151][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x0
[  698.611695][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x0
[  698.617119][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  698.627318][T15693] logitech-djreceiver 0003:046D:C539.000B: unknown main item tag 0x3
[  698.678686][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.692266][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.742285][  T154] device hsr_slave_0 left promiscuous mode
[  698.748984][  T154] device hsr_slave_1 left promiscuous mode
[  698.765730][ T4234] usb 2-1: USB disconnect, device number 17
[  698.781125][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  698.793897][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  698.804048][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  698.815513][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  698.824144][  T154] device bridge_slave_1 left promiscuous mode
[  698.830748][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  698.849083][  T154] device bridge_slave_0 left promiscuous mode
[  698.860540][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.882924][  T154] device veth1_macvtap left promiscuous mode
[  698.889264][  T154] device veth0_macvtap left promiscuous mode
[  698.908381][  T154] device veth1_vlan left promiscuous mode
[  698.917338][  T154] device veth0_vlan left promiscuous mode
[  698.919475][ T4233] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  699.170296][ T4233] usb 3-1: Using ep0 maxpacket: 16
[  699.297920][  T154] team0 (unregistering): Port device team_slave_1 removed
[  699.307496][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  699.338320][ T4233] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  699.372660][  T154] team0 (unregistering): Port device team_slave_0 removed
[  699.413003][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  699.429911][ T4233] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  699.439004][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  699.449694][ T4233] usb 3-1: SerialNumber: syz
[  699.467733][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  699.502314][ T4233] usb 3-1: 0:2 : does not exist
[  699.592342][  T154] bond0 (unregistering): Released all slaves
[  699.759643][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  699.899651][ T4233] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  699.944151][ T4233] usb 3-1: USB disconnect, device number 16
[  700.020827][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.160238][T17006] device syzkaller0 entered promiscuous mode
[  700.166626][T17008] loop5: detected capacity change from 0 to 8
[  700.260751][T17006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  700.291796][T17004] tipc: Resetting bearer <eth:syzkaller0>
[  700.342069][T17004] tipc: Disabling bearer <eth:syzkaller0>
[  700.415325][T17017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3571'.
[  700.428961][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3504'.
[  700.759458][ T4234] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  700.812363][T17037] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  700.849383][T17037] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  700.858451][T17044] device syzkaller0 entered promiscuous mode
[  701.139523][ T4234] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  701.147927][ T4234] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  701.202215][ T4234] usb 3-1: config 220 has no interface number 2
[  701.208569][ T4234] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  701.249590][T17061] device syzkaller0 entered promiscuous mode
[  701.256210][ T4234] usb 3-1: config 220 interface 0 has no altsetting 0
[  701.275623][T17061] tipc: Started in network mode
[  701.284164][ T4234] usb 3-1: config 220 interface 76 has no altsetting 0
[  701.295676][T17061] tipc: Node identity 22f2c022556, cluster identity 4711
[  701.303218][ T4234] usb 3-1: config 220 interface 1 has no altsetting 0
[  701.310631][T17061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  701.326408][T17060] tipc: Resetting bearer <eth:syzkaller0>
[  701.360481][T17060] tipc: Disabling bearer <eth:syzkaller0>
[  701.369684][T15693] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  701.489544][ T4234] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  701.523889][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.561265][ T4234] usb 3-1: Product: syz
[  701.609280][ T4234] usb 3-1: Manufacturer: syz
[  701.614004][ T4234] usb 3-1: SerialNumber: syz
[  701.779575][T15693] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.796890][T15693] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  701.851281][T15693] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  701.906894][T15693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.966613][T15693] usb 7-1: config 0 descriptor??
[  701.980938][T17085] device syzkaller0 entered promiscuous mode
[  702.031853][T15693] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  702.987141][T17112] device syzkaller0 entered promiscuous mode
[  703.028075][T17112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  703.068953][T17110] tipc: Resetting bearer <eth:syzkaller0>
[  703.155274][T17110] tipc: Disabling bearer <eth:syzkaller0>
[  703.459678][ T4234] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  703.466254][ T4234] usb 3-1: No valid video chain found.
[  703.501007][ T4234] usb 3-1: selecting invalid altsetting 0
[  703.631199][ T4234] usb 3-1: selecting invalid altsetting 0
[  703.637095][ T4234] usbtest: probe of 3-1:220.1 failed with error -22
[  703.711952][ T4234] usb 3-1: USB disconnect, device number 17
[  704.088430][T15693] usb 7-1: USB disconnect, device number 2
[  704.243363][T17158] device syzkaller0 entered promiscuous mode
[  704.269436][T17161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3609'.
[  704.276051][T17160] bridge0: port 3(vlan2) entered blocking state
[  704.314645][T17160] bridge0: port 3(vlan2) entered disabled state
[  704.371362][T17160] device vlan2 entered promiscuous mode
[  704.376979][T17160] device geneve0 entered promiscuous mode
[  704.428014][T17158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  704.451010][T17155] tipc: Resetting bearer <eth:syzkaller0>
[  704.507155][T17155] tipc: Disabling bearer <eth:syzkaller0>
[  704.602545][T17181] loop5: detected capacity change from 0 to 4096
[  704.679386][   T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  704.751181][T17181] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  704.775900][   T26] audit: type=1804 audit(1785573765.518:141): pid=17181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3614" name=2F6E6577726F6F742F38352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop5" ino=18 res=1 errno=0
[  705.089605][   T23] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  705.107651][   T23] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  705.132894][   T23] usb 2-1: config 220 has no interface number 2
[  705.148368][   T23] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  705.208179][T17198] device syzkaller0 entered promiscuous mode
[  705.219052][   T23] usb 2-1: config 220 interface 0 has no altsetting 0
[  705.245427][   T23] usb 2-1: config 220 interface 76 has no altsetting 0
[  705.266726][   T23] usb 2-1: config 220 interface 1 has no altsetting 0
[  705.469668][   T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  705.480720][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.488985][   T23] usb 2-1: Product: syz
[  705.509339][   T23] usb 2-1: Manufacturer: syz
[  705.516619][   T23] usb 2-1: SerialNumber: syz
[  705.620762][T17204] device syzkaller0 entered promiscuous mode
[  705.961038][T17210] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  705.995897][T17210] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  706.030361][T17221] device syzkaller0 entered promiscuous mode
[  706.066873][T17221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  706.122935][T17219] tipc: Resetting bearer <eth:syzkaller0>
[  706.160374][T17219] tipc: Disabling bearer <eth:syzkaller0>
[  706.327131][T17232] loop5: detected capacity change from 0 to 256
[  706.412595][T17232] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d)
[  706.435171][T17238] loop2: detected capacity change from 0 to 1024
[  706.486666][T17238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  706.673053][T17246] device syzkaller0 entered promiscuous mode
[  707.038596][T17262] loop2: detected capacity change from 0 to 512
[  707.187291][T17262] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  707.230930][T17262] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  707.311870][T17262] EXT4-fs (loop2): orphan cleanup on readonly fs
[  707.359668][   T23] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  707.367482][   T23] usb 2-1: No valid video chain found.
[  707.380073][   T23] usb 2-1: selecting invalid altsetting 0
[  707.431787][T17262] EXT4-fs (loop2): 1 truncate cleaned up
[  707.499590][T17262] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  707.500538][   T23] usb 2-1: selecting invalid altsetting 0
[  707.536456][   T23] usbtest: probe of 2-1:220.1 failed with error -22
[  707.592887][   T23] usb 2-1: USB disconnect, device number 18
[  708.054289][T17310] device syzkaller0 entered promiscuous mode
[  708.380831][T17320] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3651'.
[  708.395218][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3652'.
[  708.681322][T17343] loop1: detected capacity change from 0 to 512
[  708.719466][ T2305] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  708.748841][T17343] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  708.796700][T17343] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  708.812418][T17343] EXT4-fs (loop1): orphan cleanup on readonly fs
[  708.835302][T17343] EXT4-fs (loop1): 1 truncate cleaned up
[  708.854985][T17343] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  709.098965][ T2305] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  709.126810][ T2305] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  709.207998][ T2305] usb 6-1: config 220 has no interface number 2
[  709.229387][ T2305] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  709.297255][ T2305] usb 6-1: config 220 interface 0 has no altsetting 0
[  709.328549][ T2305] usb 6-1: config 220 interface 76 has no altsetting 0
[  709.358924][ T2305] usb 6-1: config 220 interface 1 has no altsetting 0
[  709.561318][ T2305] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  709.590969][ T2305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.629336][ T2305] usb 6-1: Product: syz
[  709.643947][ T2305] usb 6-1: Manufacturer: syz
[  709.648817][ T2305] usb 6-1: SerialNumber: syz
[  711.399647][ T2305] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  711.406058][ T2305] usb 6-1: No valid video chain found.
[  711.437304][ T2305] usb 6-1: selecting invalid altsetting 0
[  711.746792][T17485] 
[  711.750681][ T2305] usb 6-1: selecting invalid altsetting 0
[  711.766680][ T2305] usbtest: probe of 6-1:220.1 failed with error -22
[  711.776840][T17485] =============================
[  711.796504][T17485] WARNING: suspicious RCU usage
[  711.806440][ T2305] usb 6-1: USB disconnect, device number 4
[  711.832838][T17485] syzkaller #0 Not tainted
[  711.841960][T17485] -----------------------------
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  711.859599][T17485] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[  711.878934][T17485] 
[  711.878934][T17485] other info that might help us debug this:
[  711.878934][T17485] 
[  711.909821][T17485] 
[  711.909821][T17485] rcu_scheduler_active = 2, debug_locks = 1
[  711.984444][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3710'.
[  712.019135][T17485] 1 lock held by syz.2.3707/17485:
[  712.090963][T17485]  #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  712.165758][T17485] 
[  712.165758][T17485] stack backtrace:
[  712.176944][T17485] CPU: 0 PID: 17485 Comm: syz.2.3707 Not tainted syzkaller #0
[  712.184560][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.195339][T17485] Call Trace:
[  712.199145][T17485]  <TASK>
[  712.202149][T17485]  dump_stack_lvl+0x188/0x250
[  712.207085][T17485]  ? load_image+0x410/0x410
[  712.211652][T17485]  ? show_regs_print_info+0x20/0x20
[  712.217014][T17485]  ? print_tainted+0x148/0x170
[  712.221962][T17485]  ? lockdep_rcu_suspicious+0x110/0x180
[  712.227645][T17485]  get_callchain_entry+0x2a5/0x3b0
[  712.232965][T17485]  get_perf_callchain+0xab/0x460
[  712.237960][T17485]  ? put_callchain_entry+0xb0/0xb0
[  712.243119][T17485]  ? mark_lock+0x94/0x320
[  712.247510][T17485]  __bpf_get_stack+0x2db/0x530
[  712.252390][T17485]  ? stack_map_get_build_id_offset+0x860/0x860
[  712.258583][T17485]  ? __cant_sleep+0x220/0x220
[  712.263325][T17485]  ? bpf_prog_d43750871481577d+0x3d/0x43c
[  712.269057][T17485]  bpf_get_stack_raw_tp+0x189/0x1c0
[  712.274300][T17485]  bpf_prog_d43750871481577d+0x3d/0x43c
[  712.280003][T17485]  bpf_prog_run_pin_on_cpu+0xa4/0x140
[  712.285504][T17485]  bpf_prog_test_run_syscall+0x361/0x500
[  712.291185][T17485]  ? sock_gen_cookie+0x60/0x60
[  712.295978][T17485]  ? sock_gen_cookie+0x60/0x60
[  712.300758][T17485]  bpf_prog_test_run+0x31c/0x390
[  712.305766][T17485]  __sys_bpf+0x5a5/0x6f0
[  712.310014][T17485]  ? bpf_link_show_fdinfo+0x380/0x380
[  712.315405][T17485]  __x64_sys_bpf+0x78/0x90
[  712.319826][T17485]  do_syscall_64+0x4c/0xa0
[  712.324269][T17485]  ? clear_bhb_loop+0x30/0x80
[  712.329009][T17485]  ? clear_bhb_loop+0x30/0x80
[  712.333712][T17485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  712.339613][T17485] RIP: 0033:0x7f3a15d37019
[  712.344072][T17485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.363844][T17485] RSP: 002b:00007f3a13f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  712.372401][T17485] RAX: ffffffffffffffda RBX: 00007f3a15fbefa0 RCX: 00007f3a15d37019
[  712.380381][T17485] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[  712.388365][T17485] RBP: 00007f3a15dce00c R08: 0000000000000000 R09: 0000000000000000
[  712.396350][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.404333][T17485] R13: 00007f3a15fbf038 R14: 00007f3a15fbefa0 R15: 00007ffef163f1c8
[  712.412331][T17485]  </TASK>
[  712.499315][ T4234] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  712.575782][T17485] 
[  712.578181][T17485] =============================
[  712.589139][T17485] WARNING: suspicious RCU usage
[  712.604212][T17485] syzkaller #0 Not tainted
[  712.608687][T17485] -----------------------------
[  712.617940][T17485] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage!
[  712.642132][T17485] 
[  712.642132][T17485] other info that might help us debug this:
[  712.642132][T17485] 
[  712.652953][T17485] 
[  712.652953][T17485] rcu_scheduler_active = 2, debug_locks = 1
[  712.666926][T17485] 1 lock held by syz.2.3707/17485:
[  712.678940][T17485]  #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  712.691541][T17485] 
[  712.691541][T17485] stack backtrace:
[  712.697513][T17485] CPU: 0 PID: 17485 Comm: syz.2.3707 Not tainted syzkaller #0
[  712.705041][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  712.715232][T17485] Call Trace:
[  712.718550][T17485]  <TASK>
[  712.721518][T17485]  dump_stack_lvl+0x188/0x250
[  712.726239][T17485]  ? load_image+0x410/0x410
[  712.730777][T17485]  ? show_regs_print_info+0x20/0x20
[  712.735989][T17485]  ? lockdep_rcu_suspicious+0x110/0x180
[  712.741541][T17485]  perf_callchain_kernel+0x625/0x760
[  712.746917][T17485]  ? load_image+0x410/0x410
[  712.751569][T17485]  ? show_regs_print_info+0x20/0x20
[  712.756828][T17485]  ? print_tainted+0x148/0x170
[  712.761599][T17485]  ? arch_perf_update_userpage+0x3c0/0x3c0
[  712.767414][T17485]  ? get_callchain_entry+0x181/0x3b0
[  712.772815][T17485]  get_perf_callchain+0x356/0x460
[  712.777878][T17485]  ? put_callchain_entry+0xb0/0xb0
[  712.783026][T17485]  ? mark_lock+0x94/0x320
[  712.787532][T17485]  __bpf_get_stack+0x2db/0x530
[  712.792342][T17485]  ? stack_map_get_build_id_offset+0x860/0x860
[  712.798530][T17485]  ? __cant_sleep+0x220/0x220
[  712.803207][T17485]  ? bpf_prog_d43750871481577d+0x3d/0x43c
[  712.808949][T17485]  bpf_get_stack_raw_tp+0x189/0x1c0
[  712.814379][T17485]  bpf_prog_d43750871481577d+0x3d/0x43c
[  712.819937][T17485]  bpf_prog_run_pin_on_cpu+0xa4/0x140
[  712.825315][T17485]  bpf_prog_test_run_syscall+0x361/0x500
[  712.830967][T17485]  ? sock_gen_cookie+0x60/0x60
[  712.835855][T17485]  ? sock_gen_cookie+0x60/0x60
[  712.840640][T17485]  bpf_prog_test_run+0x31c/0x390
[  712.845610][T17485]  __sys_bpf+0x5a5/0x6f0
[  712.849981][T17485]  ? bpf_link_show_fdinfo+0x380/0x380
[  712.855360][T17485]  __x64_sys_bpf+0x78/0x90
[  712.859808][T17485]  do_syscall_64+0x4c/0xa0
[  712.864223][T17485]  ? clear_bhb_loop+0x30/0x80
[  712.868892][T17485]  ? clear_bhb_loop+0x30/0x80
[  712.873581][T17485]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  712.879485][T17485] RIP: 0033:0x7f3a15d37019
[  712.883895][T17485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  712.903495][T17485] RSP: 002b:00007f3a13f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  712.912018][T17485] RAX: ffffffffffffffda RBX: 00007f3a15fbefa0 RCX: 00007f3a15d37019
[  712.919996][T17485] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[  712.927962][T17485] RBP: 00007f3a15dce00c R08: 0000000000000000 R09: 0000000000000000
[  712.935945][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  712.943938][T17485] R13: 00007f3a15fbf038 R14: 00007f3a15fbefa0 R15: 00007ffef163f1c8
[  712.951943][T17485]  </TASK>
[  713.242087][ T4289] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.351775][ T4289] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.413384][ T4289] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.478255][ T4289] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.378443][ T4289] device hsr_slave_0 left promiscuous mode
[  714.385130][ T4289] device hsr_slave_1 left promiscuous mode
[  714.395433][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  714.407194][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  714.421894][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  714.435901][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  714.445595][ T4289] device vlan2 left promiscuous mode
[  714.451438][ T4289] device geneve0 left promiscuous mode
[  714.457152][ T4289] bridge0: port 3(vlan2) entered disabled state
[  714.465549][ T4289] device bridge_slave_1 left promiscuous mode
[  714.478279][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.493904][ T4289] device bridge_slave_0 left promiscuous mode
[  714.512507][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.536400][ T4289] device veth1_macvtap left promiscuous mode
[  714.549598][ T4289] device veth0_macvtap left promiscuous mode
[  714.555719][ T4289] device veth1_vlan left promiscuous mode
[  714.572894][ T4289] device veth0_vlan left promiscuous mode
[  714.763235][ T4289] team0 (unregistering): Port device team_slave_1 removed
[  714.776959][ T4289] team0 (unregistering): Port device team_slave_0 removed
[  714.790113][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.809196][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.880048][ T4289] bond0 (unregistering): Released all slaves
[  716.957581][ T4289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.044769][ T4289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.105779][ T4289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.166441][ T4289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.295056][ T4289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.357489][ T4289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.405767][ T4289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.465949][ T4289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  717.716562][ T4289] tipc: Left network mode
[  717.749710][ T4289] tipc: Left network mode
[  718.684664][ T4289] device hsr_slave_0 left promiscuous mode
[  718.698019][ T4289] device hsr_slave_1 left promiscuous mode
[  718.705765][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  718.723240][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  718.740274][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  718.747899][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  718.764491][ T4289] device vlan2 left promiscuous mode
[  718.772757][ T4289] device geneve0 left promiscuous mode
[  718.778503][ T4289] bridge0: port 3(vlan2) entered disabled state
[  718.791827][ T4289] device bridge_slave_1 left promiscuous mode
[  718.798105][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.815017][ T4289] device bridge_slave_0 left promiscuous mode
[  718.824591][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.844267][ T4289] device hsr_slave_0 left promiscuous mode
[  718.859897][ T4289] device hsr_slave_1 left promiscuous mode
[  718.866501][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  718.882307][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0
[  718.895510][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  718.907599][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  718.916291][ T4289] device vlan2 left promiscuous mode
[  718.921834][ T4289] device geneve0 left promiscuous mode
[  718.927641][ T4289] bridge0: port 3(vlan2) entered disabled state
[  718.936035][ T4289] device bridge_slave_1 left promiscuous mode
[  718.943638][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.954412][ T4289] device bridge_slave_0 left promiscuous mode
[  718.962213][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.976932][ T4289] device veth1_macvtap left promiscuous mode
[  718.983376][ T4289] device veth0_macvtap left promiscuous mode
[  718.989501][ T4289] device veth1_vlan left promiscuous mode
[  718.995266][ T4289] device veth0_vlan left promiscuous mode
[  719.002615][ T4289] device veth1_macvtap left promiscuous mode
[  719.008804][ T4289] device veth0_macvtap left promiscuous mode
[  719.015121][ T4289] device veth1_vlan left promiscuous mode
[  719.021323][ T4289] device veth0_vlan left promiscuous mode
[  719.242911][ T4289] team0 (unregistering): Port device team_slave_1 removed
[  719.258183][ T4289] team0 (unregistering): Port device team_slave_0 removed
[  719.271736][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.285387][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.349882][ T4289] bond0 (unregistering): Released all slaves
[  719.461720][ T4289] team0 (unregistering): Port device team_slave_1 removed
[  719.475412][ T4289] team0 (unregistering): Port device team_slave_0 removed
[  719.488227][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.502985][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.567391][ T4289] bond0 (unregistering): Released all slaves