last executing test programs:

1m40.959463026s ago: executing program 1 (id=538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000200))

1m40.397830464s ago: executing program 1 (id=540):
stat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0191, 0x6000, 0xf000, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3}, {0x3000, 0xddccb000, 0xe, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x1}, {0x0, 0x30000, 0x18, 0xe, 0x0, 0x4, 0x7f, 0x4, 0x80, 0xe, 0x2a, 0xa}, {0xffffffff, 0x8000000, 0x1, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x41000, 0xd, 0x6, 0x70, 0x80, 0x0, 0x1, 0xfd, 0x1c, 0x7, 0xa8}, {0x30000, 0x3000, 0x0, 0x4, 0x0, 0x8, 0x2, 0x7f, 0x6, 0xfc, 0x86, 0x1}, {0xeeee8000, 0x3000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x20}, {0xd000, 0x70000, 0x4, 0xd, 0xfe, 0x10, 0x4, 0xe, 0xfe, 0x10}, {0x5000, 0xff}, {0x1, 0x2}, 0x3003d, 0x0, 0x1000, 0x0, 0x1000000000000000, 0x9101, 0x900, [0x4, 0x800000000, 0x2, 0x4]})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="115c3927af"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m38.116762599s ago: executing program 1 (id=544):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x83})

1m37.763040801s ago: executing program 1 (id=546):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xe80, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000240)={0x5, 0x34, 0x1, 0x1b, 0xa, 0x2, 0x1, 0x158, 0x1})

1m37.508524369s ago: executing program 1 (id=548):
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_usb_disconnect(0xffffffffffffffff)
read$eventfd(r0, &(0x7f0000000080), 0x8)

1m36.497349022s ago: executing program 1 (id=555):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0)

1m21.219387764s ago: executing program 32 (id=555):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x28008a}], 0x4000054, 0x40000022, 0x0)

1m21.181607805s ago: executing program 3 (id=598):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x40000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "946be22aa236030a", "340053f6c256b016d6939bcd95a609cf", "686c211a", "4fc3fb34160497af"}, 0x28)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x37, 0x2, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m18.87487929s ago: executing program 3 (id=603):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)

1m15.430069123s ago: executing program 3 (id=610):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x40000001, 0x8, 0x80000000, 0x2, 0x5}, {0x80000019, 0x5, 0x8001, 0x6, 0x10000}]})

1m14.485424995s ago: executing program 3 (id=611):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0x1000, 0x1000, &(0x7f0000ff3000/0x1000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff)

1m13.873382485s ago: executing program 3 (id=614):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f00000004c0)=[@request_death, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/48, 0x0, 0x0, 0x27}, @fd}, &(0x7f0000000480)}}, @request_death], 0x24, 0x0, 0x0})

1m13.468808738s ago: executing program 3 (id=616):
unshare(0x60000600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}})
write$input_event(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

56.934517451s ago: executing program 33 (id=616):
unshare(0x60000600)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @multicast1, @empty}}}})
write$input_event(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)

26.51210383s ago: executing program 2 (id=699):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
recvfrom(r2, &(0x7f0000000080)=""/60, 0x3c, 0x101, 0x0, 0x0)

25.650875338s ago: executing program 0 (id=700):
userfaultfd(0x801)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x10000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_usb_connect(0x5, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385353608f20446b76e8e01022601090259000104f2000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

22.380694645s ago: executing program 2 (id=702):
openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x26e1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0})

19.128590132s ago: executing program 2 (id=704):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x9, 0x0, {0x8000}}, 0x18)
socket(0x10, 0x803, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x3, 0x300)
socket$igmp(0x2, 0x3, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x5, 0x0, 0x804, 0x0, 0x2, 0x7}, 0x0, &(0x7f0000000240)={0x21, 0x0, 0x0, 0x0, 0x6, 0x3, 0xea9, 0x6}, 0x0, 0x0)
openat$dlm_control(0xffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1)
write$cgroup_int(r1, &(0x7f0000000040)=0x1000000000044006, 0x12)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close(r2)

18.779704233s ago: executing program 5 (id=705):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60880, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000500))
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

18.771336203s ago: executing program 4 (id=706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"50725ed914d2683ba1513232a3f66c944f12"}}}}, 0x48)

18.657688647s ago: executing program 0 (id=707):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)={0x34, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x34}}, 0x20000000)

17.550136894s ago: executing program 6 (id=708):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f0000000640)=""/248, 0xf8, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

17.429164678s ago: executing program 0 (id=709):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x7}, 0x1c)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)

17.179804816s ago: executing program 6 (id=710):
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x40000000788, 0x80000000005, 0x183, 0xfffffffefffffffe, 0x0, 0xee, 0x80000004, 0x800, 0x1000045, 0xfffc, 0x8, 0x1, 0x6, 0x0, 0x241d], 0x16000, 0x3c4210})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)

16.14659387s ago: executing program 5 (id=711):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffff4)
gettid()
timer_create(0x0, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

15.174893662s ago: executing program 4 (id=712):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
recvfrom(r2, &(0x7f0000000080)=""/60, 0x3c, 0x101, 0x0, 0x0)

14.577725581s ago: executing program 5 (id=713):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)="0a000001"})

14.29970366s ago: executing program 5 (id=714):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13.913037483s ago: executing program 0 (id=715):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
getpgrp(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ftruncate(r1, 0x6000809)
sendfile(r0, r1, 0x0, 0x7ffff004)

12.947846014s ago: executing program 4 (id=716):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0)

11.636609798s ago: executing program 4 (id=717):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x1, 0x4000, 0x4000)

11.451146644s ago: executing program 2 (id=718):
socket(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x100008b}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0)
syz_open_procfs(0x0, &(0x7f0000002600)='net/dev_mcast\x00')
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0)

9.626329604s ago: executing program 6 (id=719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000080)=0xffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f00000003c0)={{0x7, 0x10}, {0x9, 0xc}, 0xfffffffd, 0x4, 0x3})
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
r6 = socket(0x400000000010, 0x3, 0x0)
write(r6, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cf30203001a000000", 0x33a)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8)

9.420656601s ago: executing program 2 (id=720):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000004000000000000feffffff181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000318d4391d18933debd4d3d850000000e91000000000000b70200000000806e1b000000840000002804000000000000950000000000000010e8ebf4ac65302414719eae78ce233cf0329aa2ac4a76653694d419b8f800a8080ed427ea813d9edcfc26429b1adade11c973793819ffbe26f6affad5a3ae531b6e8a79791684"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket(0x10, 0x3, 0x0)
add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe)
add_key$user(0x0, 0x0, &(0x7f00000009c0), 0x0, 0xfffffffffffffffe)
recvmmsg(r5, &(0x7f0000005c80), 0x0, 0x10122, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6})

8.896622587s ago: executing program 0 (id=721):
socket$inet6(0xa, 0x3, 0x3c)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011)
openat(0xffffffffffffff9c, 0x0, 0x0, 0xd5)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0xfffd, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in6=@loopback, 0x6, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
connect$inet6(r3, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x800)

5.17790706s ago: executing program 5 (id=722):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x8, 0x8})
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

4.995955236s ago: executing program 6 (id=723):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x6020400)
sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x40040)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x224, 0x0, 0x0, 0x148, 0x0, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x8, 0x9, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xbb04, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x280)

4.783836653s ago: executing program 6 (id=724):
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = add_key$fscrypt_v1(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @auto=[0x66, 0x54, 0x64, 0x37, 0x34, 0x36, 0x62, 0x34, 0x64, 0x64, 0x32, 0x6d, 0x63, 0x37, 0x64, 0x39]}, 0x0, 0x0, r1)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r2, 0x406, r2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
syz_pidfd_open(0x0, 0x0)
syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x6, @link_local, 'wlan1\x00'}}, 0x1e)

2.766621159s ago: executing program 2 (id=725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=<r1=>0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80290002800c000180080021"], 0x68}}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="92b4c196bf63777a3a801aa21e286ad476bf810cb5692978ea4c1464cf3aeb6b595de8fff4b3b81f11d33c4d2348dac70acc2cda7bc20bc53cb36809d013dae758e26ed1cfa61a52b9489a2723410e832250e2", @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="a1995912ffe552790b5ef12541acdfff7a97082a1d1f87804183377b30181a0dfa6d6b552d3c37cf8d8ca344f641a9e6cc7942a336370c064f3229094de5a1ad438cb030067259a5f4c84db63e3812f5cc060459fba2368229b5fb157aa62dbeecae88c0ada6510bc8734cfaf7e20fc543710143ffa609d0771abd9b22f22c01c7175b83971cbe7dbd1d30249f9a05efd876f75297171720d5adfe47374ec1190dd302a5beb008d13b5779700658f12990b433d5cf436e9bbc940761efd274ce712869829a0511a30fe5043186ddad8a65e3", @ANYRES64=r2], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x96})
io_setup(0x3, &(0x7f0000008240))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
set_mempolicy(0x3, 0x0, 0xf)
sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x2000400c)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, 0x0, 0x0, 0x40400e0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10)

1.897304817s ago: executing program 4 (id=726):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
recvfrom(r2, &(0x7f0000000080)=""/60, 0x3c, 0x101, 0x0, 0x0)

1.724899933s ago: executing program 4 (id=727):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$eJzs20tsVFUcx/Hff+50mA4Vy8MChkATTawg0AcWSE0MDxtNeGihGomPVDrFSh+kU5QSEJbqzgVLl25duDJuDYlL48JgDAsTZONmVuIOc+7c1wylMyPTGUq/HwLn3jP/O5xz/nPnnDOZEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkA6/dqi3z1rdCgAA0EwnTo30DjD/AwCwqpxm/w8AALCamDz9IdPu80U77p+XZI9Nzly8NHp0ePHL2k2mlDw/3v3N9vUP7Ht5cP+BsFz6+kbbqpOnTh/qPjI7fWEuXyjkx7tHZybPzo7na36GR72+0k5/ALqnz18cn5godPfvGSh7+FLn3TVruzqHBt8/kgljR48OD59KxKTb/vf//oCHrfAz8vSiTJ/88J2dkJTSo49FldfOcmv3O7HT78To0WG/I1OTYzPz7kFLBVGp8jHJhGPUhFw8kpTk2mWZxuzZ2uTpR5kO7y3aSUleOA67/A+Ga2pPK6Td1lVSj1ZAzh5ja+TpQ5lu7u3Um8G4+vnPSFda3Tgsu3Rw/89a0d7y3w/c/eTeNo+93f3GzMRsItZSwR210ueHZnrM35uy8nTSv+OLNqIdrW4OmqxdnqZlynz9qb+ukL8ufXpo//YdB5MrjM1VnsfF7glurlrm5LZg6WAp96fx/UJtsubpL5nu/Z71z3vCOUC6fn+pC/9sSvOw3MzTlEz/Xi2aVexLvcT+PrLS5/7lbX979sjshYW5yXMfzy/6eC576KPC/NzY2cUfLu1dvWRNtX1spVR9W7KclXZ8X3xWjK4L9gBPlc7i1nx7JX4t9FSUoeTrp5bjmnexdayjXJvMPN2RaeKDLaV5Rrm6x2Y1cPkflqlQ/MXCTAf5T5fOEvl/JR6/rJWXET+360qfa4Vria1nNj2sfjny79rk8v+uTIf/2RJ8plHKv1cR6+K6ZHrvxrYgLpVxcemwO6VnnJicyve62Psybfg5jJUfmwtiN8axfS62INOXN8tj1waxm+LYfhd7S6bbvy0e+0wcO+BiF1y+bneHsTkXuz2I7Ypj95ydnRqvNqwu//0yvXPtdQv7/ND8J+7/6xVl5IGcL33cqPx3JuquB3k9E+Q/XSX/X8m08Pe2sN/+2Icvq/X+v3H+3Vr5+xvlseGGckMc21drt1rN5X+9THdfvRX1OehbcBpnKJn/Z9PlZTSuLcr/+kRdZ9CuTJ1jsRoVFi6fH5uays9xwAEHHEQHrX5nQjO4+X/EzeqDnoXrmGD+7yidxSume5/H8/9QRRlp0fy/IVE3FKxa2tJSdn76QttmKVtYuLx7cnrsXP5cfmZg32Bv/8F9vQMH2jLh4i4+qnnsngQu/7tkuvrTr9E+pnz9t/j6P1dRRlqU/43JPpWta2oeilXJ5b9DpsE7t6L95lLr/3D/3/NceRndfy3K/6ZEXWfQro46xwIAAAAAAAAAAAAAAAAAVpKceXpepksjL1n4G6K0tE5Vvv83XlFGGv/9r9IPk6t8/6srUTfewN812BIxdQ00AAAAAAAAAABAk6Tk6RuZXlDRrrmKDul4ssQT7b8AAAD//44dR5s=")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.659088965s ago: executing program 5 (id=728):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
userfaultfd(0x801)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6c", 0x2d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x2, 0x0, 0x1000000})
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x13, 0x0, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, 0x0)
io_uring_setup(0x1694, &(0x7f0000000000))
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)

372.488378ms ago: executing program 0 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0xfb1, 0x4)
sendto$inet6(r4, 0x0, 0x2a, 0x40, &(0x7f0000001080)={0xa, 0x4e21, 0x3c, @empty, 0x403}, 0x1c)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x7fffffff, 0x6, 0x2, 0x7c1e92a2, 0x13, "26df5592186bff9dd233efecf528ffc2a6e099"})
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffffff, 0x4}, 0x38)
accept(r3, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x4003, 0x1, 0x2})
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f0000000000)={0x0, 0x2, 0x83})

0s ago: executing program 6 (id=730):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
socket(0x2d, 0x2, 0x0)
syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x80000000, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x100000, 0xa, 0x80000006, 0x3ff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

mily 0 port 6081 - 0
[   72.574224][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.590579][ T4198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.603230][ T4198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.611962][ T4198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.623773][ T4198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.640496][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.651023][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.661974][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.692489][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.704630][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.726318][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.753111][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.760825][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.777892][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.808871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.880236][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.892551][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.919962][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.921188][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.948660][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.959348][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.973980][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   72.999245][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.039309][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.093348][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.101218][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.146273][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.193542][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.221498][ T3064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.233008][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.240734][ T3064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.260372][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.269557][ T4276] Zero length message leads to an empty skb
[   73.301896][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.471624][ T4282] loop3: detected capacity change from 0 to 128
[   73.623102][ T4282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   73.703500][ T4282] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   73.996656][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[   74.003946][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   74.012973][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   74.021088][ T4230] Bluetooth: hci4: command 0x0419 tx timeout
[   74.029355][ T4230] Bluetooth: hci2: command 0x0419 tx timeout
[   74.069512][ T4302] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6)
[   75.343501][ T4273] loop0: detected capacity change from 0 to 32768
[   75.421638][ T4273] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4273)
[   75.506424][ T4273] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   75.536884][ T4273] BTRFS info (device loop0): using free space tree
[   75.544238][ T4273] BTRFS info (device loop0): has skinny extents
[   75.621868][ T4321] loop2: detected capacity change from 0 to 512
[   75.815648][ T4321] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   75.863600][ T4273] BTRFS info (device loop0): enabling ssd optimizations
[   75.877476][ T4321] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.532870][ T4312] loop3: detected capacity change from 0 to 32768
[   76.647050][ T4312] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.14 (4312)
[   76.734507][ T4312] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   76.772842][ T4312] BTRFS info (device loop3): setting nodatasum
[   76.808994][ T4315] loop1: detected capacity change from 0 to 40427
[   76.833058][ T4312] BTRFS info (device loop3): force zlib compression, level 3
[   76.841569][ T4312] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[   76.931935][ T4312] BTRFS info (device loop3): use lzo compression, level 0
[   76.968022][ T4315] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.009362][ T4312] BTRFS info (device loop3): turning on flush-on-commit
[   77.072786][ T4312] BTRFS info (device loop3): enabling auto defrag
[   77.109061][ T4312] BTRFS info (device loop3): max_inline at 4096
[   77.148670][ T4312] BTRFS info (device loop3): using free space tree
[   77.186532][ T4312] BTRFS info (device loop3): has skinny extents
[   77.305718][ T4315] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[   77.361654][ T4315] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.412841][ T4341] loop2: detected capacity change from 0 to 32768
[   77.536326][ T4315] =======================================================
[   77.536326][ T4315] WARNING: The mand mount option has been deprecated and
[   77.536326][ T4315]          and is ignored by this kernel. Remove the mand
[   77.536326][ T4315]          option from the mount to silence this warning.
[   77.536326][ T4315] =======================================================
[   77.614863][ T4312] BTRFS info (device loop3): enabling ssd optimizations
[   77.694285][ T4341] XFS (loop2): Mounting V5 Filesystem
[   77.843865][ T4341] XFS (loop2): Ending clean mount
[   78.408040][ T4359] loop4: detected capacity change from 0 to 32768
[   78.586641][ T4359] XFS (loop4): Mounting V5 Filesystem
[   78.650515][ T4395] ODEBUG: Out of memory. ODEBUG disabled
[   78.667747][ T4198] XFS (loop2): Unmounting Filesystem
[   78.894363][ T4359] XFS (loop4): Ending clean mount
[   79.027053][ T4387] loop0: detected capacity change from 0 to 32768
[   79.143752][ T4387] XFS: attr2 mount option is deprecated.
[   79.163609][   T26] audit: type=1804 audit(1780514519.302:2): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.19" name="/newroot/3/file1/file1" dev="loop4" ino=4422 res=1 errno=0
[   79.236839][   T26] audit: type=1804 audit(1780514519.372:3): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.19" name="/newroot/3/file1/file1" dev="loop4" ino=4422 res=1 errno=0
[   79.335029][   T26] audit: type=1804 audit(1780514519.472:4): pid=4359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.19" name="/newroot/3/file1/file1" dev="loop4" ino=4422 res=1 errno=0
[   79.364786][ T4387] XFS (loop0): Mounting V5 Filesystem
[   79.426344][ T4398] loop1: detected capacity change from 0 to 40427
[   79.440912][ T4387] XFS (loop0): Ending clean mount
[   79.452806][ T4387] XFS (loop0): Quotacheck needed: Please wait.
[   79.516535][ T4398] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[   79.522706][ T4387] XFS (loop0): Quotacheck: Done.
[   79.554570][ T4189] XFS (loop4): Unmounting Filesystem
[   79.584588][ T4398] F2FS-fs (loop1): invalid crc value
[   79.639290][ T4398] F2FS-fs (loop1): Found nat_bits in checkpoint
[   79.746520][ T4192] XFS (loop0): Unmounting Filesystem
[   79.783630][ T4421] loop2: detected capacity change from 0 to 64
[   79.941805][ T4398] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.237432][ T4426] loop2: detected capacity change from 0 to 1024
[   80.252826][ T4196] attempt to access beyond end of device
[   80.252826][ T4196] loop1: rw=2049, want=45104, limit=40427
[   80.302707][ T4426] EXT4-fs (loop2): Ignoring removed bh option
[   80.383626][ T4426] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,usrquota,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,nogrpid,. Quota mode: writeback.
[   80.572871][   T26] audit: type=1800 audit(1780514520.712:5): pid=4426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="file1" dev="loop2" ino=15 res=0 errno=0
[   80.664154][ T4426] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.859282][ T4423] loop3: detected capacity change from 0 to 32768
[   80.967882][ T4423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.25 (4423)
[   80.993521][ T4440] loop1: detected capacity change from 0 to 1024
[   81.013501][ T4423] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   81.073973][ T4423] BTRFS info (device loop3): setting nodatasum
[   81.104144][ T4423] BTRFS info (device loop3): force zlib compression, level 3
[   81.111598][ T4423] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[   81.180972][ T4423] BTRFS info (device loop3): use lzo compression, level 0
[   81.231823][ T4423] BTRFS info (device loop3): turning on flush-on-commit
[   81.272968][ T4423] BTRFS info (device loop3): enabling auto defrag
[   81.313092][ T4423] BTRFS info (device loop3): max_inline at 4096
[   81.319563][ T4423] BTRFS info (device loop3): using free space tree
[   81.349232][ T4428] loop4: detected capacity change from 0 to 32768
[   81.363170][ T4423] BTRFS info (device loop3): has skinny extents
[   81.378952][ T4428] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.23 (4428)
[   81.550770][ T4436] loop0: detected capacity change from 0 to 40427
[   81.674494][ T4262] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4262)
[   81.693554][ T4436] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[   81.712801][ T4436] F2FS-fs (loop0): invalid crc value
[   81.798923][ T4436] F2FS-fs (loop0): Found nat_bits in checkpoint
[   81.843138][ T4423] BTRFS info (device loop3): enabling ssd optimizations
[   82.885026][ T4457] loop4: detected capacity change from 0 to 256
[   82.923138][ T4436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   83.047328][ T4477] loop2: detected capacity change from 0 to 1024
[   83.310823][   T26] audit: type=1800 audit(1780514523.452:6): pid=4476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.35" name="file1" dev="loop2" ino=26 res=0 errno=0
[   83.371034][ T4192] attempt to access beyond end of device
[   83.371034][ T4192] loop0: rw=2049, want=45104, limit=40427
[   83.544676][ T4448] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   83.701305][ T4457] EXT4-fs (loop4): Test dummy encryption mode enabled
[   83.733036][ T4457] EXT4-fs (loop4): Ignoring removed orlov option
[   83.776538][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[   84.196473][ T4196] ocfs2: Unmounting device (7,1) on (node local)
[   84.245339][ T4457] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   84.367019][ T4501] set_capacity_and_notify: 2 callbacks suppressed
[   84.367034][ T4501] loop0: detected capacity change from 0 to 256
[   84.576784][   T26] audit: type=1800 audit(1780514524.722:7): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.36" name="file1" dev="loop0" ino=1048590 res=0 errno=0
[   84.619162][ T4504] netlink: 'syz.4.41': attribute type 4 has an invalid length.
[   84.648577][ T4501] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   84.704635][ T4501] FAT-fs (loop0): Filesystem has been set read-only
[   84.760194][ T4501] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   84.952899][ T4511] loop4: detected capacity change from 0 to 1764
[   84.975622][ T4490] loop2: detected capacity change from 0 to 32768
[   85.010118][ T4513] loop1: detected capacity change from 0 to 256
[   85.250050][ T4490] XFS (loop2): Mounting V5 Filesystem
[   85.365612][ T4502] loop3: detected capacity change from 0 to 32768
[   85.415591][ T4527] loop4: detected capacity change from 0 to 128
[   85.453252][ T4490] XFS (loop2): Ending clean mount
[   85.466714][ T4502] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.40 (4502)
[   85.520417][   T26] audit: type=1800 audit(1780514525.662:8): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=6150 res=0 errno=0
[   85.650471][ T4502] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   85.683758][ T4531] loop0: detected capacity change from 0 to 512
[   85.699762][ T4502] BTRFS info (device loop3): setting nodatasum
[   85.724564][ T4502] BTRFS info (device loop3): force zlib compression, level 3
[   85.749815][ T4502] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[   85.781160][ T4502] BTRFS info (device loop3): use lzo compression, level 0
[   85.801681][ T4502] BTRFS info (device loop3): turning on flush-on-commit
[   85.838552][ T4502] BTRFS info (device loop3): enabling auto defrag
[   85.858861][ T4502] BTRFS info (device loop3): max_inline at 4096
[   85.865573][ T4502] BTRFS info (device loop3): using free space tree
[   85.872276][ T4502] BTRFS info (device loop3): has skinny extents
[   85.902893][ T4531] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.48: invalid indirect mapped block 256 (level 2)
[   85.952654][ T4531] EXT4-fs (loop0): 2 truncates cleaned up
[   86.012992][ T4531] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback.
[   86.047821][ T4198] XFS (loop2): Unmounting Filesystem
[   86.139280][   T26] audit: type=1800 audit(1780514526.272:9): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file1" dev="loop0" ino=15 res=0 errno=0
[   86.353513][ T4502] BTRFS info (device loop3): enabling ssd optimizations
[   86.568428][   T13] cfg80211: failed to load regulatory.db
[   86.611896][ T4513] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   86.653607][ T4513] FAT-fs (loop1): Filesystem has been set read-only
[   86.660394][ T4513] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   86.741926][ T4513] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   86.808118][   T26] audit: type=1800 audit(1780514526.952:10): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.44" name="file1" dev="loop1" ino=1048593 res=0 errno=0
[   86.845598][ T4530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.48: bg 0: block 5: invalid block bitmap
[   86.895151][ T4299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop3 scanned by udevd (4299)
[   87.040235][ T4530] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 2048 with error 28
[   87.148059][ T4530] EXT4-fs (loop0): This should not happen!! Data will be lost
[   87.148059][ T4530] 
[   87.176595][ T4572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.52'.
[   87.192050][ T4570] loop4: detected capacity change from 0 to 1024
[   87.208691][ T4530] EXT4-fs (loop0): Total free blocks count 0
[   87.229152][ T4530] EXT4-fs (loop0): Free/Dirty block details
[   87.252720][   T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.268574][ T4530] EXT4-fs (loop0): free_blocks=0
[   87.278292][ T4570] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   87.293647][ T4570] EXT4-fs error (device loop4): ext4_get_journal_inode:5187: comm syz.4.54: inode #4294967295: comm syz.4.54: iget: illegal inode #
[   87.324499][ T4530] EXT4-fs (loop0): dirty_blocks=2560
[   87.348892][ T4570] EXT4-fs (loop4): no journal found
[   87.370844][ T4530] EXT4-fs (loop0): Block reservation details
[   87.406845][ T4570] EXT4-fs (loop4): can't get journal size
[   87.414769][ T4570] EXT4-fs (loop4): failed to initialize system zone (-22)
[   87.422648][ T4570] EXT4-fs (loop4): mount failed
[   87.448138][ T4530] EXT4-fs (loop0): i_reserved_data_blocks=2560
[   87.654857][ T4583] loop1: detected capacity change from 0 to 512
[   87.663428][ T4531] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2436 with max blocks 508 with error 28
[   87.673637][   T13] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[   87.694375][ T4577] loop3: detected capacity change from 0 to 4096
[   87.731766][ T4531] EXT4-fs (loop0): This should not happen!! Data will be lost
[   87.731766][ T4531] 
[   87.753621][   T13] usb 3-1: config 0 has no interface number 0
[   87.759843][   T13] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[   87.788272][ T4577] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   87.813037][   T13] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   87.893336][ T4583] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[   87.921055][   T13] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   87.970320][ T4583] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.091622][   T26] audit: type=1800 audit(1780514528.232:11): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="file1" dev="loop1" ino=15 res=0 errno=0
[   88.154298][ T4577] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   88.163482][   T13] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   88.175196][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.230136][   T13] usb 3-1: Product: syz
[   88.249979][   T13] usb 3-1: Manufacturer: syz
[   88.271232][   T13] usb 3-1: SerialNumber: syz
[   88.308394][ T4592] device syzkaller0 entered promiscuous mode
[   88.318072][   T13] usb 3-1: config 0 descriptor??
[   88.371313][ T4592] TC_ACT_REPEAT abuse ?
[   88.375086][ T4565] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   88.399344][   T13] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   88.451100][   T13] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[   88.532901][   T13] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   88.744361][ T4393] usb 3-1: USB disconnect, device number 2
[   88.795067][ T4393] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   88.866632][ T4393] cyberjack 3-1:0.69: device disconnected
[   89.166070][ T4611] netlink: 'syz.0.70': attribute type 10 has an invalid length.
[   89.185206][ T4611] device veth0_macvtap left promiscuous mode
[   89.353811][ T4614] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.380043][ T4614] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   89.683162][ T4627] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   89.690137][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   89.708535][ T4632] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[   89.715133][ T4632] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   89.832893][ T4643] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:256
[   89.857105][ T4627] vhci_hcd vhci_hcd.0: Device attached
[   89.875820][ T4638] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9)
[   89.882491][ T4638] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   89.938303][ T4648] netlink: 'syz.2.82': attribute type 5 has an invalid length.
[   89.980200][ T4632] vhci_hcd vhci_hcd.0: Device attached
[   90.019349][ T4638] vhci_hcd vhci_hcd.0: Device attached
[   90.123125][ T4566] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[   90.148752][ T4651] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5)
[   90.155424][ T4651] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   90.212063][ T4627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   90.259744][ T4651] vhci_hcd vhci_hcd.0: Device attached
[   90.274412][ T4627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   90.308224][ T4627] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(11)
[   90.314879][ T4627] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   90.383307][ T4627] vhci_hcd vhci_hcd.0: Device attached
[   90.414928][ T4639] vhci_hcd: connection closed
[   90.414985][ T4654] vhci_hcd: connection closed
[   90.419852][ T4633] vhci_hcd: connection closed
[   90.421032][ T4271] vhci_hcd: stop threads
[   90.433697][ T4630] vhci_hcd: connection reset by peer
[   90.442385][ T4663] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.456670][ T4658] vhci_hcd: connection closed
[   90.466831][ T4663] set_capacity_and_notify: 1 callbacks suppressed
[   90.466844][ T4663] loop3: detected capacity change from 0 to 736
[   90.499326][ T4271] vhci_hcd: release socket
[   90.505218][ T4271] vhci_hcd: disconnect device
[   90.519104][ T4271] vhci_hcd: stop threads
[   90.543402][ T4271] vhci_hcd: release socket
[   90.553287][ T4271] vhci_hcd: disconnect device
[   90.561927][ T4271] vhci_hcd: stop threads
[   90.566780][ T4271] vhci_hcd: release socket
[   90.602657][ T4271] vhci_hcd: disconnect device
[   90.655392][ T4271] vhci_hcd: stop threads
[   90.660228][ T4271] vhci_hcd: release socket
[   90.679698][ T4271] vhci_hcd: disconnect device
[   90.708703][ T4271] vhci_hcd: stop threads
[   90.741713][ T4271] vhci_hcd: release socket
[   90.759560][ T4271] vhci_hcd: disconnect device
[   90.839188][ T4669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   91.236108][ T4685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.97'.
[   91.330491][ T4661] loop2: detected capacity change from 0 to 32768
[   91.422096][ T4691] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   91.428694][ T4691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   91.443534][ T4691] vhci_hcd vhci_hcd.0: Device attached
[   91.461278][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'.
[   91.496472][ T4701] loop1: detected capacity change from 0 to 512
[   91.514024][ T4693] vhci_hcd: connection closed
[   91.523729][ T4271] vhci_hcd: stop threads
[   91.543093][ T4271] vhci_hcd: release socket
[   91.547566][ T4271] vhci_hcd: disconnect device
[   91.557497][ T4661] XFS (loop2): Mounting V5 Filesystem
[   91.592307][ T4701] EXT4-fs (loop1): Ignoring removed nobh option
[   91.609039][ T4701] EXT4-fs (loop1): Ignoring removed orlov option
[   91.637784][ T4701] EXT4-fs error (device loop1): __ext4_iget:4919: inode #11: block 1: comm syz.1.102: invalid block
[   91.680711][ T4701] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.102: couldn't read orphan inode 11 (err -117)
[   91.705793][ T4661] XFS (loop2): Ending clean mount
[   91.716195][ T4701] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,nogrpid,sysvgroups,orlov,grpquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   91.834448][ T4567] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[   91.861677][ T4567] XFS (loop2): Unmount and run xfs_repair
[   91.909509][ T4567] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   91.929755][ T4567] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   91.951174][ T4567] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   91.977618][ T4567] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   92.018777][ T4567] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   92.042092][ T4567] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   92.085799][ T4718] loop3: detected capacity change from 0 to 1024
[   92.102368][ T4567] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.122401][ T4567] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.141694][ T4567] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   92.166710][ T4661] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[   92.200855][ T4661] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x156f/0x1b80 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   92.244368][ T4718] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   92.282467][ T4661] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   92.321780][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,nouid32,noblock_validity,delalloc,journal_dev=0x0000000000000007,nouid32,nomblk_io_submit,noinit_itable,norecovery,,errors=continue. Quota mode: none.
[   92.446678][ T4718] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.483108][ T4588] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[   92.610031][ T4732] loop1: detected capacity change from 0 to 256
[   92.825278][ T4198] XFS (loop2): Unmounting Filesystem
[   92.993114][ T4739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   93.194226][ T4743] device gretap0 entered promiscuous mode
[   93.216547][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   93.243905][ T4743] device gretap0 left promiscuous mode
[   93.343151][ T4752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'.
[   93.361526][ T4753] tmpfs: Bad value for 'mpol'
[   93.637632][ T4766] loop1: detected capacity change from 0 to 256
[   93.928418][ T4780] loop3: detected capacity change from 0 to 128
[   94.092738][ T4780] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   94.146918][ T4780] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.186131][ T4789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'.
[   94.332253][ T4792] device syzkaller0 entered promiscuous mode
[   94.509323][ T4800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'.
[   94.541660][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'.
[   95.303367][ T4566] vhci_hcd: vhci_device speed not set
[   95.552969][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #21a!!!
[   95.572950][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #29a!!!
[   95.582949][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   95.592945][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   95.602949][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   95.612942][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   95.622946][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   95.688804][ T4813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'.
[   96.656488][ T4849] netlink: 56 bytes leftover after parsing attributes in process `syz.4.158'.
[   97.242956][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   97.252960][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   97.272953][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   98.140600][ T4862] loop3: detected capacity change from 0 to 128
[   98.210801][ T4862] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   98.236586][ T4862] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   98.385860][ T4868] loop4: detected capacity change from 0 to 256
[   98.465742][ T4870] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET)
[   99.052117][ T4891] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.110106][ T4894] loop1: detected capacity change from 0 to 256
[   99.616646][ T4896] loop2: detected capacity change from 0 to 1024
[   99.660762][ T4896] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   99.754545][ T4896] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002]
[   99.810963][ T4896] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,debug,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[   99.833176][ T4896] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.039020][ T4896] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.178: bg 0: block 112: padding at end of block bitmap is not set
[  100.090910][ T4896] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  100.124206][ T4896] EXT4-fs (loop2): This should not happen!! Data will be lost
[  100.124206][ T4896] 
[  100.179631][ T4896] EXT4-fs (loop2): Total free blocks count 0
[  100.228633][ T4896] EXT4-fs (loop2): Free/Dirty block details
[  100.258503][ T4896] EXT4-fs (loop2): free_blocks=0
[  100.309957][ T4896] EXT4-fs (loop2): dirty_blocks=64
[  100.379356][ T4896] EXT4-fs (loop2): Block reservation details
[  100.433601][ T4923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'.
[  100.457353][ T4896] EXT4-fs (loop2): i_reserved_data_blocks=4
[  100.787151][ T4936] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  101.218630][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'.
[  101.238879][ T4945] netlink: 'syz.2.192': attribute type 7 has an invalid length.
[  101.268676][ T4945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'.
[  101.401921][ T4949] xt_hashlimit: size too large, truncated to 1048576
[  101.559744][ T4953] loop3: detected capacity change from 0 to 1024
[  101.692621][ T4953] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature
[  101.738484][ T4927] infiniband syz2: set down
[  101.770952][ T4927] infiniband syz2: added ipvlan0
[  101.998002][ T4927] RDS/IB: syz2: added
[  102.023264][ T4927] smc: adding ib device syz2 with port count 1
[  102.058700][ T4927] smc:    ib device syz2 port 1 has pnetid 
[  102.192882][ T4953] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  102.930927][ T4971] loop2: detected capacity change from 0 to 512
[  103.014148][ T4971] EXT4-fs (loop2): Mount option "nodelalloc" incompatible with ext3
[  103.643723][ T4987] loop3: detected capacity change from 0 to 512
[  103.803026][ T4987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.861922][ T4994] loop2: detected capacity change from 0 to 512
[  103.979822][ T4994] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  104.044584][ T4994] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  104.079307][ T4994] EXT4-fs (loop2): orphan cleanup on readonly fs
[  104.127275][ T4994] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  104.213897][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.221328][ T4994] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.212: corrupted inode contents
[  104.249171][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.266450][ T4994] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.212: mark_inode_dirty error
[  104.287661][ T5001] loop3: detected capacity change from 0 to 256
[  104.303376][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.320461][ T4994] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.212: corrupted inode contents
[  104.368615][   T26] audit: type=1800 audit(1780514544.512:12): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="file1" dev="loop3" ino=1048597 res=0 errno=0
[  104.371074][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.451184][ T4994] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.212: mark_inode_dirty error
[  104.494051][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.500786][ T4994] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.212: corrupted inode contents
[  104.581887][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.600379][ T4994] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  104.632049][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.648205][ T4994] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.212: corrupted inode contents
[  104.686871][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.686935][ T4994] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.212: mark_inode_dirty error
[  104.687315][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.687334][ T4994] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  104.687659][ T4994] EXT4-fs (loop2): Remounting filesystem read-only
[  104.694851][ T4994] EXT4-fs (loop2): 1 truncate cleaned up
[  104.701604][ T4994] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2. Quota mode: writeback.
[  104.986844][ T4566] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  105.036620][ T4566] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  105.326631][ T5029] loop3: detected capacity change from 0 to 128
[  105.459875][   T26] audit: type=1800 audit(1780514545.602:13): pid=5029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="bus" dev="loop3" ino=1048598 res=0 errno=0
[  105.830043][ T5035] device syzkaller0 entered promiscuous mode
[  105.856337][ T5035] TC_ACT_REPEAT abuse ?
[  105.875698][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  105.904607][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'.
[  105.937184][ T5038] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.946386][ T5038] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.955149][ T5038] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.963921][ T5038] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.095580][ T5038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  106.106754][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.230'.
[  106.267979][ T5043] netlink: 'syz.2.232': attribute type 10 has an invalid length.
[  106.295413][   T26] audit: type=1326 audit(1780514546.442:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.350960][   T26] audit: type=1326 audit(1780514546.442:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.404436][ T5043] team0: Port device dummy0 added
[  106.413322][ T5044] netlink: 'syz.2.232': attribute type 10 has an invalid length.
[  106.473209][   T26] audit: type=1326 audit(1780514546.442:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.527171][ T5044] team0: Port device dummy0 removed
[  106.542445][   T26] audit: type=1326 audit(1780514546.442:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.605804][ T5044] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  106.642036][   T26] audit: type=1326 audit(1780514546.442:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.695302][   T26] audit: type=1326 audit(1780514546.442:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  106.839444][   T26] audit: type=1326 audit(1780514546.442:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5040 comm="syz.3.231" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  108.011480][ T5062] loop0: detected capacity change from 0 to 2048
[  108.171997][ T5062] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,max_dir_size_kb=0x0000000000000004,grpjquota=,. Quota mode: writeback.
[  108.230118][ T5062] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.239: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  108.281997][ T5062] EXT4-fs (loop0): Remounting filesystem read-only
[  108.587218][ T5083] sctp: [Deprecated]: syz.2.248 (pid 5083) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.587218][ T5083] Use struct sctp_sack_info instead
[  108.588205][ T5083] sctp: [Deprecated]: syz.2.248 (pid 5083) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.588205][ T5083] Use struct sctp_sack_info instead
[  108.789384][ T5094] loop1: detected capacity change from 0 to 160
[  108.851854][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'.
[  109.217870][ T5106] loop0: detected capacity change from 0 to 1024
[  109.285895][ T5106] EXT4-fs (loop0): Ignoring removed bh option
[  109.365217][ T5110] device syzkaller0 entered promiscuous mode
[  109.409311][ T5106] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000005,dioread_lock,debug_want_extra_isize=0x0000000000000008,barrier=0x0000000000000100,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,errors=continue,bh,init_itable,. Quota mode: none.
[  110.266505][ T5120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'.
[  110.293086][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[  110.345788][ T5120] batman_adv: Cannot find parent device
[  110.582498][ T5130] loop2: detected capacity change from 0 to 256
[  110.648834][ T5130] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.661215][ T5132] netlink: 44 bytes leftover after parsing attributes in process `syz.3.269'.
[  110.692660][ T5137] netlink: 68 bytes leftover after parsing attributes in process `syz.0.271'.
[  110.748687][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  110.773441][ T5130] FAT-fs (loop2): Filesystem has been set read-only
[  110.824243][   T26] audit: type=1326 audit(1780514550.972:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  110.843223][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  110.864991][ T5146] loop0: detected capacity change from 0 to 256
[  110.866268][ T5144] loop1: detected capacity change from 0 to 128
[  110.910924][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  110.928136][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  110.931799][   T26] audit: type=1326 audit(1780514551.002:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  110.956352][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.035765][ T5150] loop3: detected capacity change from 0 to 128
[  111.061749][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.080888][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.099945][   T26] audit: type=1326 audit(1780514551.002:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  111.113633][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.190958][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.205409][ T5153] loop4: detected capacity change from 0 to 512
[  111.220555][   T26] audit: type=1326 audit(1780514551.002:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  111.233164][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.269222][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.314966][   T26] audit: type=1326 audit(1780514551.002:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  111.357024][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.382246][ T5153] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.277: invalid block
[  111.393613][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.404591][ T5153] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.277: invalid indirect mapped block 4294967295 (level 1)
[  111.419201][ T5153] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.277: invalid indirect mapped block 4294967295 (level 1)
[  111.433976][ T5153] EXT4-fs (loop4): 2 truncates cleaned up
[  111.439754][ T5153] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,minixdf,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  111.455969][   T26] audit: type=1326 audit(1780514551.002:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  111.480175][   T26] audit: type=1326 audit(1780514551.002:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5131 comm="syz.3.269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1a900abe59 code=0x7ffc0000
[  111.508733][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.517804][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.527026][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.560411][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.570840][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.646883][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.697530][ T5163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.280'.
[  111.736160][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.800825][ T5165] sg_write: data in/out 412636/74 bytes for SCSI command 0x0-- guessing data in;
[  111.800825][ T5165]    program syz.4.281 not setting count and/or reply_len properly
[  111.813052][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.890387][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  111.962489][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  112.023718][ T5130] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  112.044352][   T26] audit: type=1800 audit(1780514552.192:28): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.266" name="file1" dev="loop2" ino=1048599 res=0 errno=0
[  112.152090][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'.
[  112.227181][ T5130] syz.2.266 (5130) used greatest stack depth: 20080 bytes left
[  112.717118][ T4254] Bluetooth: hci5: Frame reassembly failed (-84)
[  112.728349][ T4254] Bluetooth: hci5: Frame reassembly failed (-84)
[  113.084587][ T5209] sch_tbf: burst 6 is lower than device batadv_slave_0 mtu (1514) !
[  113.472056][ T5223] tipc: Started in network mode
[  113.527814][ T5225] loop0: detected capacity change from 0 to 512
[  113.530197][ T5223] tipc: Node identity 52c86d471cc2, cluster identity 4711
[  113.582554][ T5223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.620642][ T5226] device syzkaller0 entered promiscuous mode
[  113.650084][ T5225] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.312: invalid indirect mapped block 4294967295 (level 1)
[  113.689202][ T5221] loop3: detected capacity change from 0 to 8192
[  113.726708][ T5223] tipc: Resetting bearer <eth:syzkaller0>
[  113.735903][ T5225] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.312: invalid indirect mapped block 4294967295 (level 1)
[  113.793875][ T5225] EXT4-fs (loop0): 2 truncates cleaned up
[  113.803281][ T5225] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,minixdf,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  113.818477][ T5222] tipc: Resetting bearer <eth:syzkaller0>
[  113.865996][ T5222] tipc: Disabling bearer <eth:syzkaller0>
[  114.065338][ T5233] loop0: detected capacity change from 0 to 128
[  114.723024][ T4566] Bluetooth: hci5: command 0x1003 tx timeout
[  114.761616][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  115.112570][ T5250] loop1: detected capacity change from 0 to 1024
[  115.178384][ T5250] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  115.258317][ T5250] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,mblk_io_submit,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,nobarrier,grpid,jqfmt=vfsv0,,errors=continue. Quota mode: none.
[  116.467981][ T5270] loop3: detected capacity change from 0 to 1024
[  116.615260][ T5270] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.328: lblock 2 mapped to illegal pblock 2 (length 1)
[  116.667052][ T5240] capability: warning: `syz.0.316' uses 32-bit capabilities (legacy support in use)
[  116.690074][ T5270] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  116.735216][ T5270] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.328: lblock 0 mapped to illegal pblock 48 (length 1)
[  116.802020][ T5270] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  116.832798][ T5270] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.328: Failed to acquire dquot type 0
[  116.851710][ T5270] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  116.865736][ T5270] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.328: mark_inode_dirty error
[  116.962752][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'.
[  117.248764][ T4350] Bluetooth: hci5: command 0x1001 tx timeout
[  117.273944][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  117.312652][ T5270] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  117.602075][ T5270] EXT4-fs (loop3): 1 orphan inode deleted
[  117.615931][ T4254] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  117.783066][ T5270] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none.
[  117.862554][ T4254] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  117.881244][ T5270] EXT4-fs (loop3): Ignoring removed bh option
[  117.891536][ T4254] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  117.960917][ T5270] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 48: comm syz.3.328: lblock 0 mapped to illegal pblock 48 (length 1)
[  118.053309][ T5270] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117
[  118.182797][ T5300] netlink: 'syz.4.338': attribute type 11 has an invalid length.
[  118.190966][ T5300] netlink: 140 bytes leftover after parsing attributes in process `syz.4.338'.
[  118.285484][ T5301] netlink: 'syz.0.333': attribute type 3 has an invalid length.
[  118.953467][ T5301] syz.0.333 (5301) used greatest stack depth: 16944 bytes left
[  119.045597][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[  119.095015][ T5306] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.174668][ T5306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.339'.
[  119.212068][ T5306] device bond1 entered promiscuous mode
[  119.275809][ T5306] device dummy0 entered promiscuous mode
[  119.282003][ T5306] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  119.293368][ T4350] Bluetooth: hci5: command 0x1009 tx timeout
[  119.306331][ T5319] loop4: detected capacity change from 0 to 4096
[  119.380175][ T5325] loop1: detected capacity change from 0 to 512
[  119.453155][ T5325] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  119.479503][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  119.502824][ T5325] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  119.544965][ T5325] EXT4-fs error (device loop1): ext4_init_orphan_info:621: comm syz.1.346: orphan file block 0: bad magic
[  119.640008][ T5325] EXT4-fs (loop1): mount failed
[  119.792938][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'.
[  120.783256][   T26] audit: type=1107 audit(1780514560.852:29): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  121.897764][ T5373] loop1: detected capacity change from 0 to 4096
[  122.392919][    C1] sched: RT throttling activated
[  122.728132][ T5381] netlink: 'syz.4.366': attribute type 3 has an invalid length.
[  123.303006][ T5373] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  123.483105][   T26] audit: type=1326 audit(1780514563.602:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.0.370" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c4887de59 code=0x0
[  123.559514][ T5373] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  124.280015][ T5407] loop3: detected capacity change from 0 to 512
[  125.471692][ T5407] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000005,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  125.491217][ T5407] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.033201][   T26] audit: type=1107 audit(1780514566.092:31): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  126.367953][ T5434] loop4: detected capacity change from 0 to 164
[  126.979013][ T5443] loop2: detected capacity change from 0 to 512
[  127.036396][ T5440] loop0: detected capacity change from 0 to 4096
[  127.057726][ T5434] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  127.107785][ T5434] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  127.139665][ T5440] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  127.155811][ T5434] Symlink component flag not implemented
[  127.178557][ T5434] Symlink component flag not implemented
[  127.200150][ T5443] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  127.223533][ T5434] Symlink component flag not implemented (7)
[  127.236516][ T5434] Symlink component flag not implemented (116)
[  127.251318][ T5443] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.741662][ T5450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  127.776660][ T5450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.983843][ T5440] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  128.046573][ T5452] netlink: 76 bytes leftover after parsing attributes in process `syz.3.395'.
[  128.103409][ T5452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.395'.
[  128.169642][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.178348][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.223179][ T5462] loop2: detected capacity change from 0 to 256
[  128.377921][ T5462] FAT-fs (loop2): Directory bread(block 64) failed
[  128.410890][ T5462] FAT-fs (loop2): Directory bread(block 65) failed
[  128.435071][ T5462] FAT-fs (loop2): Directory bread(block 66) failed
[  128.441666][ T5462] FAT-fs (loop2): Directory bread(block 67) failed
[  128.555912][ T5462] FAT-fs (loop2): Directory bread(block 68) failed
[  128.562749][ T5462] FAT-fs (loop2): Directory bread(block 69) failed
[  128.613124][ T5462] FAT-fs (loop2): Directory bread(block 70) failed
[  128.619725][ T5462] FAT-fs (loop2): Directory bread(block 71) failed
[  128.644432][ T5462] FAT-fs (loop2): Directory bread(block 72) failed
[  128.651579][ T5462] FAT-fs (loop2): Directory bread(block 73) failed
[  128.879183][ T5462] attempt to access beyond end of device
[  128.879183][ T5462] loop2: rw=524288, want=1820, limit=256
[  128.923084][ T5462] attempt to access beyond end of device
[  128.923084][ T5462] loop2: rw=0, want=1808, limit=256
[  128.983895][   T26] audit: type=1800 audit(1780514569.132:32): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.396" name="file2" dev="loop2" ino=1048605 res=0 errno=0
[  129.203587][   T26] audit: type=1107 audit(1780514569.332:33): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  130.162590][ T5494] vxcan0: tx address claim with dlc 0
[  130.617481][ T5502] netlink: 25 bytes leftover after parsing attributes in process `syz.3.414'.
[  130.668075][ T5502] xt_l2tp: missing protocol rule (udp|l2tpip)
[  131.380798][ T5525] loop4: detected capacity change from 0 to 512
[  131.436229][ T5525] EXT4-fs (loop4): Ignoring removed bh option
[  131.452593][ T5525] EXT4-fs (loop4): inline encryption not supported
[  131.463089][ T5525] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.541914][ T5525] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  131.559857][ T5525] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.424: bg 0: block 248: padding at end of block bitmap is not set
[  131.576889][ T5525] Quota error (device loop4): write_blk: dquota write failed
[  131.584707][ T5525] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  131.597489][ T5525] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.424: Failed to acquire dquot type 1
[  131.615073][ T5525] EXT4-fs (loop4): 1 truncate cleaned up
[  131.621784][ T5525] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback.
[  131.679381][ T5258] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6)
[  131.727732][ T5258] EXT4-fs error (device loop4): ext4_release_dquot:6272: comm kworker/u4:10: Failed to release dquot type 1
[  132.193343][   T26] audit: type=1107 audit(1780514572.302:34): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  132.663974][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  132.902856][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  132.929312][ T5552] loop2: detected capacity change from 0 to 1024
[  133.026292][ T5558] loop4: detected capacity change from 0 to 128
[  133.059870][ T5552] EXT4-fs (loop2): Ignoring removed orlov option
[  133.119004][ T5552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  133.140773][ T5552] System zones: 0-1, 3-12
[  133.194031][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none.
[  133.439808][ T5569] loop1: detected capacity change from 0 to 512
[  133.491834][ T5558] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.525817][ T5569] EXT4-fs (loop1): Ignoring removed oldalloc option
[  133.563135][ T5569] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  133.596682][ T5558] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.706653][ T5569] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  133.806659][ T5569] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.295323][ T5565] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  134.340696][ T5588] netlink: 'syz.1.444': attribute type 10 has an invalid length.
[  134.419718][ T5588] bond1: (slave dummy0): Releasing backup interface
[  134.551513][ T5588] device dummy0 left promiscuous mode
[  134.587902][ T5588] team0: Port device dummy0 added
[  134.625493][ T5591] netlink: 'syz.1.444': attribute type 10 has an invalid length.
[  134.707371][ T5591] team0: Port device dummy0 removed
[  134.716471][ T5591] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  134.736380][ T5594] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[  134.755131][ T5594] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[  134.778787][ T5594] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[  134.810903][ T5594] netlink: 'syz.0.448': attribute type 1 has an invalid length.
[  135.086195][ T5598] loop3: detected capacity change from 0 to 512
[  135.247381][ T5603] program syz.4.452 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.264663][ T5598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.300665][ T5607] program syz.4.452 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.328990][ T5606] sg_write: data in/out 426973/386 bytes for SCSI command 0x0-- guessing data in;
[  135.328990][ T5606]    program syz.0.453 not setting count and/or reply_len properly
[  135.330151][    C1] hrtimer: interrupt took 90138 ns
[  135.354368][ T5598] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.649421][   T26] audit: type=1326 audit(1780514575.792:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  135.677101][ T5614] loop2: detected capacity change from 0 to 512
[  135.689338][   T26] audit: type=1326 audit(1780514575.792:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  135.721847][   T26] audit: type=1326 audit(1780514575.862:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  135.764447][   T26] audit: type=1326 audit(1780514575.862:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  135.831944][ T5614] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  135.928405][   T26] audit: type=1326 audit(1780514575.892:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.002930][ T5614] EXT4-fs (loop2): 1 truncate cleaned up
[  136.009395][ T5614] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,errors=continue,data_err=ignore,nodiscard,,errors=continue. Quota mode: none.
[  136.034904][   T26] audit: type=1326 audit(1780514575.892:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.059437][   T26] audit: type=1326 audit(1780514575.892:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.107020][   T26] audit: type=1326 audit(1780514575.892:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.275053][   T26] audit: type=1326 audit(1780514575.892:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.482993][   T26] audit: type=1326 audit(1780514575.892:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5613 comm="syz.0.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f1c4887de59 code=0x7ffc0000
[  136.946037][ T5653] tipc: Started in network mode
[  136.950971][ T5653] tipc: Node identity bedff4a2041f, cluster identity 4711
[  137.011896][ T5653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.049385][ T5655] device syzkaller0 entered promiscuous mode
[  137.092411][ T5653] tipc: Resetting bearer <eth:syzkaller0>
[  137.744155][ T5660] netlink: 'syz.4.468': attribute type 3 has an invalid length.
[  137.833709][ T5651] tipc: Resetting bearer <eth:syzkaller0>
[  137.942258][ T5664] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  138.026676][ T5651] tipc: Disabling bearer <eth:syzkaller0>
[  138.597574][ T5687] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  139.484843][ T5705] netlink: 'syz.0.488': attribute type 3 has an invalid length.
[  139.952673][ T5710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.101437][ T5710] device syzkaller0 entered promiscuous mode
[  140.217650][ T5710] tipc: Resetting bearer <eth:syzkaller0>
[  140.303167][ T4393] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  140.553426][ T4393] usb 2-1: Using ep0 maxpacket: 16
[  140.674971][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.712066][ T4393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.801878][ T4393] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  140.828983][ T4393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.016124][ T1106] tipc: Node number set to 3133207714
[  141.132290][ T4393] usb 2-1: config 0 descriptor??
[  143.847275][ T5708] tipc: Resetting bearer <eth:syzkaller0>
[  143.887058][ T5708] tipc: Disabling bearer <eth:syzkaller0>
[  143.993288][ T5257] Bluetooth: hci5: Frame reassembly failed (-84)
[  144.035425][ T4393] usbhid 2-1:0.0: can't add hid device: -71
[  144.041485][ T4393] usbhid: probe of 2-1:0.0 failed with error -71
[  144.106898][ T4393] usb 2-1: USB disconnect, device number 2
[  144.413123][ T4349] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  144.587524][ T5752] process 'syz.1.505' launched './file0' with NULL argv: empty string added
[  144.669892][ T5753] kvm: pic: non byte write
[  144.680165][ T5755] netlink: 25 bytes leftover after parsing attributes in process `syz.0.506'.
[  144.717852][ T5755] xt_l2tp: missing protocol rule (udp|l2tpip)
[  144.853477][ T4349] usb 5-1: unable to get BOS descriptor or descriptor too short
[  144.893681][ T4349] usb 5-1: not running at top speed; connect to a high speed hub
[  144.993691][ T4349] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.040292][ T4349] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.136672][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  145.136689][   T26] audit: type=1107 audit(1780514585.282:56): pid=5757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  147.419345][ T4569] Bluetooth: hci5: command 0x1003 tx timeout
[  147.523611][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  147.563177][ T4349] usb 5-1: string descriptor 0 read error: -71
[  147.571278][ T4349] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.580842][ T5769] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.581679][ T5769] device syzkaller0 entered promiscuous mode
[  147.590241][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.643331][ T4349] usb 5-1: can't set config #1, error -71
[  147.643961][ T5769] tipc: Resetting bearer <eth:syzkaller0>
[  147.671518][ T4349] usb 5-1: USB disconnect, device number 2
[  147.713587][ T5767] tipc: Resetting bearer <eth:syzkaller0>
[  147.761644][ T5767] tipc: Disabling bearer <eth:syzkaller0>
[  148.053135][ T4393] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  148.123102][ T4349] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  148.183181][ T4264] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  148.303134][ T4393] usb 1-1: Using ep0 maxpacket: 16
[  148.393025][ T4349] usb 5-1: Using ep0 maxpacket: 8
[  148.423144][ T4393] usb 1-1: config 0 has no interfaces?
[  148.428771][ T4264] usb 2-1: Using ep0 maxpacket: 16
[  148.434487][ T4393] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  148.481558][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.506841][ T4393] usb 1-1: config 0 descriptor??
[  148.533863][ T4349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.545919][ T4349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  148.559008][ T4264] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  148.559035][ T4264] usb 2-1: config 0 has no interface number 0
[  148.559067][ T4264] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  148.559094][ T4264] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  148.620604][ T4349] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  148.630886][ T4349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.657264][ T4349] usb 5-1: config 0 descriptor??
[  148.714299][ T4264] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  148.758634][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.788520][ T4264] usb 2-1: Product: syz
[  148.792734][ T4264] usb 2-1: Manufacturer: syz
[  148.803360][ T4264] usb 2-1: SerialNumber: syz
[  148.831861][ T4264] usb 2-1: config 0 descriptor??
[  148.840804][ T5791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.520'.
[  148.858713][ T4393] usb 1-1: USB disconnect, device number 2
[  148.875275][ T5777] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  148.882381][ T5777] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  148.911630][ T5791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.520'.
[  148.956651][ T5791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.520'.
[  149.132381][ T5777] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  149.149344][ T5777] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  149.212406][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.220210][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.228140][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.238167][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.245998][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.256020][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.280043][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.318878][ T4349] wacom 0003:056A:0027.0002: unknown main item tag 0x0
[  149.342369][ T4349] wacom 0003:056A:0027.0002: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  149.394140][ T4264] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  149.433956][ T4349] wacom 0003:056A:0027.0002: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0
[  149.478331][ T4349] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.0002/input/input5
[  149.650728][ T4349] usb 5-1: USB disconnect, device number 3
[  149.686806][ T4566] Bluetooth: hci5: command 0x1001 tx timeout
[  149.714431][ T4193] Bluetooth: hci5: sending frame failed (-49)
[  150.165352][ T5797] fido_id[5797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  150.492759][ T5805] netlink: 25 bytes leftover after parsing attributes in process `syz.0.524'.
[  150.568747][ T5807] xt_l2tp: missing protocol rule (udp|l2tpip)
[  150.649707][ T5808] tipc: Started in network mode
[  150.678950][ T5808] tipc: Node identity d27bffcaa91f, cluster identity 4711
[  150.693210][ T5808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.714257][ T5808] device syzkaller0 entered promiscuous mode
[  150.835084][ T5808] tipc: Resetting bearer <eth:syzkaller0>
[  150.847386][ T5806] tipc: Resetting bearer <eth:syzkaller0>
[  150.916773][ T5806] tipc: Disabling bearer <eth:syzkaller0>
[  151.239086][ T5815] loop4: detected capacity change from 0 to 128
[  151.347356][ T4264] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  151.372492][ T4264] asix: probe of 2-1:0.34 failed with error -71
[  151.419079][ T5815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.443422][ T5815] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  151.456140][ T4264] usb 2-1: USB disconnect, device number 3
[  151.837305][ T4569] Bluetooth: hci5: command 0x1009 tx timeout
[  153.916914][ T5821] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  153.951621][ T5830] binder: 5826:5830 ioctl c0306201 200000000080 returned -14
[  154.022513][ T5821] kvm: pic: non byte read
[  154.039123][ T5821] kvm: pic: level sensitive irq not supported
[  154.039377][ T5821] kvm: pic: non byte read
[  154.065430][ T5830] binder: 5826:5830 ioctl c0306201 2000000003c0 returned -14
[  154.088838][ T5821] kvm: pic: level sensitive irq not supported
[  154.089225][ T5821] kvm: pic: non byte read
[  154.120166][ T5821] kvm: pic: level sensitive irq not supported
[  154.120559][ T5821] kvm: pic: non byte read
[  154.223641][ T4567] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  154.293887][ T5821] kvm: pic: level sensitive irq not supported
[  154.294072][ T5821] kvm: pic: non byte read
[  154.363865][ T5821] kvm: pic: level sensitive irq not supported
[  154.364070][ T5821] kvm: pic: non byte read
[  154.673234][ T4567] usb 4-1: not running at top speed; connect to a high speed hub
[  154.694001][ T4349] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  154.783562][ T4567] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  155.023106][ T4349] usb 1-1: Using ep0 maxpacket: 32
[  155.086966][ T4567] usb 4-1: string descriptor 0 read error: -22
[  155.101302][ T4567] usb 4-1: New USB device found, idVendor=0499, idProduct=100f, bcdDevice= 0.40
[  155.145863][ T4567] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.155466][ T4349] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  155.176727][ T4349] usb 1-1: config 0 has no interface number 0
[  155.213633][ T5845] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  155.249824][ T5845] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  155.310852][ T4567] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[  155.374129][ T4569] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  155.382935][ T4349] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  155.416197][ T4567] snd-usb-audio: probe of 4-1:1.1 failed with error -2
[  155.424170][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.473942][ T4349] usb 1-1: Product: syz
[  155.479385][ T4349] usb 1-1: Manufacturer: syz
[  155.510090][ T4349] usb 1-1: SerialNumber: syz
[  155.558807][ T4349] usb 1-1: config 0 descriptor??
[  155.634611][ T4349] smsc95xx v2.0.0
[  155.720825][ T4567] snd-usb-audio: probe of 4-1:1.2 failed with error -2
[  155.742126][ T4567] usb 4-1: USB disconnect, device number 2
[  155.752752][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.756351][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.868746][ T4569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.885683][ T4569] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  155.905931][ T4569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.988674][ T4569] usb 3-1: config 0 descriptor??
[  156.096617][ T4349] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  156.130925][ T4349] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  156.153572][ T5857] loop4: detected capacity change from 0 to 128
[  156.303164][ T5857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.383216][ T5857] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.788538][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.803639][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.814752][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.822435][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.831258][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.843817][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  156.851718][ T4569] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0
[  158.223720][ T4349] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32
[  158.248561][ T4569] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  158.261464][ T4349] smsc95xx: probe of 1-1:0.67 failed with error -32
[  159.138629][ T4349] usb 1-1: USB disconnect, device number 3
[  159.273756][ T4569] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device
[  159.282092][ T4569] pyra 0003:1E7D:2CF6.0003: couldn't install mouse
[  159.358938][ T4569] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71
[  159.470383][ T4569] usb 3-1: USB disconnect, device number 3
[  159.663046][ T5898] netlink: 'syz.4.552': attribute type 27 has an invalid length.
[  159.817663][ T5901] fido_id[5901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  159.844732][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  159.876010][ T5898] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  160.068476][ T5898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.118052][ T5908] loop2: detected capacity change from 0 to 128
[  160.266606][ T5908] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.383326][ T5908] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.893070][ T4392] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  163.253402][ T4392] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  163.343477][ T4392] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.411192][ T4392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.481148][ T4392] usb 3-1: config 0 descriptor??
[  163.558331][ T4392] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  163.817562][ T4392] usb 3-1: USB disconnect, device number 4
[  164.233577][ T4569] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  164.513069][ T4569] usb 5-1: Using ep0 maxpacket: 16
[  164.633561][ T4569] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.676127][ T4569] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.863145][ T4392] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  164.933563][ T4569] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.996546][ T4569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.043042][ T4569] usb 5-1: Product: syz
[  165.073150][ T4569] usb 5-1: Manufacturer: syz
[  165.093640][ T4569] usb 5-1: SerialNumber: syz
[  165.243978][ T4392] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11
[  165.322679][ T4392] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19
[  165.474177][ T4569] usb 5-1: 0:2 : does not exist
[  165.553865][ T4392] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.565577][ T4392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.594740][ T4569] usb 5-1: USB disconnect, device number 4
[  165.617230][ T4392] usb 3-1: Product: syz
[  165.673190][ T4392] usb 3-1: Manufacturer: syz
[  165.678797][ T4392] usb 3-1: SerialNumber: syz
[  165.940315][ T4299] udevd[4299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.923810][ T4392] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  166.931630][ T4392] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  167.013488][ T4392] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  167.154865][ T4392] cdc_ncm 3-1:1.0: setting tx_max = 88
[  167.302188][ T4392] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[  167.313539][ T4569] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  167.462357][ T4392] usb 3-1: USB disconnect, device number 5
[  167.482722][ T4392] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[  170.133172][ T4264] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  170.192422][ T6016] loop0: detected capacity change from 0 to 1024
[  170.327754][ T6016] EXT4-fs (loop0): Ignoring removed bh option
[  170.436777][ T6016] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none.
[  170.563566][ T4392] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  170.584056][ T4264] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  170.623160][ T4264] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  170.725790][ T4264] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  170.933423][ T4392] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  171.024177][ T4392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  171.043562][ T4264] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  171.085082][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  171.117286][ T4392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  171.153174][ T4264] usb 5-1: Product: syz
[  171.173139][ T4264] usb 5-1: Manufacturer: syz
[  171.200371][ T4264] usb 5-1: SerialNumber: syz
[  171.219641][ T4392] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  171.302073][ T4392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.624635][ T4264] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  174.641342][ T4392] usb 4-1: config 0 descriptor??
[  174.663265][ T4392] usb 4-1: can't set config #0, error -71
[  174.720616][ T4392] usb 4-1: USB disconnect, device number 4
[  174.729249][ T4264] usb 5-1: USB disconnect, device number 5
[  174.873841][ T6039] binder: BINDER_SET_CONTEXT_MGR already set
[  174.881104][ T6039] binder: 6036:6039 ioctl 4018620d 200000004a80 returned -16
[  174.910739][ T4264] usblp0: removed
[  175.278395][ T6043] input: syz0 as /devices/virtual/input/input8
[  178.096177][ T6072] loop0: detected capacity change from 0 to 1024
[  178.123176][ T4347] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  178.189659][ T6072] EXT4-fs (loop0): Ignoring removed bh option
[  178.383590][ T4347] usb 4-1: Using ep0 maxpacket: 8
[  178.392433][ T6072] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000002,bh,init_itable,. Quota mode: none.
[  178.857174][ T4347] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.903073][ T4347] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  178.967917][ T4347] usb 4-1: config 0 interface 0 has no altsetting 0
[  180.031576][ T4347] usb 4-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00
[  180.117567][ T4347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.320177][ T4347] usb 4-1: config 0 descriptor??
[  180.333837][ T4349] Bluetooth: hci5: command 0x0409 tx timeout
[  181.093884][ T4347] usbhid 4-1:0.0: can't add hid device: -71
[  181.100698][ T4347] usbhid: probe of 4-1:0.0 failed with error -71
[  181.244717][ T4347] usb 4-1: USB disconnect, device number 5
[  181.475276][ T6095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'.
[  181.651898][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'.
[  181.710560][ T6095] device bridge_slave_1 left promiscuous mode
[  181.739980][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.318841][ T6095] device bridge_slave_0 left promiscuous mode
[  182.403581][ T4349] Bluetooth: hci5: command 0x041b tx timeout
[  182.453373][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.714012][ T6110] binder: 6109:6110 ioctl c0306201 2000000003c0 returned -14
[  184.301473][ T6074] chnl_net:caif_netlink_parms(): no params data found
[  184.494123][ T4347] Bluetooth: hci5: command 0x040f tx timeout
[  184.822680][ T6133] device syzkaller1 entered promiscuous mode
[  185.255470][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.333178][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.460396][ T6074] device bridge_slave_0 entered promiscuous mode
[  185.617255][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.643207][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.693463][ T6074] device bridge_slave_1 entered promiscuous mode
[  185.890629][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.022939][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.215124][ T6074] team0: Port device team_slave_0 added
[  186.295535][ T6074] team0: Port device team_slave_1 added
[  186.313820][ T4347] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  186.512052][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.543131][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.576301][ T4566] Bluetooth: hci5: command 0x0419 tx timeout
[  186.715059][ T4347] usb 5-1: too many endpoints for config 0 interface 0 altsetting 6: 253, using maximum allowed: 30
[  186.748361][ T4347] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  186.783453][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.803707][ T4349] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  186.845684][ T4347] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  186.922022][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.963527][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.989776][ T4347] usb 5-1: config 0 interface 0 has no altsetting 0
[  186.989875][ T4347] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  186.989941][ T4347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.047311][ T4347] usb 5-1: config 0 descriptor??
[  187.244014][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.403878][ T4349] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  187.433725][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.493100][ T4349] usb 1-1: Product: syz
[  187.518759][ T4349] usb 1-1: Manufacturer: syz
[  187.543605][ T4349] usb 1-1: SerialNumber: syz
[  187.568178][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.616443][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.630198][ T6074] device hsr_slave_0 entered promiscuous mode
[  187.647582][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.685228][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.705413][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.715755][ T6074] device hsr_slave_1 entered promiscuous mode
[  187.753972][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.773709][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.781766][ T4347] cypress 0003:04B4:0001.0004: unknown main item tag 0x0
[  187.814845][ T6074] Cannot create hsr debugfs directory
[  187.873290][ T4347] cypress 0003:04B4:0001.0004: unbalanced collection at end of report description
[  187.934105][ T4347] cypress 0003:04B4:0001.0004: parse failed
[  187.965432][ T4347] cypress: probe of 0003:04B4:0001.0004 failed with error -22
[  188.024946][ T4347] usb 5-1: USB disconnect, device number 6
[  188.383577][ T4349] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[  188.840832][ T4393] usb 1-1: USB disconnect, device number 4
[  189.713158][ T4392] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  189.952995][ T4392] usb 5-1: Using ep0 maxpacket: 32
[  190.016853][ T6175] tipc: Started in network mode
[  190.063168][ T6175] tipc: Node identity _, cluster identity 4711
[  190.073882][ T4392] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  190.114032][ T4392] usb 5-1: config 0 has no interface number 0
[  190.163056][ T6175] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.273267][ T4392] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  190.301695][ T6177] Invalid argument reading file caps for ./file0
[  190.317205][ T4392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.409724][ T4392] usb 5-1: Product: syz
[  190.417910][ T6074] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  190.455590][ T4392] usb 5-1: Manufacturer: syz
[  190.461340][ T4392] usb 5-1: SerialNumber: syz
[  190.543349][ T4392] usb 5-1: config 0 descriptor??
[  190.560641][ T6074] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  190.640528][ T6074] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  190.650650][ T4392] smsc95xx v2.0.0
[  190.758246][ T6074] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  190.854714][ T6179] loop0: detected capacity change from 0 to 128
[  191.045099][ T4347] Bluetooth: hci1: command 0x0406 tx timeout
[  191.066039][ T4347] Bluetooth: hci0: command 0x0406 tx timeout
[  191.073706][ T4392] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  191.150954][ T4392] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  191.163563][ T4347] Bluetooth: hci3: command 0x0406 tx timeout
[  191.170602][ T4347] Bluetooth: hci4: command 0x0406 tx timeout
[  191.296586][ T6179] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.434039][ T6179] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.530828][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.686968][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.698802][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.762455][ T6074] 8021q: adding VLAN 0 to HW filter on device team0
[  191.843780][ T4392] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32
[  191.904932][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.915635][ T4392] smsc95xx: probe of 5-1:0.67 failed with error -32
[  191.924757][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.978459][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.986405][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.062531][ T4264] usb 5-1: USB disconnect, device number 7
[  193.144144][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.330731][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.394873][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.483446][ T5258] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.491947][ T5258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.608391][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.655575][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.743860][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.853143][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.926249][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.983432][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.034841][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.104087][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  194.111133][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  194.287745][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.395486][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.454972][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.548919][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.639631][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.553576][ T4264] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  195.823367][ T4264] usb 1-1: Using ep0 maxpacket: 32
[  195.943907][ T4264] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  195.974578][ T4264] usb 1-1: config 0 has no interface number 0
[  196.023021][ T4264] usb 1-1: config 0 interface 184 has no altsetting 0
[  196.042701][ T6224] netlink: 'syz.4.642': attribute type 4 has an invalid length.
[  196.243870][ T4264] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  196.300043][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.348278][ T4264] usb 1-1: Product: syz
[  196.368917][ T4264] usb 1-1: Manufacturer: syz
[  196.392818][ T4264] usb 1-1: SerialNumber: syz
[  196.432530][ T4264] usb 1-1: config 0 descriptor??
[  196.555021][ T4264] smsc75xx v1.0.0
[  196.635788][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  196.677985][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  196.739416][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.012012][ T6235] loop4: detected capacity change from 0 to 128
[  197.225010][ T6235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  197.284984][ T4264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  197.333222][ T6235] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  197.363197][ T4264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  199.755330][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  199.786616][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  200.045951][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  200.065350][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  200.159262][ T6074] device veth0_vlan entered promiscuous mode
[  200.173725][ T4264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  200.191481][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  200.224562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  200.243894][ T4264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71
[  200.357130][ T4264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  200.444331][ T4264] smsc75xx: probe of 1-1:0.184 failed with error -71
[  200.554217][ T4264] usb 1-1: USB disconnect, device number 5
[  200.584408][ T6074] device veth1_vlan entered promiscuous mode
[  200.798401][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  200.825430][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  200.998852][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  201.116450][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  201.193470][ T4264] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  201.250140][ T6074] device veth0_macvtap entered promiscuous mode
[  201.292061][ T6074] device veth1_macvtap entered promiscuous mode
[  201.488744][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.553157][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.553828][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.577448][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.619843][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.733668][ T4264] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  201.744962][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.792476][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.835531][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  201.892001][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  201.912210][ T4264] usb 1-1: config 0 descriptor??
[  202.014709][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.077233][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.158458][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.234786][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.263223][ T4392] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  202.324506][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.355627][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  202.443767][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  202.476349][ T4264] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  202.513912][ T4392] usb 5-1: Using ep0 maxpacket: 32
[  202.535162][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.563455][ T4264] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input10
[  202.623689][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.634992][ T4392] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 33, using maximum allowed: 30
[  202.635095][ T4392] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  202.635156][ T4392] usb 5-1: config 0 interface 0 has no altsetting 0
[  202.635240][ T4392] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00
[  202.635287][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.689710][ T4392] usb 5-1: config 0 descriptor??
[  202.749630][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.805869][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.861206][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.904263][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.933555][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.975601][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.013055][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.043200][ T4569] Bluetooth: hci2: command 0x0409 tx timeout
[  203.082825][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.119947][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.160051][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.182422][ T4264] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  203.223666][ T4392] wacom 0003:056A:0301.0006: unknown main item tag 0x6
[  203.232231][ T4392] wacom 0003:056A:0301.0006: ignoring exceeding usage max
[  203.280439][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.296079][ T5257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.345624][ T4392] wacom 0003:056A:0301.0006: Unknown device_type for 'HID 056a:0301'. Assuming pen.
[  203.358615][ T4264] usb 1-1: USB disconnect, device number 6
[  203.404066][ T6074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.467020][ T4392] wacom 0003:056A:0301.0006: hidraw1: USB HID v0.81 Device [HID 056a:0301] on usb-dummy_hcd.4-1/input0
[  203.490548][ T6074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.543054][ T6074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.573569][ T4392] input: Wacom Bamboo One M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0301.0006/input/input11
[  203.656555][ T6074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.854074][ T6275] fido_id[6275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  203.888298][ T6278] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  203.988077][ T4392] usb 5-1: USB disconnect, device number 8
[  204.565152][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[  204.728318][ T6282] fido_id[6282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  204.898227][ T5257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.943441][ T5257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.051249][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  205.123607][ T4349] Bluetooth: hci2: command 0x041b tx timeout
[  205.387529][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.417637][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.632683][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.653145][ T4349] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  205.684627][ T6258] chnl_net:caif_netlink_parms(): no params data found
[  205.943681][ T4349] usb 1-1: Using ep0 maxpacket: 16
[  206.093408][ T4349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.108476][ T4349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.123752][ T4349] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  206.136004][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.217241][ T4349] usb 1-1: config 0 descriptor??
[  206.418203][ T6258] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.427167][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.439170][ T6258] device bridge_slave_0 entered promiscuous mode
[  206.455546][ T6258] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.464534][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.474215][ T6258] device bridge_slave_1 entered promiscuous mode
[  206.540101][ T6258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.570382][ T6258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.585339][ T6301] loop4: detected capacity change from 0 to 4096
[  206.687834][ T6301] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  206.726040][ T4349] apple 0003:05AC:024B.0007: fixing up MacBook JIS keyboard report descriptor
[  206.759979][ T6258] team0: Port device team_slave_0 added
[  206.807734][ T4349] apple 0003:05AC:024B.0007: unknown global tag 0xe
[  206.857546][ T4349] apple 0003:05AC:024B.0007: item 0 1 1 14 parsing failed
[  206.868855][ T6258] team0: Port device team_slave_1 added
[  206.955626][ T4349] apple 0003:05AC:024B.0007: parse failed
[  206.962170][ T4349] apple: probe of 0003:05AC:024B.0007 failed with error -22
[  207.071428][ T4349] usb 1-1: USB disconnect, device number 7
[  207.213739][ T4569] Bluetooth: hci2: command 0x040f tx timeout
[  207.271806][ T6301] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  207.311895][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.409795][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.587311][ T6258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.733881][ T6258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.741652][ T6258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.016711][ T6258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.430523][ T6258] device hsr_slave_0 entered promiscuous mode
[  208.505928][ T6258] device hsr_slave_1 entered promiscuous mode
[  208.557798][ T6258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.618811][ T6258] Cannot create hsr debugfs directory
[  208.660893][ T6320] device syzkaller1 entered promiscuous mode
[  209.294742][ T4347] Bluetooth: hci2: command 0x0419 tx timeout
[  210.355238][ T6258] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  210.476694][ T6258] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  210.563456][ T4349] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  210.619655][ T6258] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  210.699969][ T6258] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  210.794970][ T4264] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  210.884364][ T4349] usb 5-1: Using ep0 maxpacket: 8
[  211.004221][ T4349] usb 5-1: config 1 interface 0 has no altsetting 0
[  211.050503][ T6324] loop0: detected capacity change from 0 to 32768
[  211.219437][ T4264] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  211.303344][ T4349] usb 5-1: string descriptor 0 read error: -22
[  211.348702][ T4349] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40
[  211.747209][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.124794][ T4347] Bluetooth: hci3: command 0x0406 tx timeout
[  213.449482][ T6258] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.493066][ T4264] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.512157][ T4264] usb 6-1: config 0 interface 0 has no altsetting 0
[  213.520267][ T4264] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  213.531286][ T4264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.545270][ T4264] usb 6-1: config 0 descriptor??
[  213.573580][ T4264] usb 6-1: can't set config #0, error -71
[  213.584327][ T4264] usb 6-1: USB disconnect, device number 2
[  213.796367][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  213.826567][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  213.912379][ T6258] 8021q: adding VLAN 0 to HW filter on device team0
[  213.922344][ T4349] hid-generic 0003:05AC:0324.0008: unknown main item tag 0x3
[  213.974613][ T4349] hid-generic 0003:05AC:0324.0008: unknown main item tag 0x5
[  213.992121][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.029702][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.043613][ T4349] hid-generic 0003:05AC:0324.0008: unknown main item tag 0x6
[  214.084001][ T4349] hid-generic 0003:05AC:0324.0008: unknown main item tag 0x4
[  214.092475][ T4349] hid-generic 0003:05AC:0324.0008: item 0 2 0 8 parsing failed
[  214.110292][ T5383] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.118827][ T5383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.177459][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.234242][ T4349] hid-generic: probe of 0003:05AC:0324.0008 failed with error -22
[  214.306733][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.375372][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.419049][ T4349] usb 5-1: USB disconnect, device number 9
[  214.494248][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.503172][ T5383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.847081][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  214.968209][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  218.411720][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  218.502828][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  218.655324][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  218.766217][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  218.877016][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  219.043910][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  219.115343][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  219.175995][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  219.214923][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  219.264146][ T6258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  220.636929][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.675128][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.844492][ T6258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.945692][   T26] audit: type=1107 audit(1780514662.082:57): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  227.164090][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.618768][ T6415] loop0: detected capacity change from 0 to 4096
[  227.679908][ T6415] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  227.907397][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  228.171095][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.787470][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.833809][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  228.880793][ T6415] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  228.922607][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.021963][ T6258] device veth0_vlan entered promiscuous mode
[  229.256984][ T6258] device veth1_vlan entered promiscuous mode
[  229.495629][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  229.537224][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  229.601184][ T6258] device veth0_macvtap entered promiscuous mode
[  229.676491][ T6258] device veth1_macvtap entered promiscuous mode
[  229.822736][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.893097][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.982975][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.037049][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.073878][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.157117][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.208723][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.284195][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.343792][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.450499][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.513672][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.593231][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.637409][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.693840][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  230.724740][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  230.763613][ T4393] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  230.777362][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  230.816022][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  230.876759][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.957359][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.014775][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.074316][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.134285][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.150008][ T4393] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  231.162799][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.192936][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.243600][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.247350][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.289134][ T4393] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  231.305074][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.345174][ T4393] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  231.373064][ T4351] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  231.382013][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.410734][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.422920][ T6258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.443146][ T4393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.478200][ T6258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.503406][ T4393] usb 5-1: config 0 descriptor??
[  231.530135][ T6258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.564996][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.582797][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.413424][ T4351] usb 1-1: Using ep0 maxpacket: 8
[  232.458549][ T6258] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.520345][ T6258] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.593714][ T6258] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.642057][ T6258] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.669089][ T4351] usb 1-1: unable to get BOS descriptor or descriptor too short
[  232.767375][ T4393] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd
[  232.784201][ T4351] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  232.809110][ T4393] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  232.824078][ T4351] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  232.883097][ T4351] usb 1-1: config 4 has no interface number 0
[  232.910381][ T4393] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  233.104591][ T4351] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  233.142200][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  233.216131][ T4351] usb 1-1: Product: syz
[  233.221020][ T4351] usb 1-1: Manufacturer: syz
[  233.273478][ T4351] usb 1-1: SerialNumber: syz
[  233.333344][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.342166][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.431052][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  233.537542][ T5383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.562519][ T5383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.620205][ T1206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  233.797981][ T4351] usb 1-1: USB disconnect, device number 8
[  237.204515][   T13] usb 5-1: reset high-speed USB device number 10 using dummy_hcd
[  237.736839][ T6454] netlink: 'syz.6.646': attribute type 3 has an invalid length.
[  238.975342][ T6461] device syzkaller1 entered promiscuous mode
[  239.114854][ T4393] usb 5-1: USB disconnect, device number 10
[  241.204852][ T4350] Bluetooth: hci0: command 0x0401 tx timeout
[  242.710906][ T6484] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  248.893282][ T6511] netlink: 'syz.6.719': attribute type 3 has an invalid length.
[  254.623368][ T6532] netlink: 25 bytes leftover after parsing attributes in process `syz.2.725'.
[  254.803790][ T6532] xt_l2tp: missing protocol rule (udp|l2tpip)
[  255.113284][ T6536] loop4: detected capacity change from 0 to 128
[  255.995593][ T1424] ieee802154 phy0 wpan0: encryption failed: -22
[  256.002594][ T1424] ieee802154 phy1 wpan1: encryption failed: -22
[  256.055383][ T6536] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  362.662833][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  362.670334][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6541/1:b..l
[  362.679030][    C0] 	(detected by 0, t=10502 jiffies, g=24169, q=106)
[  362.685737][    C0] task:syz.0.729       state:R  running task     stack:26544 pid: 6541 ppid:  4192 flags:0x00004000
[  362.697807][    C0] Call Trace:
[  362.701131][    C0]  <TASK>
[  362.704090][    C0]  __schedule+0x11ef/0x43c0
[  362.708721][    C0]  ? mark_lock+0x94/0x320
[  362.713085][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  362.719102][    C0]  ? release_firmware_map_entry+0x190/0x190
[  362.725030][    C0]  ? lock_chain_count+0x20/0x20
[  362.729922][    C0]  ? preempt_schedule+0xbc/0xd0
[  362.734819][    C0]  preempt_schedule_common+0x82/0xd0
[  362.740230][    C0]  preempt_schedule+0xbc/0xd0
[  362.744941][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  362.750613][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  362.755763][    C0]  preempt_schedule_thunk+0x16/0x18
[  362.761009][    C0]  _raw_spin_unlock+0x36/0x40
[  362.765718][    C0]  filemap_map_pages+0x1054/0x13b0
[  362.770878][    C0]  ? filemap_read_page+0x4c0/0x4c0
[  362.776027][    C0]  ? count_memcg_event_mm+0x324/0x370
[  362.781443][    C0]  ? follow_page_pte+0x320/0xc20
[  362.786427][    C0]  handle_mm_fault+0x25bc/0x4410
[  362.791409][    C0]  ? get_page+0xe0/0xe0
[  362.795608][    C0]  ? follow_page_mask+0xa6e/0x12d0
[  362.800760][    C0]  __get_user_pages+0x94b/0x11e0
[  362.805748][    C0]  ? populate_vma_page_range+0x290/0x290
[  362.811576][    C0]  ? read_lock_is_recursive+0x10/0x10
[  362.816999][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  362.822253][    C0]  populate_vma_page_range+0x213/0x290
[  362.827761][    C0]  __mm_populate+0x275/0x3b0
[  362.832417][    C0]  ? check_vma_flags+0x480/0x480
[  362.837398][    C0]  ? up_write+0x1bb/0x420
[  362.841769][    C0]  vm_mmap_pgoff+0x212/0x2d0
[  362.846395][    C0]  ? account_locked_vm+0xe0/0xe0
[  362.853110][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  362.858270][    C0]  ksys_mmap_pgoff+0x140/0x790
[  362.863076][    C0]  ? mmap_region+0x1650/0x1650
[  362.867871][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  362.873104][    C0]  do_syscall_64+0x4c/0xa0
[  362.877553][    C0]  ? clear_bhb_loop+0x30/0x80
[  362.882420][    C0]  ? clear_bhb_loop+0x30/0x80
[  362.887142][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  362.893093][    C0] RIP: 0033:0x7f1c4887de59
[  362.897613][    C0] RSP: 002b:00007f1c46ad7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  362.906060][    C0] RAX: ffffffffffffffda RBX: 00007f1c48af6fa0 RCX: 00007f1c4887de59
[  362.914063][    C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000
[  362.922075][    C0] RBP: 00007f1c48913d6f R08: ffffffffffffffff R09: 0000000000000000
[  362.930160][    C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  362.938250][    C0] R13: 00007f1c48af7038 R14: 00007f1c48af6fa0 R15: 00007ffe7f492de8
[  362.946291][    C0]  </TASK>
[  362.949331][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10523 jiffies! g24169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  362.961767][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=9275
[  362.969586][    C0] rcu: rcu_preempt kthread starved for 10524 jiffies! g24169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  362.980980][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  362.991319][    C0] rcu: RCU grace-period kthread stack dump:
[  362.997234][    C0] task:rcu_preempt     state:I stack:27536 pid:   15 ppid:     2 flags:0x00004000
[  363.006476][    C0] Call Trace:
[  363.009778][    C0]  <TASK>
[  363.012736][    C0]  __schedule+0x11ef/0x43c0
[  363.017285][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  363.022532][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  363.028455][    C0]  ? _raw_spin_unlock+0x40/0x40
[  363.033336][    C0]  ? release_firmware_map_entry+0x190/0x190
[  363.039274][    C0]  ? __mod_timer+0x91e/0xd00
[  363.043908][    C0]  schedule+0x11b/0x1e0
[  363.048098][    C0]  schedule_timeout+0x184/0x2d0
[  363.052982][    C0]  ? console_conditional_schedule+0x40/0x40
[  363.058907][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  363.064833][    C0]  ? update_process_times+0x200/0x200
[  363.070253][    C0]  ? prepare_to_swait_event+0x331/0x350
[  363.075833][    C0]  rcu_gp_fqs_loop+0x2be/0x11d0
[  363.080714][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  363.085946][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  363.092130][    C0]  ? rcu_gp_init+0x10f0/0x10f0
[  363.097013][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  363.102248][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  363.107484][    C0]  rcu_gp_kthread+0x9b/0x370
[  363.112249][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  363.118174][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  363.123316][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  363.129247][    C0]  ? __kthread_parkme+0x157/0x1b0
[  363.134303][    C0]  kthread+0x436/0x520
[  363.138395][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  363.143538][    C0]  ? kthread_blkcg+0xd0/0xd0
[  363.148167][    C0]  ret_from_fork+0x1f/0x30
[  363.152623][    C0]  </TASK>
[  363.155669][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  363.162030][    C0] Sending NMI from CPU 0 to CPUs 1:
[  363.167340][    C1] NMI backtrace for cpu 1
[  363.167395][    C1] CPU: 1 PID: 6546 Comm: iou-sqp-6539 Not tainted syzkaller #0
[  363.167412][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  363.167422][    C1] RIP: 0010:enqueue_hrtimer+0x165/0x370
[  363.167442][    C1] Code: 00 00 44 89 f9 d3 e5 43 80 7c 25 00 00 74 08 4c 89 f7 e8 8e 2d 55 00 4d 8b 3e 49 83 c7 44 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 b7 00 00 00 41 09 2f 48 8d 7b 38 48 89 f8 48 c1 e8 03
[  363.167461][    C1] RSP: 0018:ffffc90000dd0d08 EFLAGS: 00000807
[  363.167476][    C1] RAX: 0000000000000000 RBX: ffff888078c0fb40 RCX: 0000000000000002
[  363.167488][    C1] RDX: 0000000000010000 RSI: 0000000000000002 RDI: 0000000000000020
[  363.167498][    C1] RBP: 0000000000000004 R08: ffffffff8d8a06ef R09: 1ffffffff1b140dd
[  363.167510][    C1] R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000
[  363.167523][    C1] R13: 1ffff11017225478 R14: ffff8880b912a3c0 R15: ffff8880b912a284
[  363.167537][    C1] FS:  00007f5fb00226c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  363.167552][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.167564][    C1] CR2: 0000001b2ee1aff8 CR3: 0000000024641000 CR4: 00000000003506e0
[  363.167578][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  363.167588][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  363.167599][    C1] Call Trace:
[  363.167606][    C1]  <IRQ>
[  363.167614][    C1]  __hrtimer_run_queues+0x5fa/0xb70
[  363.167644][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  363.167663][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  363.167685][    C1]  hrtimer_interrupt+0x3bb/0x8d0
[  363.167716][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  363.167742][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  363.167763][    C1]  </IRQ>
[  363.167768][    C1]  <TASK>
[  363.167773][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  363.167793][    C1] RIP: 0010:lock_is_held_type+0x13a/0x190
[  363.167813][    C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  363.167826][    C1] RSP: 0018:ffffc900034a7bb8 EFLAGS: 00000206
[  363.167839][    C1] RAX: 2afb3fd348ad4200 RBX: ffff88802a019dc0 RCX: 2afb3fd348ad4200
[  363.167852][    C1] RDX: 0000000000000000 RSI: ffffffff8a2b4420 RDI: ffffffff8a7a09c0
[  363.167864][    C1] RBP: 0000000000000000 R08: ffff88802a019dc7 R09: 1ffff110054033b8
[  363.167876][    C1] R10: dffffc0000000000 R11: ffffed10054033b9 R12: 0000000000000001
[  363.167887][    C1] R13: 0000000000000246 R14: ffffffff8c31f420 R15: ffff88802a01a8d8
[  363.167911][    C1]  ___might_sleep+0xea/0x610
[  363.167927][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  363.167946][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  363.167965][    C1]  ? __might_sleep+0xf0/0xf0
[  363.167986][    C1]  ? io_run_task_work+0x29c/0x330
[  363.168006][    C1]  io_sq_thread+0xbeb/0x1240
[  363.168031][    C1]  ? io_fallback_req_func+0x210/0x210
[  363.168052][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  363.168074][    C1]  ? init_wait_entry+0xd0/0xd0
[  363.168095][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  363.168111][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  363.168129][    C1]  ? io_fallback_req_func+0x210/0x210
[  363.168145][    C1]  ret_from_fork+0x1f/0x30
[  363.168170][    C1]  </TASK>
[  363.498532][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.523562][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.631068][    C1] vkms_vblank_simulate: vblank timer overrun