last executing test programs:

41.738290446s ago: executing program 1 (id=180):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000ac0)={0x3, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0203f602310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000001000000000000000000000000000001020000000000000002000100000000000000070c000001fc05000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0)

41.649993788s ago: executing program 1 (id=182):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6}]})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
write$rfkill(r0, &(0x7f0000000240)={0x7, 0x9, 0x0, 0x1, 0x1}, 0x8)

39.422313543s ago: executing program 1 (id=189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = epoll_create(0x3ff)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x10})
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
write$proc_mixer(r7, 0x0, 0x0)
dup3(r8, r7, 0x0)
close(r0)

39.144758199s ago: executing program 1 (id=191):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x804000, &(0x7f0000000080)=ANY=[], 0x2, 0xc2d, &(0x7f00000000c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
creat(&(0x7f0000000d00)='./bus\x00', 0x44)
mount(&(0x7f0000000d40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000d80)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f0000000dc0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000e80)=[{&(0x7f0000000e00)="3c0a482db199f9ecbe96a173e2e7e405b0a9780a5fd26ec172f669d90a5d3f807102", 0x22}], 0x1, 0x0, 0x0, 0x9)

38.772164209s ago: executing program 1 (id=195):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_io_uring_setup(0xf08, &(0x7f0000000040)={0x0, 0x2d85, 0x2, 0x2, 0x800000c3}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff70)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCXONC(r0, 0x540a, 0x2)
r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x0, 0x17, 0x2, "fd84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)={0x40, 0xf, 0x2, "5c91"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TCXONC(r0, 0x540a, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000"], 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x1b7b, &(0x7f0000000880)={0x0, 0xd70, 0x1f280, 0x0, 0x1c7})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='fdinfo/3\x00')

38.242828252s ago: executing program 1 (id=197):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

38.063528176s ago: executing program 32 (id=197):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

36.24294717s ago: executing program 2 (id=215):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = epoll_create(0x3ff)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x10})
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0)
close(r0)

35.739443643s ago: executing program 2 (id=217):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x2})

35.547195727s ago: executing program 2 (id=218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="68000000000905060000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c00048008000100000000012000022801000100706f6c696379300008000200000000ff080003000000001e", 0x68}], 0x1}, 0x4000080)

35.405154951s ago: executing program 2 (id=219):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32], 0x67, 0xc54, &(0x7f0000002500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
capset(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0xdff4092e7c6caadc)
mount(0x0, &(0x7f0000000380)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/page_tables/kernel\x00', 0x0, 0x10c)
read(r2, &(0x7f0000000480)=""/153, 0x99)

27.965071684s ago: executing program 2 (id=252):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000300), 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000002900000004000000840200040000000004020003"], 0x30}, 0x40)
syz_io_uring_setup(0x4afb, 0x0, &(0x7f0000000a80), &(0x7f0000001880), &(0x7f0000000000))
close(0x3)

27.374729679s ago: executing program 2 (id=255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
close(r7)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"})

27.035861906s ago: executing program 33 (id=255):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x1, 0xffe2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0xd, 0x2, 0x6, 0x7, 0x3f5, 0x200, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x100, 0x0)
close(r7)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0)
socket$unix(0x1, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000740)={'syzkaller0\x00', @random="2b0100004ec6"})

22.727945862s ago: executing program 4 (id=272):
r0 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
userfaultfd(0x80001)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x20)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)

22.646725895s ago: executing program 4 (id=273):
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x7, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="850000009e0000006a0a00ff000000006911c00e00000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000500a801000000009500000000000000"], &(0x7f0000001100)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001140)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

22.543808957s ago: executing program 4 (id=274):
syz_read_part_table(0x5f2, &(0x7f0000000000)="$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")

22.246182354s ago: executing program 4 (id=277):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x804000, &(0x7f0000000080)=ANY=[], 0x2, 0xc2d, &(0x7f00000000c0)="$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")
creat(&(0x7f0000000d00)='./bus\x00', 0x44)
mount(&(0x7f0000000d40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000d80)='./bus\x00', 0x0, 0x321001, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000e80)=[{&(0x7f0000000e00)="3c0a482db199f9ecbe96a173e2e7e405b0a9780a5fd26ec172f669d90a5d3f807102", 0x22}], 0x1, 0x0, 0x0, 0x9)

22.050699129s ago: executing program 4 (id=278):
syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a4, &(0x7f0000003a00)="$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")
r0 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r0, 0x105, 0x10000839, 0xffffffffffffffff, 0x0)

21.375918746s ago: executing program 4 (id=281):
unshare(0x26020480)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x2})

21.247003499s ago: executing program 34 (id=281):
unshare(0x26020480)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x7, 0x2})

3.577703362s ago: executing program 7 (id=382):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x4010, 0x0)
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ttyUSB0\x00', 0x12df00, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x2c, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1])

3.221399091s ago: executing program 6 (id=388):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.215534131s ago: executing program 0 (id=389):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="3801"], 0x138)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000500)='./file0\x00')
syz_read_part_table(0x5c3, &(0x7f0000000580)="$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")

3.062121235s ago: executing program 3 (id=391):
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000004c0)=0x100000001, 0x4)
connect$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000540)=[@timestamp, @sack_perm, @mss={0x2, 0x8004}, @window={0x3, 0x0, 0x8001}, @mss={0x2, 0x2}, @mss={0x2, 0x6}, @timestamp, @window={0x3, 0x218, 0x5}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000580), 0x4)
write(r1, &(0x7f00000005c0)="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", 0x26f)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0)
connect$inet(r1, &(0x7f0000000e00)={0x2, 0x4e23, @multicast2}, 0x10)

2.906475329s ago: executing program 3 (id=392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x42c01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000002c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"5e2a161b31f70bf30e1d927bb606f34efd3376aaabd9eb74ecaa3addcc999c36e7427b92d397577e118d163e6d7da212a9d3a242904e4bcfcfda295e1b1c2d43b66f62e46e7a37337a44694c9b7e15af1577e2715956f44aa7b4bae48788da9406c93d5313121fdfc8e83eaa50a17bef676f45cfee619c0cca8e763e89ff9af230242e6b2330d472167638c2cc64d788c1040322ae0e2204cf0632525c469a87c0c39d2160eea082af1cc195db217670b3d588c1c4449207506d6913d9cbfdb57e6984d9514d80b18056bc27f6c747c6de3bd7080fed3e836fbe2b6bf498da0d6dbe829e6c1fab999c3f38f657c7768b8dbbc51f39959a0b0bf7eee0e75473e17e0a0dffe16840151d5d7db9d3ebf0e12500005d961b2006b316e0eb5d55e70c763415d247e8d418be0a7139816f97d80cc733462550eeb41a15f7ddc65be4722ffe62751213d591509868df56995b3b80fb291b78acbee70451828bd0c0419153922a8b122b554266896008adb449b2e2efa1315ef2f4ce2e7cb87994200d259fe021b69923ae13edd59cfdf3f0b15754a58d01409e1588619088fe4ebe552ad9885dd5a5cdf055b5b17b54548e41d68ef7d8435321056a6f6e0588059e99c4c6d92a6e3296320d202aaa4827a383ef6a654b3493c6138346dac1faa634534935a102271b412c44527532ea4c0e347e9f414d075ac46d393f35f8459e1cb5d9935f2c428765b2465c44cd8108f9bcd470ab009a30a93f2fc8e61556b8169957b0d660c2582f8d750cfc336827307c2823490f21f05c5d3d45496ce800f05c266c00656f30a17aaef1eea051c6ea1e3203819ebb4ac4681be21b3e90f38bebb96596165a13839fcd0496cc3891c30f3fc4ca3dd665fe9f41eca1672da249ea30f45e8275c9b570055b45bb26f73732b7f94122b104e4f37dee1634b81a203367c6b68afb7c77d28fcccadd247d636e6aa1bbfab62b9a18980a6f9502dd2e2348a0cc4bec567300ce53ae19562a818d01340ca918d0cfa3fd9b96693448c196b31399d06e65673929f97f9d8e5e7dbc154e39c4b1363d46fc4a85c88f30e795f4423c63adf6fb471d5501cad367148d68af1c20f187196c02b3c558a64d06ae3b3df58551e8b05bc086840e0c1d00dd789288df6fb097b3fd3437682801023eeae6a6e87b419bf6f97c7d40c3af777ce9e2311f9e05caad86a6e0cf88a53acc9d3c118080238bd9867860d4117ce46d11ba66f4ad76348953e3e582298e79d08573d99d84bf39175e4c5ddae89c3922f7f828a4a7c6b7698b1a52228181dbaa61b65bb735c5d976431656f58a52755bb462f0d202a73b5fd6e04e55ade4bef4c1fdcc460ce280dc7e216a7843b726e0063842fea9de4a412f4b0c27ae7638a62ce255c3423c7ee290d338945c24f918ea58a19b100d7aef9ab9827eeb4cb4a795"})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000780)=0x1fff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.591170927s ago: executing program 3 (id=395):
socket$inet6_tcp(0xa, 0x1, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/functions/rndis.usb0/dev_addr\x00', 0x1, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000022480)={0x3a, 0x2e000000, 0x0, {0x3, 0x0, 0x7, 0x5}}, 0x20)

2.377311892s ago: executing program 0 (id=397):
r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})

2.377142642s ago: executing program 3 (id=398):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x281c4c4, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb420004b97bf4563c4511958b8fe8d9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=")
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000021c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6)
add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x0, 0x20)

2.199445186s ago: executing program 6 (id=400):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

2.150296157s ago: executing program 0 (id=401):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xa8b73000)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

2.086463279s ago: executing program 6 (id=402):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e23}, {0x2, 0x201, @local}, {0x2, 0x0, @empty}, 0xa, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x200000000000, 0xe6, 0x7})
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000100)=@generic={0x0, 0x2, 0x2})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa041, 0xd)
close_range(r0, 0xffffffffffffffff, 0x0)

1.838167035s ago: executing program 0 (id=404):
openat(0xffffffffffffff9c, 0x0, 0x40040, 0x59)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
r1 = fsopen(&(0x7f0000000880)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x3)
fchdir(r2)
r3 = fanotify_init(0x1a, 0x1)
add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x1}, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x4, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0xfffffd75, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000010)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0xf0)
fanotify_mark(r3, 0x541, 0x1023, r7, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r8, 0x8b2a, &(0x7f0000000940))
socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)

1.766237037s ago: executing program 6 (id=405):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, 0x0, &(0x7f0000000540)='GPL\x00', 0x6, 0xff7, &(0x7f00000016c0)=""/4087, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.706450588s ago: executing program 5 (id=406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
close(r0)

1.606401391s ago: executing program 6 (id=407):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x20000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4000000000002}}}, 0xb8}}, 0x0)

1.478946394s ago: executing program 5 (id=408):
inotify_init1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000c40)="$eJzs3TFre1UUAPDzkjSJOqSIi+LwQAen0rq6NEoFsZMSQR002BYkCYUWAlY0duoncPR7+BFcXPwGgqvg1g6VJy/vvSa1SVtqrNL/7zed3nvPfSf3lrRLTj5/dTTYO0zi9PzXaLeTqG3HdlwksR61qHwXjQAAno6LLIvWgzIbtZUXAwA8ivzv/x9Z4a61D/s/AQD4v/nw40/e7+7u7nyQpu14uXM27iURMTob94r57kF8GcPYj83oxGVEdqWI331vdycaaW49Xh9Nxr08c/TZz+X+3d8jpvlb0Yn1xflbaeEq//mqujS6B2vVD514aXH+m3/Pj9Ekes1447W5+jeiE798EYcxjL3Ic2f5326l6TvZ9+dff5o/Js9PatFrTdfNZPVHuhIAAAAAAAAAAAAAAAAAAAAAAJ4BG2maFO17pv178qFp/5xxr345nd9IK/P9fSZVf6Ck2qjoD5RF2aJnksUPVX+dzTRNs3LhLL8RrzR8sQAAAAAAAAAAAAAAAAAAAADkjr86GfSHw/2jlQRVN4DqY/0P3Wd7NrIWEYN+ffmGrYjaPZ81320gr/XWxdFoxIqO5a7gubyele/cml3uR1EE1cXsJyt81otvF5ueDPppOVUd8qCf3HWG7erifpyfasY/LSyb/kpcZuXIN5Ffd7SvSr2e1VzRaTRfWDj1Z5Zl99vnrd+KOypHkmmLjfs9fa0MFr7APGjfvIuflm+49C2jvqr3HgAAAAAAAAAAAAAAAAAA4LrZh34XTJ7emlr714oCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEc2+/7/KmhHxPWRG8GkyE0iYumaMmjG0fF//RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+v4KAAD//8HoSHM=")
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0xfca804a0, 0x0, 0x8, &(0x7f0000000500), &(0x7f0000000540)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f40)={r3, 0x0, 0x0, 0x88, &(0x7f0000000240), &(0x7f0000000580)=""/136, 0x2, 0x0, 0x88, 0xa, &(0x7f0000000640)="cbe6a39f35545d1458b984f73b03daa7a4ce85589615704bcc7736d457da54aa1887e0466c7ab22ab259ce907270ce3d4370c326463f420978ce64bfa8d692956e927e0cffe0c48499a5f39538b7dd888b82dd8fdfcceb44b50fcd8191298b2d5ba99c41db5a701600db74e20e7f5be46f00ce25299f34d5c8cbbeb838e8b732ceb3521b7cf742cc", &(0x7f0000000700)="5eecf275119298c39ca2", 0x5, 0x0, 0x5}, 0x50)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab08af2}, 0x48800)

1.410713955s ago: executing program 6 (id=409):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x320f, 0x5041, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x4}}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = inotify_init()
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17)
close_range(r0, 0xffffffffffffffff, 0x0)

1.250245039s ago: executing program 3 (id=410):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

903.887448ms ago: executing program 5 (id=411):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6)
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa)
close(r0)

794.35555ms ago: executing program 7 (id=412):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

682.618063ms ago: executing program 7 (id=413):
r0 = socket(0x2, 0x3, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0x62, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x12, 0xf989, "4c0431c0966f23a9d1270c97cfe1"}, @exp_smc={0xfe, 0x6}, @eol, @fastopen={0x22, 0xe, "c65f77fcfb0c59f6baec7264"}]}}}}}}}, 0x0)

677.607723ms ago: executing program 5 (id=414):
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000640), 0x12)
r3 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000000c0)=0x202, 0x12)

502.252187ms ago: executing program 5 (id=415):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000, 0x4, 0x0, 0x6, 0xfffffffe})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)

502.133867ms ago: executing program 7 (id=416):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x30000051)

491.059888ms ago: executing program 0 (id=417):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, 0x0, &(0x7f0000000540)='GPL\x00', 0x6, 0xff7, &(0x7f00000016c0)=""/4087, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

426.291519ms ago: executing program 7 (id=418):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
close(r0)

366.334021ms ago: executing program 5 (id=419):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

252.425614ms ago: executing program 7 (id=420):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x281c4c4, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb420004b97bf4563c4511958b8fe8d9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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")
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000021c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000002200), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002240)=0x6)
add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x0, 0x20)

234.032505ms ago: executing program 0 (id=421):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f00000001c0)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x14000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)
syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x14fd, &(0x7f0000000680)="$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")

0s ago: executing program 3 (id=422):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000003080)=@raw={'raw\x00', 0xc01, 0x3, 0x1250, 0x1100, 0x5002004a, 0x0, 0x1100, 0x0, 0x11b8, 0x3c8, 0x3c8, 0x11b8, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7, 0x3], 0x6, 0x2}, {0x2, [0x0, 0x6, 0xc, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12b0)

kernel console output (not intermixed with test programs):

link becomes ready
[   66.919364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.930704][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.940229][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.949008][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.958189][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.969597][ T4194] device veth1_macvtap entered promiscuous mode
[   67.009896][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.018685][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.030067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.038937][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.047112][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.059242][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.072949][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.085949][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.106337][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.119575][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.128818][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.137877][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.146788][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.159068][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.169622][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.182326][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.195360][ T4195] device veth0_macvtap entered promiscuous mode
[   67.210339][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.219804][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.228867][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.237708][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.251922][ T4261] Bluetooth: hci1: command 0x040f tx timeout
[   67.258761][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[   67.266573][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.275464][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.289870][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.300011][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.308626][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.320004][ T4195] device veth1_macvtap entered promiscuous mode
[   67.339296][ T4261] Bluetooth: hci4: command 0x040f tx timeout
[   67.348003][ T4261] Bluetooth: hci2: command 0x040f tx timeout
[   67.354574][ T4261] Bluetooth: hci3: command 0x040f tx timeout
[   67.359610][ T4185] device veth0_vlan entered promiscuous mode
[   67.374629][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.384319][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.392559][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.422470][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.442985][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.460432][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.472181][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.482384][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.494505][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.505779][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.518412][ T4185] device veth1_vlan entered promiscuous mode
[   67.548308][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.556858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.565594][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.596654][  T430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.605557][  T430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.614529][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.625873][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.637486][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.648003][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.659738][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.673512][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.681859][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.682884][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.689683][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.699228][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.713442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.723049][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.731926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.739645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.750883][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.777386][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.786341][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.795705][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.804552][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.838176][ T4187] device veth0_vlan entered promiscuous mode
[   67.857916][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.867399][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.878127][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.888929][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.897962][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.907963][ T4185] device veth0_macvtap entered promiscuous mode
[   67.927761][ T4187] device veth1_vlan entered promiscuous mode
[   67.952719][  T430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.976982][ T4185] device veth1_macvtap entered promiscuous mode
[   67.986412][  T430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.016066][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.027523][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.041019][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.049832][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.085190][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.097329][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.107513][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.120102][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.130252][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.142090][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.153626][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.171545][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.172191][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.182048][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.182083][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.182097][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.182109][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.182122][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.183292][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.260182][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.278911][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.284087][ T4297] loop1: detected capacity change from 0 to 128
[   68.288153][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.304989][ T4297] =======================================================
[   68.304989][ T4297] WARNING: The mand mount option has been deprecated and
[   68.304989][ T4297]          and is ignored by this kernel. Remove the mand
[   68.304989][ T4297]          option from the mount to silence this warning.
[   68.304989][ T4297] =======================================================
[   68.319589][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.343219][ T4297] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   68.356513][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.369285][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.387272][ T4297] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   68.389956][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.410531][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.419519][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.440970][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.466240][ T4300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   68.470753][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.504685][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.519247][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.563098][ T4187] device veth0_macvtap entered promiscuous mode
[   68.588040][ T4187] device veth1_macvtap entered promiscuous mode
[   68.616492][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.648219][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.660095][ T4300] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer.
[   68.688248][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.699652][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.709638][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.720480][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.730559][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.741748][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.754967][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.845009][ T4303] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   68.854340][ T4303] FAT-fs (loop1): Filesystem has been set read-only
[   68.881696][ T4303] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   68.928726][ T4303] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[   69.045955][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.198126][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.273523][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.322268][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.383447][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[   69.389693][ T4261] Bluetooth: hci1: command 0x0419 tx timeout
[   69.397546][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.410670][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.421253][ T4268] Bluetooth: hci2: command 0x0419 tx timeout
[   69.427355][ T4268] Bluetooth: hci4: command 0x0419 tx timeout
[   69.427501][ T4262] Bluetooth: hci3: command 0x0419 tx timeout
[   69.447874][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.458489][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.473055][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.484160][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.496244][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.507312][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.519843][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.571896][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.580553][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.588893][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.604774][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.623458][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.643125][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.653654][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.667467][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.691795][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.850505][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.866287][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.902579][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.904722][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.912184][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.947246][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.956546][ T4317] loop2: detected capacity change from 0 to 1024
[   69.964926][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.002056][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.009860][ T4317] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   70.020124][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.093445][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.114492][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.139469][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.173530][ T4317] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none.
[   70.225961][ T4329] loop1: detected capacity change from 0 to 16
[   70.418562][ T4329] erofs: (device loop1): mounted with root inode @ nid 36.
[   71.491380][    C0] sched: RT throttling activated
[   71.508995][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[   71.516180][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[   74.783901][ T4355] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[   75.523893][ T4357] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   75.566771][ T4360] loop3: detected capacity change from 0 to 512
[   75.583441][ T4363] loop0: detected capacity change from 0 to 512
[   75.602596][ T1111] rxe_eth0 speed is unknown, defaulting to 1000
[   75.611325][ T4357] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   75.780741][ T4360] EXT4-fs (loop3): inline encryption not supported
[   75.978829][ T4360] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   75.988065][ T4360] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   75.996737][ T4360] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   76.061413][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   76.081401][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.091400][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.111415][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.121402][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.131405][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   76.141401][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   77.361419][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   77.381424][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   77.542028][ T4360] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[   77.597289][ T4360] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.16: invalid indirect mapped block 2683928664 (level 1)
[   77.722119][ T4360] EXT4-fs (loop3): Remounting filesystem read-only
[   77.729288][ T4360] EXT4-fs (loop3): 1 truncate cleaned up
[   77.794249][ T4360] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.jqfmt=vfsold,jqfmt=vfsold,nobarrier,mblk_io_submit,noload,errors=remount-ro,mblk_io_submit,,. Quota mode: writeback.
[   77.915227][ T4360] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[   77.929680][ T4395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   78.541399][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!!
[   80.343893][ T4438] device syzkaller0 entered promiscuous mode
[   80.393723][ T4438] tipc: Started in network mode
[   80.398644][ T4438] tipc: Node identity 1e2d529504e6, cluster identity 4711
[   80.479440][ T4438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.521700][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   80.607737][ T4438] tipc: Resetting bearer <eth:syzkaller0>
[   80.651576][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.667247][ T4437] tipc: Resetting bearer <eth:syzkaller0>
[   80.704380][ T4437] tipc: Disabling bearer <eth:syzkaller0>
[   80.911438][   T21] usb 3-1: Using ep0 maxpacket: 32
[   80.931002][ T4463] kvm: pic: non byte write
[   81.061658][   T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   81.078852][   T21] usb 3-1: config 0 has no interface number 0
[   81.172048][ T4258] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   81.281702][   T21] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[   81.312615][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.324874][   T21] usb 3-1: Product: syz
[   81.346315][   T21] usb 3-1: Manufacturer: syz
[   81.350931][   T21] usb 3-1: SerialNumber: syz
[   81.363547][   T21] usb 3-1: config 0 descriptor??
[   81.371581][ T4261] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   81.421910][   T21] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   81.445568][   T21] usb 3-1: selecting invalid altsetting 1
[   81.455159][   T21] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   81.489528][   T21] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   81.500560][   T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   81.510612][   T21] usb 3-1: media controller created
[   81.546117][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   81.555258][ T1111] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   81.574144][ T4258] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   81.594272][ T4258] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   81.616748][ T4258] usb 5-1: config 0 interface 0 has no altsetting 0
[   81.625034][ T4258] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[   81.631516][ T4261] usb 4-1: Using ep0 maxpacket: 16
[   81.639579][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.655771][ T4258] usb 5-1: config 0 descriptor??
[   81.672073][ T4461] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   81.761703][ T4261] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.800116][ T4261] usb 4-1: config 0 interface 0 has no altsetting 0
[   81.825527][ T4261] usb 4-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[   81.847920][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.872914][ T4261] usb 4-1: config 0 descriptor??
[   81.929238][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'.
[   81.979041][ T4461] device syz_tun entered promiscuous mode
[   81.986338][ T1111] usb 2-1: unable to get BOS descriptor or descriptor too short
[   82.031580][ T1111] usb 2-1: not running at top speed; connect to a high speed hub
[   82.121880][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.136815][ T4468] Zero length message leads to an empty skb
[   82.147535][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   82.171537][ T4258] usbhid 5-1:0.0: can't add hid device: -71
[   82.178793][ T4258] usbhid: probe of 5-1:0.0 failed with error -71
[   82.219639][ T4258] usb 5-1: USB disconnect, device number 2
[   82.281659][ T4261] usbhid 4-1:0.0: can't add hid device: -71
[   82.289566][ T4261] usbhid: probe of 4-1:0.0 failed with error -71
[   82.378302][ T4261] usb 4-1: USB disconnect, device number 2
[   82.482776][ T1111] usb 2-1: string descriptor 0 read error: -22
[   82.492492][ T1111] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   82.504344][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.575901][ T1111] usb 2-1: 0:2 : does not exist
[   82.732466][   T21] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[   82.745164][   T21] zl10353_read_register: readreg error (reg=127, ret==-110)
[   82.791652][ T4440] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[   82.884914][   T21] usb 3-1: USB disconnect, device number 2
[   83.466884][ T4459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'.
[   83.496383][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   83.841599][ T4266] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   83.905115][ T4499] tmpfs: Bad value for 'nr_inodes'
[   84.081495][ T4266] usb 5-1: Using ep0 maxpacket: 16
[   84.351951][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.362560][ T4266] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   84.382987][ T4258] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.384843][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.395696][ T4510] rxe_eth0 speed is unknown, defaulting to 1000
[   84.419415][ T4266] usb 5-1: Product: syz
[   84.429579][ T4266] usb 5-1: Manufacturer: syz
[   84.442128][ T1111] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   84.445817][ T4266] usb 5-1: SerialNumber: syz
[   84.476453][ T4266] usb 5-1: config 0 descriptor??
[   84.486971][ T4511] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   84.491724][   T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[   84.526274][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   84.551407][   T23] usb 4-1: Product: syz
[   84.555756][   T23] usb 4-1: Manufacturer: syz
[   84.612396][   T23] usb 4-1: selecting invalid altsetting 1
[   84.619056][   T23] dvb_ttusb_budget: ttusb_init_controller: error
[   84.641638][ T4258] usb 1-1: Using ep0 maxpacket: 32
[   84.653714][   T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   84.699872][   T23] DVB: Unable to find symbol cx22700_attach()
[   84.719748][ T4515] rxe_eth0 speed is unknown, defaulting to 1000
[   84.731653][ T1111] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[   84.750566][   T23] DVB: Unable to find symbol tda10046_attach()
[   84.762506][   T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   84.770805][ T1111] usb 2-1: USB disconnect, device number 2
[   84.779162][ T4258] usb 1-1: config index 0 descriptor too short (expected 19, got 18)
[   84.904028][ T4487] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[   84.915997][   T23] usb 4-1: USB disconnect, device number 3
[   84.971674][ T4258] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[   84.974011][ T4266] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   84.991011][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.001931][ T4258] usb 1-1: Product: syz
[   85.006129][ T4258] usb 1-1: Manufacturer: syz
[   85.020938][ T4258] usb 1-1: SerialNumber: syz
[   85.025094][ T4266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.047525][ T4258] usb 1-1: config 0 descriptor??
[   85.081842][ T4266] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   85.093991][ T4258] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[   85.100090][ T4266] usb 5-1: media controller created
[   85.132444][ T4258] dvb-usb: bulk message failed: -22 (2/0)
[   85.144429][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.161979][ T4258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   85.182421][ T4491] dtv5100: wlen = 0, aborting.
[   85.232325][ T4258] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[   85.240499][ T4258] usb 1-1: media controller created
[   85.245208][ T4266] zl10353_read_register: readreg error (reg=127, ret==0)
[   85.262223][ T4266] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   85.271883][ T4258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.290712][ T4266] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   85.305705][ T4497] dtv5100: wlen = 2000, aborting.
[   85.323647][ T4258] usb 1-1: selecting invalid altsetting 7
[   85.329424][ T4258] cxusb: set interface failed
[   85.330802][ T4266] usb 5-1: USB disconnect, device number 3
[   85.348197][ T4258] dvb-usb: bulk message failed: -22 (1/0)
[   85.438143][ T4266] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   85.448853][ T4258] DVB: Unable to find symbol lgdt330x_attach()
[   85.466759][ T4258] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[   85.605854][ T4527] device syzkaller0 entered promiscuous mode
[   85.615783][ T4527] tipc: Started in network mode
[   85.620698][ T4527] tipc: Node identity 4a0280af3655, cluster identity 4711
[   85.631592][ T4258] rc_core: IR keymap rc-dvico-portable not found
[   85.636915][ T4527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.641931][ T4258] Registered IR keymap rc-empty
[   85.656730][ T4258] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[   85.674045][ T4525] tipc: Resetting bearer <eth:syzkaller0>
[   85.696377][ T4258] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5
[   85.710160][ T4525] tipc: Disabling bearer <eth:syzkaller0>
[   85.725642][ T4530] ptp ptp0: max value is 20
[   85.729149][ T4258] dvb-usb: schedule remote query interval to 100 msecs.
[   85.737501][ T4258] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[   85.768885][ T4258] usb 1-1: USB disconnect, device number 2
[   85.848131][ T4258] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[   86.061221][ T4543] FAULT_INJECTION: forcing a failure.
[   86.061221][ T4543] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   86.097907][ T4543] CPU: 1 PID: 4543 Comm: syz.4.64 Not tainted syzkaller #0
[   86.105165][ T4543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   86.115252][ T4543] Call Trace:
[   86.118556][ T4543]  <TASK>
[   86.121513][ T4543]  dump_stack_lvl+0x188/0x250
[   86.126225][ T4543]  ? show_regs_print_info+0x20/0x20
[   86.131592][ T4543]  ? load_image+0x410/0x410
[   86.136147][ T4543]  ? __lock_acquire+0x7d40/0x7d40
[   86.141223][ T4543]  should_fail+0x383/0x4b0
[   86.145681][ T4543]  prepare_alloc_pages+0x1e3/0x5b0
[   86.150838][ T4543]  __alloc_pages+0x11b/0x480
[   86.155470][ T4543]  ? zone_statistics+0x170/0x170
[   86.160466][ T4543]  ? alloc_pages+0x452/0x560
[   86.165112][ T4543]  __vmalloc_node_range+0x4b1/0x8b0
[   86.170363][ T4543]  ? kvm_dev_ioctl+0x165/0x20a0
[   86.175255][ T4543]  __vmalloc+0x76/0x80
[   86.179355][ T4543]  ? kvm_dev_ioctl+0x165/0x20a0
[   86.184241][ T4543]  kvm_dev_ioctl+0x165/0x20a0
[   86.188974][ T4543]  ? __lock_acquire+0x7d40/0x7d40
[   86.194038][ T4543]  ? hardware_enable_nolock+0x130/0x130
[   86.199623][ T4543]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[   86.205645][ T4543]  ? lock_chain_count+0x20/0x20
[   86.210530][ T4543]  ? bpf_lsm_file_ioctl+0x5/0x10
[   86.215491][ T4543]  ? security_file_ioctl+0x7c/0xa0
[   86.220643][ T4543]  ? hardware_enable_nolock+0x130/0x130
[   86.226221][ T4543]  __se_sys_ioctl+0xfa/0x170
[   86.230838][ T4543]  do_syscall_64+0x4c/0xa0
[   86.235282][ T4543]  ? clear_bhb_loop+0x30/0x80
[   86.239983][ T4543]  ? clear_bhb_loop+0x30/0x80
[   86.244693][ T4543]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   86.250761][ T4543] RIP: 0033:0x7f67ccb9d559
[   86.255210][ T4543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   86.274944][ T4543] RSP: 002b:00007f67cadf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   86.283395][ T4543] RAX: ffffffffffffffda RBX: 00007f67cce24fa0 RCX: 00007f67ccb9d559
[   86.291392][ T4543] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[   86.299386][ T4543] RBP: 00007f67ccc348b0 R08: 0000000000000000 R09: 0000000000000000
[   86.307463][ T4543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.315452][ T4543] R13: 00007f67cce25038 R14: 00007f67cce24fa0 R15: 00007ffeda91d768
[   86.323466][ T4543]  </TASK>
[   86.605994][ T4555] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.707500][ T1352] cfg80211: failed to load regulatory.db
[   86.841439][ T1111] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   86.861983][ T4559] loop0: detected capacity change from 0 to 4096
[   86.868440][ T4557] rxe_eth0 speed is unknown, defaulting to 1000
[   86.998797][ T4559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   87.045555][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'.
[   87.221867][ T1111] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.381686][ T1111] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[   87.400241][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   87.435649][ T1111] usb 5-1: Product: syz
[   87.439871][ T1111] usb 5-1: Manufacturer: syz
[   87.452138][ T4579] loop1: detected capacity change from 0 to 8
[   87.511725][   T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   87.538685][ T1111] usb 5-1: selecting invalid altsetting 1
[   87.548316][ T1111] dvb_ttusb_budget: ttusb_init_controller: error
[   87.562359][ T1111] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   87.735749][ T4553] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[   87.759377][ T1111] DVB: Unable to find symbol cx22700_attach()
[   87.845348][ T4592] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.860958][ T1111] DVB: Unable to find symbol tda10046_attach()
[   87.871831][ T1111] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   87.912339][ T1111] usb 5-1: USB disconnect, device number 4
[   87.921629][   T23] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   87.948145][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[   87.985326][   T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[   88.029211][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.039176][ T4594] device syzkaller0 entered promiscuous mode
[   88.048405][   T23] usb 1-1: config 0 descriptor??
[   88.057309][ T4594] tipc: Started in network mode
[   88.081728][ T4572] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   88.088895][ T4594] tipc: Node identity beec7096b8a3, cluster identity 4711
[   88.104753][ T4594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.137148][ T4594] tipc: Resetting bearer <eth:syzkaller0>
[   88.140701][ T4593] tipc: Resetting bearer <eth:syzkaller0>
[   88.167280][ T4593] tipc: Disabling bearer <eth:syzkaller0>
[   88.350419][ T4604] loop1: detected capacity change from 0 to 512
[   88.371850][ T1111] Bluetooth: hci1: command 0x0406 tx timeout
[   88.494056][ T4604] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   88.511518][ T4604] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.562161][   T23] wacom 0003:056A:0057.0001: ignoring exceeding usage max
[   88.583551][ T4604] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.88: corrupted inode contents
[   88.618207][ T4604] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #2: comm syz.1.88: mark_inode_dirty error
[   88.630980][ T4613] loop3: detected capacity change from 0 to 764
[   88.635400][   T23] wacom 0003:056A:0057.0001: hidraw0: USB HID v0.ee Joystick [HID 056a:0057] on usb-dummy_hcd.0-1/input0
[   88.657826][ T4604] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #2: comm syz.1.88: corrupted inode contents
[   88.710053][ T4604] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.88: mark_inode_dirty error
[   88.764506][ T1111] usb 1-1: USB disconnect, device number 3
[   88.844010][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   88.867606][ T4618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   88.972212][ T4622] device syzkaller0 entered promiscuous mode
[   88.986625][ T4616] fido_id[4616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   89.030480][ T4624] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.056036][ T4622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.086005][ T4622] tipc: Resetting bearer <eth:syzkaller0>
[   89.121843][ T4620] tipc: Resetting bearer <eth:syzkaller0>
[   89.131536][   T23] usb 5-1: Using ep0 maxpacket: 32
[   89.142176][ T4620] tipc: Disabling bearer <eth:syzkaller0>
[   89.195020][ T4631] FAULT_INJECTION: forcing a failure.
[   89.195020][ T4631] name failslab, interval 1, probability 0, space 0, times 1
[   89.209100][ T4631] CPU: 0 PID: 4631 Comm: syz.1.99 Not tainted syzkaller #0
[   89.216335][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.226407][ T4631] Call Trace:
[   89.229812][ T4631]  <TASK>
[   89.232761][ T4631]  dump_stack_lvl+0x188/0x250
[   89.237472][ T4631]  ? show_regs_print_info+0x20/0x20
[   89.242697][ T4631]  ? load_image+0x410/0x410
[   89.247228][ T4631]  ? __might_sleep+0xf0/0xf0
[   89.251839][ T4631]  ? __lock_acquire+0x7d40/0x7d40
[   89.256898][ T4631]  should_fail+0x383/0x4b0
[   89.261358][ T4631]  should_failslab+0x5/0x20
[   89.266169][ T4631]  slab_pre_alloc_hook+0x51/0xc0
[   89.271143][ T4631]  kmem_cache_alloc_trace+0x47/0x290
[   89.276446][ T4631]  ? __list_lru_init+0x535/0xac0
[   89.281398][ T4631]  __list_lru_init+0x535/0xac0
[   89.286167][ T4631]  alloc_super+0x787/0x970
[   89.290602][ T4631]  ? kill_litter_super+0xa0/0xa0
[   89.295551][ T4631]  sget_fc+0x2d4/0x6f0
[   89.299647][ T4631]  ? kill_litter_super+0xa0/0xa0
[   89.304620][ T4631]  ? proc_reconfigure+0x370/0x370
[   89.309671][ T4631]  get_tree_nodev+0x26/0x160
[   89.314291][ T4631]  vfs_get_tree+0x88/0x270
[   89.318736][ T4631]  do_new_mount+0x247/0xa40
[   89.323281][ T4631]  __se_sys_mount+0x2e3/0x3d0
[   89.327996][ T4631]  ? __x64_sys_mount+0xc0/0xc0
[   89.332812][ T4631]  ? lockdep_hardirqs_on+0x94/0x140
[   89.338045][ T4631]  ? __x64_sys_mount+0x1c/0xc0
[   89.342830][ T4631]  do_syscall_64+0x4c/0xa0
[   89.347241][ T4631]  ? clear_bhb_loop+0x30/0x80
[   89.351913][ T4631]  ? clear_bhb_loop+0x30/0x80
[   89.356644][ T4631]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   89.361850][   T23] usb 5-1: config index 0 descriptor too short (expected 27632, got 27)
[   89.362581][ T4631] RIP: 0033:0x7f451a108559
[   89.370941][   T23] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   89.375350][ T4631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.375369][ T4631] RSP: 002b:00007f4518360028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   89.375392][ T4631] RAX: ffffffffffffffda RBX: 00007f451a38ffa0 RCX: 00007f451a108559
[   89.375407][ T4631] RDX: 00002000000007c0 RSI: 0000200000000780 RDI: 0000000000000000
[   89.375420][ T4631] RBP: 00007f451a19f8b0 R08: 0000000000000000 R09: 0000000000000000
[   89.375433][ T4631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.375444][ T4631] R13: 00007f451a390038 R14: 00007f451a38ffa0 R15: 00007ffee230af98
[   89.375474][ T4631]  </TASK>
[   89.389474][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.531318][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[   89.544005][   T23] usb 5-1: config 1 has no interface number 0
[   89.550146][   T23] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   89.566782][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.631085][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   89.641169][ T4642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.649742][   T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[   89.668425][ T4642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   89.689723][ T4642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'.
[   89.717276][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'.
[   89.777901][ T4258] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   89.793381][ T4645] loop3: detected capacity change from 0 to 128
[   89.855340][ T4647] loop1: detected capacity change from 0 to 1024
[   89.877187][   T23] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[   89.899074][   T23] snd_usb_pod 5-1:1.1: invalid control EP
[   89.905257][   T23] snd_usb_pod 5-1:1.1: cannot start listening: -22
[   89.919894][   T23] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[   89.928896][ T4645] FAULT_INJECTION: forcing a failure.
[   89.928896][ T4645] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   89.957353][   T23] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[   89.967180][ T4645] CPU: 1 PID: 4645 Comm: syz.3.105 Not tainted syzkaller #0
[   89.974597][ T4645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   89.984693][ T4645] Call Trace:
[   89.988004][ T4645]  <TASK>
[   89.990950][ T4645]  dump_stack_lvl+0x188/0x250
[   89.995661][ T4645]  ? show_regs_print_info+0x20/0x20
[   90.000903][ T4645]  ? load_image+0x410/0x410
[   90.005442][ T4645]  ? __lock_acquire+0x7d40/0x7d40
[   90.010509][ T4645]  should_fail+0x383/0x4b0
[   90.014964][ T4645]  prepare_alloc_pages+0x1e3/0x5b0
[   90.020114][ T4645]  __alloc_pages+0x11b/0x480
[   90.024752][ T4645]  ? zone_statistics+0x170/0x170
[   90.029742][ T4645]  ? alloc_pages+0x452/0x560
[   90.034368][ T4645]  __vmalloc_node_range+0x4b1/0x8b0
[   90.039614][ T4645]  ? kvm_dev_ioctl+0x165/0x20a0
[   90.041658][ T4649] device syzkaller0 entered promiscuous mode
[   90.044489][ T4645]  __vmalloc+0x76/0x80
[   90.054637][ T4645]  ? kvm_dev_ioctl+0x165/0x20a0
[   90.059545][ T4645]  kvm_dev_ioctl+0x165/0x20a0
[   90.064257][ T4645]  ? hardware_enable_nolock+0x130/0x130
[   90.069842][ T4645]  ? bpf_lsm_file_ioctl+0x5/0x10
[   90.074810][ T4645]  ? security_file_ioctl+0x7c/0xa0
[   90.079955][ T4645]  ? hardware_enable_nolock+0x130/0x130
[   90.085541][ T4645]  __se_sys_ioctl+0xfa/0x170
[   90.090170][ T4645]  do_syscall_64+0x4c/0xa0
[   90.094613][ T4645]  ? clear_bhb_loop+0x30/0x80
[   90.099323][ T4645]  ? clear_bhb_loop+0x30/0x80
[   90.104033][ T4645]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   90.109958][ T4645] RIP: 0033:0x7f5ce814c559
[   90.114396][ T4645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.134026][ T4645] RSP: 002b:00007f5ce63a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.142468][ T4645] RAX: ffffffffffffffda RBX: 00007f5ce83d3fa0 RCX: 00007f5ce814c559
[   90.150556][ T4645] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007
[   90.158575][ T4645] RBP: 00007f5ce81e38b0 R08: 0000000000000000 R09: 0000000000000000
[   90.166548][ T4645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   90.174515][ T4645] R13: 00007f5ce83d4038 R14: 00007f5ce83d3fa0 R15: 00007fff43af1848
[   90.182490][ T4645]  </TASK>
[   90.239537][ T1352] usb 5-1: USB disconnect, device number 5
[   90.386738][ T4258] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   90.406675][ T4258] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[   90.422997][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.511867][ T4258] as10x_usb: device has been detected
[   90.517635][ T4258] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[   90.541248][ T4657] smpboot: CPU 1 is now offline
[   90.778261][ T4659] udc-core: couldn't find an available UDC or it's busy
[   90.836586][ T4660] x86: Booting SMP configuration:
[   90.873422][ T4258] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[   90.895827][ T4660] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   90.945244][    T0] kvm-clock: cpu 1, msr ff0a041, secondary cpu clock
[   90.959514][   T18] kvm-guest: stealtime: cpu 1, msr b8f27440
[   91.012886][ T4258] as10x_usb: error during firmware upload part1
[   91.019533][ T4258] Registered device Abilis Systems DVB-Titan
[   91.081483][ T1352] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.106247][ T4669] tipc: Started in network mode
[   91.131681][ T4669] tipc: Node identity ee986214fd76, cluster identity 4711
[   91.162041][ T4669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.281791][ T4668] tipc: Disabling bearer <eth:syzkaller0>
[   91.301565][ T1352] usb 3-1: device descriptor read/64, error -71
[   93.304624][ T1352] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.861517][ T4686] netlink: 52 bytes leftover after parsing attributes in process `syz.4.117'.
[   94.211002][ T4692] loop3: detected capacity change from 0 to 8
[   94.410271][ T4692] SQUASHFS error: zlib decompression failed, data probably corrupt
[   94.422545][ T4698] device syzkaller0 entered promiscuous mode
[   94.431037][ T4696] loop1: detected capacity change from 0 to 8
[   94.451953][ T4692] SQUASHFS error: Failed to read block 0x9b: -5
[   94.478776][ T4692] SQUASHFS error: Unable to read metadata cache entry [99]
[   94.514875][ T4692] SQUASHFS error: Unable to read inode 0x127
[   94.546053][ T4696] SQUASHFS error: lzo decompression failed, data probably corrupt
[   94.563361][ T4696] SQUASHFS error: Failed to read block 0x91: -5
[   94.587083][ T4696] SQUASHFS error: Unable to read metadata cache entry [8f]
[   94.616890][ T4696] SQUASHFS error: Unable to read inode 0x11f
[   94.709022][ T4705] loop4: detected capacity change from 0 to 8
[   94.930752][ T4696] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   94.966933][ T4696] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   95.186077][ T4716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.226430][ T4716] tipc: Resetting bearer <eth:syzkaller0>
[   95.303077][ T4715] tipc: Disabling bearer <eth:syzkaller0>
[   95.495515][ T4728] netlink: 'syz.4.132': attribute type 12 has an invalid length.
[   95.549621][ T4728] netlink: 'syz.4.132': attribute type 29 has an invalid length.
[   95.597887][ T4728] netlink: 148 bytes leftover after parsing attributes in process `syz.4.132'.
[   95.667686][ T4728] netlink: 59 bytes leftover after parsing attributes in process `syz.4.132'.
[   95.864004][ T4734] device syzkaller0 entered promiscuous mode
[   96.138492][ T1352] usb 1-1: USB disconnect, device number 4
[   96.180248][ T4743] netlink: 'syz.4.137': attribute type 15 has an invalid length.
[   96.206249][ T1352] Unregistered device Abilis Systems DVB-Titan
[   96.221700][ T4258] Bluetooth: hci4: command 0x0405 tx timeout
[   96.231133][ T4743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.137'.
[   96.252691][ T1352] as10x_usb: device has been disconnected
[   96.349245][ T4739] rxe_eth0 speed is unknown, defaulting to 1000
[   96.427699][ T4753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.498577][ T4753] tipc: Resetting bearer <eth:syzkaller0>
[   96.552031][ T4752] tipc: Disabling bearer <eth:syzkaller0>
[   96.559295][ T4757] loop3: detected capacity change from 0 to 512
[   96.726977][ T4757] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   96.790077][ T4757] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.959155][ T4768] device syzkaller0 entered promiscuous mode
[   97.033233][ T4772] loop0: detected capacity change from 0 to 256
[   97.180030][ T4772] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[   97.231709][   T26] audit: type=1800 audit(1792064216.245:2): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.150" name="file1" dev="loop0" ino=1048628 res=0 errno=0
[   97.411529][ T4266] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.661580][ T4266] usb 2-1: Using ep0 maxpacket: 16
[   97.821689][ T4266] usb 2-1: unable to get BOS descriptor or descriptor too short
[   97.911819][ T4266] usb 2-1: config 14 has an invalid interface number: 253 but max is 1
[   97.920126][ T4266] usb 2-1: config 14 contains an unexpected descriptor of type 0x2, skipping
[   98.002384][ T4266] usb 2-1: config 14 has an invalid interface number: 81 but max is 1
[   98.010577][ T4266] usb 2-1: config 14 has no interface number 0
[   98.028470][ T4788] device syzkaller0 entered promiscuous mode
[   98.077958][ T4266] usb 2-1: config 14 has no interface number 1
[   98.108281][ T4266] usb 2-1: config 14 interface 253 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32
[   98.148873][ T4266] usb 2-1: config 14 interface 253 altsetting 4 endpoint 0xF has an invalid bInterval 0, changing to 7
[   98.201155][ T4266] usb 2-1: config 14 interface 253 has no altsetting 0
[   98.411830][ T4266] usb 2-1: New USB device found, idVendor=0489, idProduct=e000, bcdDevice=db.63
[   98.444195][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.491442][ T4266] usb 2-1: Product: syz
[   98.516398][ T4266] usb 2-1: Manufacturer: syz
[   98.536557][ T4266] usb 2-1: SerialNumber: syz
[   98.553448][ T4796] mmap: syz.0.157 (4796): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   98.602092][ T4778] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   98.922441][ T4266] cp210x 2-1:14.253: cp210x converter detected
[   98.961487][ T4266] cp210x 2-1:14.253: failed to get vendor val 0x370b size 1: -71
[   98.979277][ T4266] cp210x 2-1:14.253: querying part number failed
[   99.015505][ T4811] device syzkaller0 entered promiscuous mode
[   99.044859][ T4266] usb 2-1: cp210x converter now attached to ttyUSB0
[   99.122298][ T4266] cp210x 2-1:14.81: cp210x converter detected
[   99.141503][ T4266] cp210x 2-1:14.81: failed to get vendor val 0x370b size 1: -71
[   99.159548][ T4266] cp210x 2-1:14.81: querying part number failed
[   99.187998][ T4266] usb 2-1: cp210x converter now attached to ttyUSB1
[   99.216887][ T4266] usb 2-1: USB disconnect, device number 3
[   99.286799][ T4266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   99.350922][ T4266] cp210x 2-1:14.253: device disconnected
[   99.436278][ T4817] loop3: detected capacity change from 0 to 256
[   99.442995][ T4266] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[   99.471275][ T4820] device syzkaller0 entered promiscuous mode
[   99.489300][ T4821] loop2: detected capacity change from 0 to 256
[   99.500560][ T4266] cp210x 2-1:14.81: device disconnected
[   99.611993][ T4821] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005)
[   99.621078][ T4821] exFAT-fs (loop2): failed to load upcase table
[   99.717525][ T4821] exFAT-fs (loop2): failed to recognize exfat type
[  100.007242][ T4830] loop3: detected capacity change from 0 to 2048
[  100.075382][ T4830] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  100.124618][ T4830] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback.
[  100.221552][ T4266] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  100.301525][ T4268] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  100.475176][ T4843] device syzkaller0 entered promiscuous mode
[  100.551881][ T4266] usb 1-1: not running at top speed; connect to a high speed hub
[  100.561463][ T4268] usb 3-1: Using ep0 maxpacket: 32
[  100.681765][ T4268] usb 3-1: config index 0 descriptor too short (expected 27632, got 27)
[  100.702902][ T4268] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  100.741967][ T4268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.799218][ T4268] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  100.856189][ T4268] usb 3-1: config 1 has no interface number 0
[  100.895125][ T4268] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  100.969673][ T4268] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  100.991689][ T4266] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.006343][ T4268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.016670][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.043651][ T4266] usb 1-1: Manufacturer: 瞱�㦨�醿�⬡理ꗙ�娶䜿舻촲篩䛜◟젽湎핃는妯�dzꀴ�ゼ㻄벶ឺ覥崉臾뀽韽㹗姬︈컂ⷱዄ
[  101.098101][ T4266] usb 1-1: SerialNumber: syz
[  101.104812][ T4268] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  101.279651][ T4852] device syzkaller0 entered promiscuous mode
[  101.322309][ T4268] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[  101.343850][ T4268] snd_usb_pod 3-1:1.1: invalid control EP
[  101.366386][ T4268] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  101.383303][ T4268] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  101.396743][ T4268] snd_usb_pod: probe of 3-1:1.1 failed with error -22
[  101.491826][ T4266] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  101.529615][ T1108] usb 3-1: USB disconnect, device number 5
[  101.541575][ T4266] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  101.564362][   T26] audit: type=1326 audit(1792064220.585:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4862 comm="syz.1.182" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451a108559 code=0x0
[  101.619182][ T4266] usb 1-1: USB disconnect, device number 5
[  101.872875][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.928690][ T4873] loop4: detected capacity change from 0 to 512
[  101.948998][ T4875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.968969][ T4874] tipc: Disabling bearer <eth:syzkaller0>
[  101.991992][ T4873] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29256!=33349)
[  102.012371][ T4873] EXT4-fs (loop4): group descriptors corrupted!
[  103.638994][ T4886] tmpfs: Bad value for 'nr_inodes'
[  103.650954][ T4266] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  103.855051][ T1352] hid-generic 0000:0008:0000.0002: unknown main item tag 0x0
[  103.871449][ T4268] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.881489][ T4266] usb 1-1: device descriptor read/64, error -71
[  103.889318][ T1352] hid-generic 0000:0008:0000.0002: unknown main item tag 0x0
[  103.934674][ T1352] hid-generic 0000:0008:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  104.055259][ T4897] fido_id[4897]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  104.120047][ T4899] loop1: detected capacity change from 0 to 2048
[  104.127591][ T4901] device syzkaller0 entered promiscuous mode
[  104.133808][ T4268] usb 3-1: Using ep0 maxpacket: 32
[  104.151721][ T4266] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  104.244502][ T4899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.254245][ T4268] usb 3-1: config index 0 descriptor too short (expected 27632, got 27)
[  104.266455][ T4268] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  104.302093][ T4268] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.351558][ T4266] usb 1-1: device descriptor read/64, error -71
[  104.369024][ T4268] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  104.424416][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  104.454727][ T4268] usb 3-1: config 1 has no interface number 0
[  104.471624][ T4266] usb usb1-port1: attempt power cycle
[  104.478375][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  104.488887][ T4268] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  104.539936][ T4268] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  104.562412][ T4268] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.634443][ T4268] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  104.850516][ T4275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.851695][ T4268] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[  104.882446][ T4268] snd_usb_pod 3-1:1.1: invalid control EP
[  104.891638][ T4266] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  104.909423][ T4268] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  104.925518][ T4268] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  104.941019][ T4268] snd_usb_pod: probe of 3-1:1.1 failed with error -22
[  104.981602][ T4266] usb 1-1: device descriptor read/8, error -71
[  105.000762][ T4275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.070132][ T4268] usb 3-1: USB disconnect, device number 6
[  105.139627][ T4914] loop0: detected capacity change from 0 to 256
[  105.149119][ T4275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.175683][ T4914] exFAT-fs (loop0): error, invalid access to FAT bad cluster (entry 0x00000005)
[  105.216369][ T4914] exFAT-fs (loop0): failed to load upcase table
[  105.239177][ T4914] exFAT-fs (loop0): failed to recognize exfat type
[  105.260790][ T4275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.446487][ T4919] loop4: detected capacity change from 0 to 512
[  105.453630][ T4915] rxe_eth0 speed is unknown, defaulting to 1000
[  105.661725][ T4919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  105.778883][ T4275] tipc: Left network mode
[  105.790739][ T4919] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.970249][ T4941] loop3: detected capacity change from 0 to 1024
[  106.178998][ T4941] hfsplus: invalid length 32517 has been corrected to 255
[  106.317557][   T26] audit: type=1800 audit(1792064225.335:4): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file1" dev="loop3" ino=20 res=0 errno=0
[  106.377833][ T4941] hfsplus: b-tree write err: -5, ino 20
[  106.465378][ T4915] chnl_net:caif_netlink_parms(): no params data found
[  106.514351][ T1282] hfsplus: b-tree write err: -5, ino 20
[  106.656387][ T4967] device syzkaller0 entered promiscuous mode
[  106.861954][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.873958][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.891847][ T4915] device bridge_slave_0 entered promiscuous mode
[  106.961167][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.998423][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.030712][ T4915] device bridge_slave_1 entered promiscuous mode
[  107.230636][ T4915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.241555][ T4266] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  107.295598][ T4915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.411615][ T4265] Bluetooth: hci0: command 0x0409 tx timeout
[  107.443355][ T4915] team0: Port device team_slave_0 added
[  107.458439][ T4988] device syzkaller0 entered promiscuous mode
[  107.491647][ T4266] usb 1-1: Using ep0 maxpacket: 32
[  107.616308][ T4915] team0: Port device team_slave_1 added
[  107.619078][ T4266] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  107.645805][ T4266] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  107.675135][ T4266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.727759][ T4266] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  107.747465][ T4266] usb 1-1: config 1 has no interface number 0
[  107.762002][ T5000] loop2: detected capacity change from 0 to 128
[  107.778750][ T4266] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  107.803137][ T4266] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  107.823732][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.915640][ T4266] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  107.949806][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.970516][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.029766][ T4915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.055825][ T4275] device hsr_slave_0 left promiscuous mode
[  108.075515][ T4275] device hsr_slave_1 left promiscuous mode
[  108.094694][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.110689][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.121796][ T4266] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[  108.135519][ T4266] snd_usb_pod 1-1:1.1: invalid control EP
[  108.149285][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.153658][ T4266] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  108.186325][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.189474][ T4266] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  108.229099][ T4275] device bridge_slave_1 left promiscuous mode
[  108.231221][ T4266] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  108.249130][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.321055][ T4275] device bridge_slave_0 left promiscuous mode
[  108.327661][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.337285][ T4266] usb 1-1: USB disconnect, device number 10
[  108.380663][ T4275] device veth1_macvtap left promiscuous mode
[  108.387548][ T4275] device veth0_macvtap left promiscuous mode
[  108.401248][ T4275] device veth1_vlan left promiscuous mode
[  108.408519][ T4275] device veth0_vlan left promiscuous mode
[  108.867962][ T4275] team0 (unregistering): Port device team_slave_1 removed
[  108.898852][ T4275] team0 (unregistering): Port device team_slave_0 removed
[  108.919686][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.949710][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.100334][ T4275] bond0 (unregistering): Released all slaves
[  109.106025][ T5029] loop4: detected capacity change from 0 to 8
[  109.148245][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.163416][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.235011][ T5029] SQUASHFS error: lzo decompression failed, data probably corrupt
[  109.245863][ T4915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.258377][ T5029] SQUASHFS error: Failed to read block 0x91: -5
[  109.298496][ T5029] SQUASHFS error: Unable to read metadata cache entry [8f]
[  109.337840][ T5029] SQUASHFS error: Unable to read inode 0x11f
[  109.436621][ T4915] device hsr_slave_0 entered promiscuous mode
[  109.475574][ T4915] device hsr_slave_1 entered promiscuous mode
[  109.491478][ T4265] Bluetooth: hci0: command 0x041b tx timeout
[  109.511584][ T4915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.519192][ T4915] Cannot create hsr debugfs directory
[  110.050981][ T4915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.092328][ T4915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  110.115638][ T4915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  110.138965][ T4915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.181685][ T5054] loop0: detected capacity change from 0 to 16
[  110.213634][ T5054] erofs: (device loop0): mounted with root inode @ nid 36.
[  110.418549][ T5057] device syzkaller0 entered promiscuous mode
[  110.586360][ T4915] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.637171][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  110.652109][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  110.685202][ T4915] 8021q: adding VLAN 0 to HW filter on device team0
[  110.705637][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  110.738457][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  110.757047][  T430] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.764255][  T430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.826495][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.874145][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.893185][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.912081][  T430] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.919195][  T430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.947592][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.961430][ T4268] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.980942][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  110.992609][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  111.053303][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  111.089536][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  111.121442][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  111.141074][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.170919][ T4915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.221549][ T4268] usb 4-1: Using ep0 maxpacket: 32
[  111.226775][ T4915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.260502][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.282273][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.301834][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.321065][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  111.341783][ T4268] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[  111.350151][ T4268] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  111.359859][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  111.385387][ T4268] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  111.404793][ T4268] usb 4-1: config 1 has no interface number 0
[  111.410917][ T4268] usb 4-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  111.457870][ T4268] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  111.481178][ T4268] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  111.501535][ T4268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.571833][ T4258] Bluetooth: hci0: command 0x040f tx timeout
[  111.574519][ T4268] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  111.851700][ T4268] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  111.859985][ T4268] snd_usb_pod 4-1:1.1: invalid control EP
[  111.876189][ T4268] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  111.891095][ T4268] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  112.055928][ T4915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.105452][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  112.120010][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.334302][ T5085] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  112.360221][ T4268] snd_usb_pod: probe of 4-1:1.1 failed with error -22
[  112.379156][ T4268] usb 4-1: USB disconnect, device number 4
[  112.916201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  112.930198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.057944][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.074322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  113.107508][ T4915] device veth0_vlan entered promiscuous mode
[  113.124977][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  113.174708][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  113.196713][ T4915] device veth1_vlan entered promiscuous mode
[  113.213016][ T5124] loop3: detected capacity change from 0 to 8
[  113.333380][ T4915] device veth0_macvtap entered promiscuous mode
[  113.382064][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  113.390367][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  113.439130][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.481704][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.493330][ T4915] device veth1_macvtap entered promiscuous mode
[  113.572361][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  113.611042][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  113.651570][ T4258] Bluetooth: hci0: command 0x0419 tx timeout
[  113.660536][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.691559][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.721491][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.762484][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.807585][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.852717][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.878855][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  113.909605][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  113.941781][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.961562][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  113.991057][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  114.018100][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.037226][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.049782][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.070431][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.081240][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.106962][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.135546][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.167585][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.199555][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.214287][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  114.233012][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  114.274675][ T4915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.317475][ T4915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.357516][ T4915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.391497][ T4915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.493993][ T5141] device syzkaller0 entered promiscuous mode
[  114.525953][ T5148] device syzkaller0 entered promiscuous mode
[  114.766247][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.784842][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.839248][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.867920][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  114.875838][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.907795][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  115.091689][ T4261] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.193252][ T4195] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000)
[  115.223718][ T4195] FAT-fs (loop2): Filesystem has been set read-only
[  115.265943][ T4195] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  115.284578][ T4195] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  115.311596][ T4268] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  115.461654][ T4261] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.491130][ T4261] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  115.521779][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.574185][ T4268] usb 1-1: Using ep0 maxpacket: 32
[  115.638025][ T4261] as10x_usb: device has been detected
[  115.649578][ T4261] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  115.694617][ T4268] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  115.711063][ T4261] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  115.723655][ T4268] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  115.751015][ T4268] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  115.773841][ T4195] syz-executor (4195) used greatest stack depth: 20848 bytes left
[  115.793944][ T4261] as10x_usb: error during firmware upload part1
[  115.816235][ T4268] usb 1-1: config 1 has no interface number 0
[  115.824161][ T4261] Registered device Abilis Systems DVB-Titan
[  115.866567][ T4268] usb 1-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  115.935265][ T4268] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  115.964511][ T4268] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  115.994299][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.084354][ T4268] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  116.234357][ T5199] device syzkaller0 entered promiscuous mode
[  116.301659][ T4268] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[  116.315801][ T4268] snd_usb_pod 1-1:1.1: invalid control EP
[  116.340338][ T4268] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  116.369749][ T4268] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  116.398581][ T4268] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  116.514304][ T4268] usb 1-1: USB disconnect, device number 11
[  116.589593][ T5203] rxe_eth0 speed is unknown, defaulting to 1000
[  117.159138][ T5203] chnl_net:caif_netlink_parms(): no params data found
[  117.372774][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.380069][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.388616][ T5203] device bridge_slave_0 entered promiscuous mode
[  117.398637][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.406025][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.414697][ T5203] device bridge_slave_1 entered promiscuous mode
[  117.442179][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.454709][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.508553][ T5203] team0: Port device team_slave_0 added
[  117.564234][ T5203] team0: Port device team_slave_1 added
[  117.644196][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.651268][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.758178][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.810353][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.824354][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.852112][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.921501][ T4262] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  117.963697][ T5203] device hsr_slave_0 entered promiscuous mode
[  117.987388][ T5203] device hsr_slave_1 entered promiscuous mode
[  118.003561][ T5203] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.023709][ T5203] Cannot create hsr debugfs directory
[  118.353024][ T4262] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  118.368613][ T5203] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  118.376815][ T4262] usb 6-1: config 0 interface 0 has no altsetting 0
[  118.386808][ T4262] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  118.407323][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.430846][ T4262] usb 6-1: config 0 descriptor??
[  118.450217][ T5203] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  118.468504][ T5203] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  118.475840][ T5230] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  118.538454][ T5203] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  118.775055][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.845382][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.865832][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.888948][ T5203] 8021q: adding VLAN 0 to HW filter on device team0
[  118.918151][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.948532][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.978765][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.985920][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.994001][ T4262] usbhid 6-1:0.0: can't add hid device: -71
[  119.000010][ T4262] usbhid: probe of 6-1:0.0 failed with error -71
[  119.035768][ T4262] usb 6-1: USB disconnect, device number 2
[  119.072516][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.080571][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.148764][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.168184][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.175331][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.209217][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.259850][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.288473][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.312911][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.356738][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.385650][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.406014][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.470645][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.497384][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.516736][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.530995][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.545624][ T5203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.679047][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  120.014528][ T5271] device syzkaller0 entered promiscuous mode
[  120.163975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.182143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.218596][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.590950][ T4264] usb 4-1: USB disconnect, device number 5
[  120.655430][ T4264] Unregistered device Abilis Systems DVB-Titan
[  120.656729][ T4264] as10x_usb: device has been disconnected
[  120.700981][ T5291] loop4: detected capacity change from 0 to 2048
[  120.889787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.907981][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.983233][ T5299] loop4: detected capacity change from 0 to 2048
[  120.984449][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.015926][ T5299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.019752][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.057625][ T5203] device veth0_vlan entered promiscuous mode
[  121.073285][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.087853][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.107896][ T5203] device veth1_vlan entered promiscuous mode
[  121.119446][ T4194] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  121.128124][ T4194] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  121.137344][ T5203] device veth0_macvtap entered promiscuous mode
[  121.145637][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.155272][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.161582][ T4264] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  121.170178][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.190854][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.205921][ T5203] device veth1_macvtap entered promiscuous mode
[  121.261308][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.269444][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.289806][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.303273][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.314005][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.325137][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.335525][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.348576][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.358745][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.377626][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.387690][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.397800][ T4268] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  121.400093][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.423655][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.436358][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.447903][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.458007][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.468703][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.478819][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.489518][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.499614][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.510980][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.521085][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.531828][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.542876][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.550236][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.551841][ T4264] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  121.566041][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.569352][ T4264] usb 4-1: config 0 interface 0 has no altsetting 0
[  121.584291][ T4264] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  121.585476][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.593698][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.615307][ T4264] usb 4-1: config 0 descriptor??
[  121.622333][  T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.631801][ T5297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.641571][ T4268] usb 1-1: Using ep0 maxpacket: 32
[  121.647938][ T5308] device syzkaller0 entered promiscuous mode
[  121.658393][ T5203] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.667573][ T5203] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.676650][ T5203] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.685655][ T5203] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.726842][  T430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.731806][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  121.761658][ T4268] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  121.773826][ T4268] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  121.792603][ T4268] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  121.806046][ T4268] usb 1-1: config 1 has no interface number 0
[  121.813648][ T4268] usb 1-1: config 1 interface 1 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  121.828428][ T4268] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  121.841850][ T4268] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  121.850911][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.926948][ T4268] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  121.927303][  T430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.027519][  T430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.061710][ T4986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.081262][ T4986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.099156][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.141847][ T4268] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values
[  122.150703][ T4268] snd_usb_pod 1-1:1.1: invalid control EP
[  122.161619][ T4264] usbhid 4-1:0.0: can't add hid device: -71
[  122.167625][ T4264] usbhid: probe of 4-1:0.0 failed with error -71
[  122.186259][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.190741][ T4268] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  122.212220][ T4264] usb 4-1: USB disconnect, device number 6
[  122.215789][  T430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.263806][ T4268] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  122.282837][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.319100][ T5319] rxe_eth0 speed is unknown, defaulting to 1000
[  122.335751][ T4268] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  122.362039][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.405444][ T4268] usb 1-1: USB disconnect, device number 12
[  122.541423][  T430] tipc: Left network mode
[  122.679621][ T5332] loop5: detected capacity change from 0 to 2048
[  122.783251][ T5336] loop3: detected capacity change from 0 to 2048
[  122.859596][ T5336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.921926][   T26] audit: type=1800 audit(1792064241.945:5): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.287" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  122.956525][ T5343] device syzkaller0 entered promiscuous mode
[  123.053360][ T5346] xt_hashlimit: max too large, truncated to 1048576
[  123.221455][ T4263] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  123.274970][ T5319] chnl_net:caif_netlink_parms(): no params data found
[  123.449098][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.465113][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.475032][ T5319] device bridge_slave_0 entered promiscuous mode
[  123.499066][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.508449][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.533823][ T5319] device bridge_slave_1 entered promiscuous mode
[  123.601744][ T4264] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  123.641660][ T4263] usb 7-1: unable to get BOS descriptor or descriptor too short
[  123.652368][ T5319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.691706][ T4263] usb 7-1: not running at top speed; connect to a high speed hub
[  123.698582][ T5319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.738907][ T5319] team0: Port device team_slave_0 added
[  123.748181][ T5319] team0: Port device team_slave_1 added
[  123.781742][ T4263] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.794759][ T4263] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.814889][ T1108] Bluetooth: hci4: command 0x040f tx timeout
[  123.847612][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.861789][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.897293][ T5319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.914609][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.924254][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.975662][ T5319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.981600][ T4264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  124.019779][ T4264] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  124.039881][  T430] device hsr_slave_0 left promiscuous mode
[  124.062054][  T430] device hsr_slave_1 left promiscuous mode
[  124.068600][  T430] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.076813][ T4263] usb 7-1: string descriptor 0 read error: -22
[  124.088529][ T4263] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  124.101649][  T430] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.127453][ T4263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.162154][  T430] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.181647][  T430] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.194865][ T4263] usb 7-1: 0:2 : does not exist
[  124.231105][  T430] device bridge_slave_1 left promiscuous mode
[  124.239182][ T4264] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.250738][ T4264] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  124.260209][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.260455][  T430] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.294650][  T430] device bridge_slave_0 left promiscuous mode
[  124.300979][  T430] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.326674][  T430] device veth1_macvtap left promiscuous mode
[  124.339233][  T430] device veth0_macvtap left promiscuous mode
[  124.350474][  T430] device veth1_vlan left promiscuous mode
[  124.370101][  T430] device veth0_vlan left promiscuous mode
[  125.045676][ T5327] netlink: 48 bytes leftover after parsing attributes in process `syz.6.256'.
[  125.350470][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[  125.356708][ T5360] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.381825][ T5360] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.413661][ T4264] pl2303 4-1:1.0: pl2303 converter detected
[  125.426064][ T4264] usb 4-1: pl2303 converter now attached to ttyUSB0
[  125.461710][ T4263] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  125.551675][ T5312] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  125.561011][  T430] team0 (unregistering): Port device team_slave_1 removed
[  125.583777][  T430] team0 (unregistering): Port device team_slave_0 removed
[  125.609304][  T430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.650446][ T5399] loop6: detected capacity change from 0 to 2048
[  125.653538][  T430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.671591][ T4261] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  125.681084][ T5399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.723912][   T26] audit: type=1800 audit(1792064244.745:6): pid=5399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.299" name="bus" dev="loop6" ino=1367 res=0 errno=0
[  125.745465][ T4263] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  125.773447][ T4263] usb 7-1: USB disconnect, device number 2
[  125.827351][  T430] bond0 (unregistering): Released all slaves
[  125.892748][ T4262] Bluetooth: hci4: command 0x0419 tx timeout
[  125.910941][ T4264] usb 4-1: USB disconnect, device number 7
[  125.917837][ T5312] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  125.929363][ T4261] usb 1-1: Using ep0 maxpacket: 32
[  125.945555][ T5312] usb 6-1: config 0 interface 0 has no altsetting 0
[  125.953830][ T4264] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  125.964004][ T5312] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  125.978139][ T4264] pl2303 4-1:1.0: device disconnected
[  125.989018][ T5312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.014799][ T5402] loop6: detected capacity change from 0 to 512
[  126.026344][ T5319] device hsr_slave_0 entered promiscuous mode
[  126.041155][ T5312] usb 6-1: config 0 descriptor??
[  126.062245][ T5385] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  126.069518][ T4261] usb 1-1: config index 0 descriptor too short (expected 27632, got 27)
[  126.079023][ T4261] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  126.091157][ T4261] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  126.101458][ T4261] usb 1-1: config 1 has no interface number 0
[  126.108236][ T4261] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.120185][ T4261] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  126.140123][ T4261] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  126.151434][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.174371][ T5319] device hsr_slave_1 entered promiscuous mode
[  126.234305][ T4261] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  126.449677][ T4261] snd_usb_pod 1-1:1.1: invalid control EP
[  126.466156][ T4261] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  126.491492][ T4261] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  126.519562][ T4261] snd_usb_pod: probe of 1-1:1.1 failed with error -22
[  126.591570][ T5312] usbhid 6-1:0.0: can't add hid device: -71
[  126.598167][ T5312] usbhid: probe of 6-1:0.0 failed with error -71
[  126.628201][ T5312] usb 6-1: USB disconnect, device number 3
[  126.694112][ T4264] usb 1-1: USB disconnect, device number 13
[  126.746826][ T5319] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  126.772722][ T5424] loop3: detected capacity change from 0 to 1024
[  126.821980][ T5424] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3
[  126.879664][ T5319] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  126.918765][ T5319] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  126.979997][ T5319] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  127.411676][ T4308] Bluetooth: hci3: command 0x041b tx timeout
[  127.454767][ T5319] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.532624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.560425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.605711][ T5319] 8021q: adding VLAN 0 to HW filter on device team0
[  127.634397][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.653831][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.709903][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.717076][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.812613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  127.872066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  127.923281][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  127.961927][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.969066][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.049728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.118773][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.162734][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.231545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.300918][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.362293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.412618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.449569][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.509736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.531677][ T5441] 9pnet: Insufficient options for proto=fd
[  128.567446][ T5319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.629242][ T5319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.670213][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.692533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  129.324612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.343748][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.407332][ T5319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.491905][ T4263] Bluetooth: hci3: command 0x040f tx timeout
[  129.601542][ T5439] loop3: detected capacity change from 0 to 16
[  129.608129][ T4264] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  129.697741][ T5439] erofs: (device loop3): mounted with root inode @ nid 36.
[  129.735324][ T5475] loop0: detected capacity change from 0 to 2048
[  129.756005][ T4196] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -38 in[46, 4050] out[9000]
[  129.783255][ T5439] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -38 in[46, 4050] out[8192]
[  129.839345][   T26] audit: type=1800 audit(1792064248.825:7): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.304" name="file2" dev="loop3" ino=89 res=0 errno=0
[  129.901665][ T5439] syz.3.304 (5439) used greatest stack depth: 19744 bytes left
[  129.999144][ T4264] usb 7-1: Using ep0 maxpacket: 16
[  130.018995][ T5475] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  130.059087][ T5475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.071484][ T4264] usb 7-1: device descriptor read/all, error -71
[  130.290193][ T5482] loop6: detected capacity change from 0 to 4096
[  130.408394][ T5482] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  130.452762][ T5482] EXT4-fs (loop6): Test dummy encryption mode enabled
[  130.459624][ T5482] EXT4-fs (loop6): Ignoring removed orlov option
[  130.609338][ T5482] EXT4-fs (loop6): mounted filesystem without journal. Opts: mblk_io_submit,journal_dev=0x0000000000000000,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback.
[  130.711833][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  130.722367][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.738953][ T5508] loop3: detected capacity change from 0 to 512
[  130.805398][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  130.829691][ T5508] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled
[  130.860143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.919656][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.947808][ T5482] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  130.963991][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,grpjquota=./bus,stripe=0x0000000000000003,noquota,,errors=continue. Quota mode: writeback.
[  131.004208][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.014632][ T5508] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.049049][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.317'.
[  131.063394][   T26] audit: type=1800 audit(1792064250.085:8): pid=5508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.316" name="file2" dev="loop3" ino=16 res=0 errno=0
[  131.074676][ T5319] device veth0_vlan entered promiscuous mode
[  131.109869][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.317'.
[  131.200110][ T5319] device veth1_vlan entered promiscuous mode
[  131.338038][ T5529] loop0: detected capacity change from 0 to 2048
[  131.377210][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  131.427791][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  131.432456][ T5537] loop6: detected capacity change from 0 to 512
[  131.435707][ T5529] EXT4-fs (loop0): Unrecognized mount option "smackfstransmute=]-" or missing value
[  131.502816][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  131.551690][ T4261] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  131.559851][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.572433][ T4308] Bluetooth: hci3: command 0x0419 tx timeout
[  131.599888][ T5537] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.601265][ T5319] device veth0_macvtap entered promiscuous mode
[  131.652014][ T5537] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.673975][ T5537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.687465][ T5537] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  131.714163][ T5319] device veth1_macvtap entered promiscuous mode
[  131.743672][ T5547] loop0: detected capacity change from 0 to 8
[  131.749004][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.781553][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.811696][ T4261] usb 4-1: Using ep0 maxpacket: 16
[  131.827265][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.878780][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.897453][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.915953][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.928549][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.944167][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.971417][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.971947][ T4261] usb 4-1: unable to get BOS descriptor or descriptor too short
[  131.999150][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.031785][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.072449][ T4261] usb 4-1: config 14 has an invalid interface number: 253 but max is 0
[  132.083032][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  132.097302][ T4261] usb 4-1: config 14 contains an unexpected descriptor of type 0x2, skipping
[  132.105800][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  132.114335][ T4261] usb 4-1: config 14 has no interface number 0
[  132.115125][ T4261] usb 4-1: config 14 interface 253 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32
[  132.142499][ T4261] usb 4-1: config 14 interface 253 altsetting 4 endpoint 0xF has an invalid bInterval 0, changing to 7
[  132.152797][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.162208][ T4261] usb 4-1: config 14 interface 253 has no altsetting 0
[  132.170401][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.200572][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.248034][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.269094][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.287875][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.310357][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.328839][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.338992][ T5319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.341841][ T4261] usb 4-1: New USB device found, idVendor=0489, idProduct=e000, bcdDevice=db.63
[  132.351500][ T5319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.367259][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.373836][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.389589][ T4261] usb 4-1: Product: syz
[  132.394063][ T4261] usb 4-1: Manufacturer: syz
[  132.398896][ T4261] usb 4-1: SerialNumber: syz
[  132.444499][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  132.456792][ T5528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  132.468859][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  132.483113][ T5319] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.502417][ T5319] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.511754][ T5319] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.530200][ T5319] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.752343][ T4261] cp210x 4-1:14.253: cp210x converter detected
[  132.775589][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  132.781987][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  132.811628][ T4261] cp210x 4-1:14.253: failed to get vendor val 0x370b size 1: -71
[  132.836538][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.849894][ T4261] cp210x 4-1:14.253: querying part number failed
[  132.861985][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.888147][ T4261] usb 4-1: cp210x converter now attached to ttyUSB0
[  132.943033][ T5585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.331'.
[  132.952289][ T4261] usb 4-1: USB disconnect, device number 8
[  132.977206][ T4261] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.988636][ T4261] cp210x 4-1:14.253: device disconnected
[  133.025993][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  133.058188][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  133.102424][ T5587] device syzkaller0 entered promiscuous mode
[  133.104078][ T4986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.136545][ T4986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.146242][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  133.187651][ T5596] loop6: detected capacity change from 0 to 8
[  133.435982][ T5608] loop7: detected capacity change from 0 to 128
[  133.531161][ T5608] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  133.607395][ T5608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.816632][ T5627] loop5: detected capacity change from 0 to 512
[  133.913023][ T5627] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value
[  134.091578][ T4264] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  134.101722][ T1108] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  134.131284][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.345'.
[  134.199020][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.345'.
[  134.351823][ T4264] usb 1-1: Using ep0 maxpacket: 16
[  134.642017][ T4264] usb 1-1: unable to get BOS descriptor or descriptor too short
[  134.682076][ T1108] usb 7-1: unable to get BOS descriptor or descriptor too short
[  134.723088][ T1108] usb 7-1: not running at top speed; connect to a high speed hub
[  134.732111][ T4264] usb 1-1: config 14 has an invalid interface number: 253 but max is 0
[  134.761088][ T4264] usb 1-1: config 14 has no interface number 0
[  134.791453][ T4264] usb 1-1: config 14 interface 253 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32
[  134.802382][ T1108] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.840503][ T1108] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  134.864459][ T4264] usb 1-1: config 14 interface 253 has no altsetting 0
[  135.059020][ T5655] device syzkaller0 entered promiscuous mode
[  135.105998][ T4264] usb 1-1: New USB device found, idVendor=0489, idProduct=e000, bcdDevice=db.63
[  135.115409][ T1108] usb 7-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  135.131457][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.139624][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.157189][ T1108] usb 7-1: Product: syz
[  135.161758][ T4264] usb 1-1: Product: syz
[  135.165945][ T4264] usb 1-1: Manufacturer: syz
[  135.170556][ T4264] usb 1-1: SerialNumber: syz
[  135.181444][ T1108] usb 7-1: Manufacturer: syz
[  135.186197][ T1108] usb 7-1: SerialNumber: syz
[  135.232105][ T5628] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  135.285316][ T5659] loop5: detected capacity change from 0 to 8
[  135.532471][ T4264] cp210x 1-1:14.253: cp210x converter detected
[  135.561600][ T4264] cp210x 1-1:14.253: failed to get vendor val 0x370b size 1: -71
[  135.571725][ T1108] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[  135.583113][ T4264] cp210x 1-1:14.253: querying part number failed
[  135.599696][ T1108] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  135.627069][ T4264] usb 1-1: cp210x converter now attached to ttyUSB0
[  135.677180][ T4264] usb 1-1: USB disconnect, device number 14
[  135.692489][ T1108] usb 7-1: USB disconnect, device number 5
[  135.775797][ T4264] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  135.855140][ T4264] cp210x 1-1:14.253: device disconnected
[  136.042872][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.179393][ T5697] netlink: 224 bytes leftover after parsing attributes in process `syz.6.357'.
[  136.226572][ T5701] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  136.291649][ T4263] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  136.491469][   T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  136.740830][ T5736] loop3: detected capacity change from 0 to 512
[  136.781765][ T4263] usb 8-1: unable to get BOS descriptor or descriptor too short
[  136.781771][ T4264] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  136.851656][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.872113][ T4263] usb 8-1: not running at top speed; connect to a high speed hub
[  136.881463][   T13] usb 1-1: config 0 has no interfaces?
[  136.887199][   T13] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  136.896790][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.910033][   T13] usb 1-1: config 0 descriptor??
[  136.965090][ T4263] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.986104][ T4263] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.021762][ T4264] usb 6-1: Using ep0 maxpacket: 16
[  137.101874][ T1108] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  137.181657][ T4264] usb 6-1: unable to get BOS descriptor or descriptor too short
[  137.309361][ T4263] usb 8-1: string descriptor 0 read error: -22
[  137.321456][ T4263] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.351157][ T4263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.441840][ T4263] usb 8-1: 0:2 : does not exist
[  138.277369][ T5678] netlink: 48 bytes leftover after parsing attributes in process `syz.7.353'.
[  138.381569][ T4308] Bluetooth: hci4: command 0x0405 tx timeout
[  138.589837][ T5785] kvm [5784]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xcd
[  138.741787][ T4263] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  138.846801][ T5793] loop6: detected capacity change from 0 to 512
[  138.902196][ T5793] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value
[  138.994365][ T4263] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  139.051098][ T4263] usb 8-1: USB disconnect, device number 2
[  139.387313][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.543210][ T5761] loop0: detected capacity change from 0 to 1024
[  139.551553][ T4264] usb 6-1: config 14 has an invalid interface number: 253 but max is 0
[  139.559847][ T4264] usb 6-1: config 14 has no interface number 0
[  139.570190][ T4264] usb 6-1: config 14 interface 253 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 32
[  139.585856][ T4264] usb 6-1: config 14 interface 253 has no altsetting 0
[  139.631535][ T4264] usb 6-1: string descriptor 0 read error: -71
[  139.641807][ T4264] usb 6-1: New USB device found, idVendor=0489, idProduct=e000, bcdDevice=db.63
[  139.653566][ T4264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.681581][ T4264] usb 6-1: can't set config #14, error -71
[  139.693300][ T1108] usb 4-1: not running at top speed; connect to a high speed hub
[  139.701233][ T5761] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6)
[  139.712415][ T5761] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  139.721917][ T5761] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.358: Failed to acquire dquot type 0
[  139.738723][ T5761] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  139.757696][ T5761] EXT4-fs (loop0): 1 truncate cleaned up
[  139.763482][ T5761] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  139.793854][ T4264] usb 6-1: USB disconnect, device number 4
[  139.851663][ T1108] usb 4-1: unable to read config index 0 descriptor/start: -71
[  139.878508][ T1108] usb 4-1: can't read configurations, error -71
[  139.973981][ T4266] usb 1-1: USB disconnect, device number 15
[  139.977546][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.386'.
[  140.001749][ T5312] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  140.153476][ T5842] ip_tables: iptables: counters copy to user failed while replacing table
[  140.313505][ T5846] loop0: detected capacity change from 0 to 2048
[  140.357782][ T5850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer.
[  140.375976][ T5312] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  140.390436][ T5312] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  140.412425][ T5312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  140.418704][ T4475] Alternate GPT is invalid, using primary GPT.
[  140.423898][ T5312] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  140.439389][ T5312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.484876][ T4475]  loop0: p1 p2 p3
[  140.492972][ T5812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  140.507704][ T5812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  140.553048][ T5312] pl2303 8-1:1.0: pl2303 converter detected
[  140.608906][ T5312] usb 8-1: pl2303 converter now attached to ttyUSB0
[  140.632393][ T5846] Alternate GPT is invalid, using primary GPT.
[  140.653864][ T5860] using random self ethernet address
[  140.662098][ T5846]  loop0: p1 p2 p3
[  140.668155][ T5860] using random host ethernet address
[  140.776044][ T5863] autofs4:pid:5863:autofs_fill_super: called with bogus options
[  140.854161][ T5865] loop3: detected capacity change from 0 to 128
[  140.973284][ T5865] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.985376][ T5812] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  141.018418][ T5865] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  141.027905][ T5812] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  141.087467][ T4519] udevd[4519]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  141.131641][ T5812] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  141.157203][ T4475] udevd[4475]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  141.173089][ T4476] udevd[4476]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  141.186388][ T5812] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  141.252706][ T5812] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  141.631846][ T5812] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  141.702010][ T5886] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  141.710574][ T5886] FAT-fs (loop3): Filesystem has been set read-only
[  141.721879][ T5812] pl2303 ttyUSB0: error sending break = -32
[  141.741023][ T5900] loop0: detected capacity change from 0 to 512
[  141.760970][ T5900] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.774260][ T1108] usb 8-1: USB disconnect, device number 3
[  141.794122][ T5901] loop5: detected capacity change from 0 to 256
[  141.803070][ T1108] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  141.884294][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.5.408'.
[  141.910761][ T5900] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  141.932292][ T1108] pl2303 8-1:1.0: device disconnected
[  141.959319][ T5900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.404: bg 0: block 248: padding at end of block bitmap is not set
[  141.998148][ T5900] Quota error (device loop0): write_blk: dquota write failed
[  142.036765][ T5900] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  142.054774][ T5900] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.404: Failed to acquire dquot type 1
[  142.065047][ T4263] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  142.107135][ T5900] EXT4-fs (loop0): 1 truncate cleaned up
[  142.107250][ T5901] device veth0_to_bond entered promiscuous mode
[  142.128119][ T5900] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.189483][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[  142.207298][ T5885] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  142.382945][ T4263] usb 7-1: Using ep0 maxpacket: 16
[  142.521775][ T4263] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.545820][ T5925] ip_tables: iptables: counters copy to user failed while replacing table
[  142.574539][ T4263] usb 7-1: config 0 interface 0 has no altsetting 0
[  142.598791][ T4263] usb 7-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  142.620072][ T4263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.656923][ T4263] usb 7-1: config 0 descriptor??
[  142.670440][ T5931] capability: warning: `syz.5.415' uses deprecated v2 capabilities in a way that may be insecure
[  142.994745][ T5944] loop7: detected capacity change from 0 to 128
[  143.048073][ T4263] usbhid 7-1:0.0: can't add hid device: -71
[  143.055854][ T4263] usbhid: probe of 7-1:0.0 failed with error -71
[  143.086308][ T4263] usb 7-1: USB disconnect, device number 6
[  143.105396][ T5949] loop0: detected capacity change from 0 to 256
[  143.115600][ T5944] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.184208][ T5944] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  143.206769][ T5952] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497
[  143.217459][ T5952] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5952, name: syz.3.422
[  143.226425][ T5952] 1 lock held by syz.3.422/5952:
[  143.231385][ T5952]  #0: ffffffff8d1448f8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0
[  143.241621][ T5952] irq event stamp: 110
[  143.245713][ T5952] hardirqs last  enabled at (109): [<ffffffff89cb8aa2>] _raw_spin_unlock_irqrestore+0x82/0x120
[  143.256084][ T5952] hardirqs last disabled at (110): [<ffffffff89cb8926>] _raw_spin_lock_irq+0x86/0xf0
[  143.265591][ T5952] softirqs last  enabled at (92): [<ffffffff8867cf4a>] ip_setsockopt+0x58a/0x31e0
[  143.274824][ T5952] softirqs last disabled at (90): [<ffffffff87df5f9b>] release_sock+0x2b/0x1b0
[  143.283790][ T5952] Preemption disabled at:
[  143.283804][ T5952] [<0000000000000000>] 0x0
[  143.292575][ T5952] CPU: 0 PID: 5952 Comm: syz.3.422 Not tainted syzkaller #0
[  143.299887][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.310917][ T5952] Call Trace:
[  143.314198][ T5952]  <TASK>
[  143.317123][ T5952]  dump_stack_lvl+0x188/0x250
[  143.321818][ T5952]  ? ip_setsockopt+0x58a/0x31e0
[  143.326670][ T5952]  ? show_regs_print_info+0x20/0x20
[  143.331873][ T5952]  ? load_image+0x410/0x410
[  143.336553][ T5952]  ___might_sleep+0x493/0x610
[  143.341235][ T5952]  ? __might_sleep+0xf0/0xf0
[  143.345825][ T5952]  down_read+0x20/0x2e0
[  143.349986][ T5952]  kernfs_walk_and_get_ns+0x7e/0x2c0
[  143.355265][ T5952]  ? kernfs_find_ns+0x510/0x510
[  143.360105][ T5952]  ? current_cgns_cgroup_from_root+0x2a9/0x2f0
[  143.366253][ T5952]  cgroup_get_from_path+0x5f/0x2f0
[  143.371353][ T5952]  cgroup_mt_check_v1+0x1f6/0x300
[  143.376364][ T5952]  xt_check_match+0x499/0xc50
[  143.381035][ T5952]  ? xt_check_proc_name+0x240/0x240
[  143.386234][ T5952]  ? pcpu_alloc+0x11e6/0x16d0
[  143.390903][ T5952]  ? xt_find_match+0x1e1/0x210
[  143.395660][ T5952]  translate_table+0x1481/0x1f60
[  143.400598][ T5952]  ? ipt_register_table+0x7b0/0x7b0
[  143.405787][ T5952]  ? __might_fault+0xb7/0x110
[  143.410537][ T5952]  ? __lock_acquire+0x7d40/0x7d40
[  143.415559][ T5952]  ? _copy_from_user+0x111/0x170
[  143.420494][ T5952]  do_ipt_set_ctl+0x963/0xd70
[  143.425160][ T5952]  ? nf_setsockopt+0x218/0x280
[  143.429911][ T5952]  ? ipt_unregister_table_exit+0x220/0x220
[  143.435702][ T5952]  ? __lock_acquire+0x7d40/0x7d40
[  143.440713][ T5952]  ? __mutex_lock_common+0x435/0x2400
[  143.446077][ T5952]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  143.451695][ T5952]  ? mutex_unlock+0x10/0x10
[  143.456184][ T5952]  ? __local_bh_enable_ip+0x136/0x1c0
[  143.461545][ T5952]  ? lockdep_hardirqs_on+0x94/0x140
[  143.466729][ T5952]  ? __local_bh_enable_ip+0x136/0x1c0
[  143.472101][ T5952]  nf_setsockopt+0x25f/0x280
[  143.476681][ T5952]  ip_setsockopt+0x29c3/0x31e0
[  143.481437][ T5952]  ? ipv4_pktinfo_prepare+0x6b0/0x6b0
[  143.486799][ T5952]  ? __might_sleep+0xf0/0xf0
[  143.491373][ T5952]  ? rcu_lock_release+0x9/0x20
[  143.496125][ T5952]  tcp_setsockopt+0x229/0x1e60
[  143.500880][ T5952]  ? aa_sk_perm+0x7dc/0x910
[  143.505369][ T5952]  ? tcp_set_window_clamp+0x1a0/0x1a0
[  143.510729][ T5952]  ? aa_af_perm+0x340/0x340
[  143.515219][ T5952]  ? __fget_files+0x402/0x470
[  143.519887][ T5952]  ? aa_sock_opt_perm+0x74/0x100
[  143.524807][ T5952]  ? sock_common_setsockopt+0x32/0xb0
[  143.530183][ T5952]  ? sock_common_recvmsg+0x1c0/0x1c0
[  143.535470][ T5952]  __sys_setsockopt+0x2bf/0x3d0
[  143.540317][ T5952]  __x64_sys_setsockopt+0xb1/0xc0
[  143.545342][ T5952]  do_syscall_64+0x4c/0xa0
[  143.549758][ T5952]  ? clear_bhb_loop+0x30/0x80
[  143.554541][ T5952]  ? clear_bhb_loop+0x30/0x80
[  143.559211][ T5952]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.565093][ T5952] RIP: 0033:0x7f5ce814c559
[  143.569497][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.589092][ T5952] RSP: 002b:00007f5ce63a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.597506][ T5952] RAX: ffffffffffffffda RBX: 00007f5ce83d3fa0 RCX: 00007f5ce814c559
[  143.605564][ T5952] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003
[  143.613534][ T5952] RBP: 00007f5ce81e38b0 R08: 00000000000012b0 R09: 0000000000000000
[  143.621502][ T5952] R10: 0000200000003080 R11: 0000000000000246 R12: 0000000000000000
[  143.629466][ T5952] R13: 00007f5ce83d4038 R14: 00007f5ce83d3fa0 R15: 00007fff43af1848
[  143.637442][ T5952]  </TASK>
[  143.640450][ T5952] 
[  143.642790][ T5952] =============================
[  143.647735][ T5952] [ BUG: Invalid wait context ]
[  143.652574][ T5952] syzkaller #0 Tainted: G        W        
[  143.658361][ T5952] -----------------------------
[  143.663192][ T5952] syz.3.422/5952 is trying to lock:
[  143.668373][ T5952] ffffffff8d24fb90 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2c0
[  143.677841][ T5952] other info that might help us debug this:
[  143.683715][ T5952] context-{4:4}
[  143.687155][ T5952] 1 lock held by syz.3.422/5952:
[  143.692081][ T5952]  #0: ffffffff8d1448f8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x26/0x2f0
[  143.701804][ T5952] stack backtrace:
[  143.705502][ T5952] CPU: 0 PID: 5952 Comm: syz.3.422 Tainted: G        W         syzkaller #0
[  143.714155][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  143.724193][ T5952] Call Trace:
[  143.727459][ T5952]  <TASK>
[  143.730378][ T5952]  dump_stack_lvl+0x188/0x250
[  143.735043][ T5952]  ? show_regs_print_info+0x20/0x20
[  143.740224][ T5952]  ? load_image+0x410/0x410
[  143.744742][ T5952]  __lock_acquire+0x1810/0x7d40
[  143.749580][ T5952]  ? __show_trace_log_lvl+0x479/0x550
[  143.755025][ T5952]  ? verify_lock_unused+0x140/0x140
[  143.760215][ T5952]  ? __printk_cpu_unlock+0x5f/0x70
[  143.765316][ T5952]  ? dump_stack_lvl+0x1fd/0x250
[  143.770150][ T5952]  ? ip_setsockopt+0x58a/0x31e0
[  143.774987][ T5952]  ? show_regs_print_info+0x20/0x20
[  143.780174][ T5952]  ? load_image+0x410/0x410
[  143.784661][ T5952]  lock_acquire+0x19f/0x400
[  143.789146][ T5952]  ? kernfs_walk_and_get_ns+0x7e/0x2c0
[  143.794590][ T5952]  ? __might_sleep+0xf0/0xf0
[  143.799161][ T5952]  ? read_lock_is_recursive+0x10/0x10
[  143.804520][ T5952]  down_read+0x44/0x2e0
[  143.808671][ T5952]  ? kernfs_walk_and_get_ns+0x7e/0x2c0
[  143.814115][ T5952]  kernfs_walk_and_get_ns+0x7e/0x2c0
[  143.819384][ T5952]  ? kernfs_find_ns+0x510/0x510
[  143.824220][ T5952]  ? current_cgns_cgroup_from_root+0x2a9/0x2f0
[  143.830356][ T5952]  cgroup_get_from_path+0x5f/0x2f0
[  143.835450][ T5952]  cgroup_mt_check_v1+0x1f6/0x300
[  143.840462][ T5952]  xt_check_match+0x499/0xc50
[  143.845125][ T5952]  ? xt_check_proc_name+0x240/0x240
[  143.850306][ T5952]  ? pcpu_alloc+0x11e6/0x16d0
[  143.854976][ T5952]  ? xt_find_match+0x1e1/0x210
[  143.859723][ T5952]  translate_table+0x1481/0x1f60
[  143.864645][ T5952]  ? ipt_register_table+0x7b0/0x7b0
[  143.869837][ T5952]  ? __might_fault+0xb7/0x110
[  143.874498][ T5952]  ? __lock_acquire+0x7d40/0x7d40
[  143.879531][ T5952]  ? _copy_from_user+0x111/0x170
[  143.884458][ T5952]  do_ipt_set_ctl+0x963/0xd70
[  143.889132][ T5952]  ? nf_setsockopt+0x218/0x280
[  143.893878][ T5952]  ? ipt_unregister_table_exit+0x220/0x220
[  143.899665][ T5952]  ? __lock_acquire+0x7d40/0x7d40
[  143.904682][ T5952]  ? __mutex_lock_common+0x435/0x2400
[  143.910037][ T5952]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  143.915656][ T5952]  ? mutex_unlock+0x10/0x10
[  143.920160][ T5952]  ? __local_bh_enable_ip+0x136/0x1c0
[  143.925521][ T5952]  ? lockdep_hardirqs_on+0x94/0x140
[  143.930710][ T5952]  ? __local_bh_enable_ip+0x136/0x1c0
[  143.936080][ T5952]  nf_setsockopt+0x25f/0x280
[  143.940659][ T5952]  ip_setsockopt+0x29c3/0x31e0
[  143.945407][ T5952]  ? ipv4_pktinfo_prepare+0x6b0/0x6b0
[  143.950762][ T5952]  ? __might_sleep+0xf0/0xf0
[  143.955341][ T5952]  ? rcu_lock_release+0x9/0x20
[  143.960091][ T5952]  tcp_setsockopt+0x229/0x1e60
[  143.964838][ T5952]  ? aa_sk_perm+0x7dc/0x910
[  143.969327][ T5952]  ? tcp_set_window_clamp+0x1a0/0x1a0
[  143.974683][ T5952]  ? aa_af_perm+0x340/0x340
[  143.979179][ T5952]  ? __fget_files+0x402/0x470
[  143.983863][ T5952]  ? aa_sock_opt_perm+0x74/0x100
[  143.988798][ T5952]  ? sock_common_setsockopt+0x32/0xb0
[  143.994162][ T5952]  ? sock_common_recvmsg+0x1c0/0x1c0
[  143.999443][ T5952]  __sys_setsockopt+0x2bf/0x3d0
[  144.004296][ T5952]  __x64_sys_setsockopt+0xb1/0xc0
[  144.009323][ T5952]  do_syscall_64+0x4c/0xa0
[  144.013725][ T5952]  ? clear_bhb_loop+0x30/0x80
[  144.018532][ T5952]  ? clear_bhb_loop+0x30/0x80
[  144.023209][ T5952]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  144.029090][ T5952] RIP: 0033:0x7f5ce814c559
[  144.033494][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.053090][ T5952] RSP: 002b:00007f5ce63a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.061506][ T5952] RAX: ffffffffffffffda RBX: 00007f5ce83d3fa0 RCX: 00007f5ce814c559
[  144.069463][ T5952] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003
[  144.077417][ T5952] RBP: 00007f5ce81e38b0 R08: 00000000000012b0 R09: 0000000000000000
[  144.085370][ T5952] R10: 0000200000003080 R11: 0000000000000246 R12: 0000000000000000
[  144.093322][ T5952] R13: 00007f5ce83d4038 R14: 00007f5ce83d3fa0 R15: 00007fff43af1848
[  144.101281][ T5952]  </TASK>
[  144.224489][ T5949] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  144.315299][ T5955] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  144.323942][ T5955] FAT-fs (loop7): Filesystem has been set read-only
[  144.593841][ T5952] xt_cgroup: invalid path, errno=-2