last executing test programs:

5.832671367s ago: executing program 3 (id=588):
r0 = gettid()
timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec779000)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
chdir(&(0x7f00000000c0)='./sys\x00')
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

5.743567239s ago: executing program 3 (id=590):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/packet\x00')
r1 = fanotify_init(0x1, 0x40000)
open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50)
readv(r1, &(0x7f00000002c0)=[{0x0}], 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x6, 0x4, 0x80, 0x0, r2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x840)
close_range(r0, 0xffffffffffffffff, 0x0)

5.441886386s ago: executing program 2 (id=596):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.385299997s ago: executing program 0 (id=597):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xf8, 0x0, 0x2, 0x4, 0xe8, 0x6, 0x7, 0x9, 0x506, 0x15, 0x20, 0x7, 0x9, 0x6, 0xe}}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.316107039s ago: executing program 3 (id=599):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

5.072748345s ago: executing program 2 (id=601):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@local, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x5, 0x6, 0x1, 0x100, 0x100005, 0x540000, r1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
request_key(0x0, &(0x7f0000006180)={'syz', 0x0}, 0x0, 0xfffffffffffffffb)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x4, 0xfff3}, {0x9, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

3.940689963s ago: executing program 3 (id=602):
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x800)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000240)=""/242)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[], @dest_unreach={0x1, 0x5, 0x0, 0x2, '\x00', {0xf, 0x6, "c897df", 0x101, 0x33, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, [@srh={0x29, 0x0, 0x4, 0x0, 0x1, 0x30, 0x2}], "f1a96e3d0e3a608a"}}}}}}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r4, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c000280050007004000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r2, &(0x7f0000000200)="001adefeae804b4d45f3003b3100", 0xe, 0x44, &(0x7f0000000280)={0x11, 0x8100, r4, 0x1, 0x7, 0x6, @remote}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r5)

3.800718936s ago: executing program 0 (id=603):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)

3.529268703s ago: executing program 2 (id=604):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000020000000c009900c58b324a010000000800010000000000"], 0x28}}, 0x8000040)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000000)="0c000000010001", 0x7)
connect$inet6(r0, &(0x7f0000002140)={0xfd, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/igmp6\x00')
preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, 0x47, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd2c, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x10}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r5}}}}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)

3.203270021s ago: executing program 3 (id=606):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

2.760000952s ago: executing program 1 (id=607):
r0 = socket$netlink(0x10, 0x3, 0xc)
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800, &(0x7f0000000040)={[{@overriderock}, {@nocompress}, {@showassoc}, {@unhide}, {@utf8}]}, 0x1, 0x553, &(0x7f0000000b00)="$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")
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000740)=0x2000, 0x4)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="4800000014003474f89b3abbe22beb190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x72}], 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x7, &(0x7f00000000c0)=[{0x6, 0x6, 0x3, 0x7}, {0x5, 0x8, 0x81, 0x4}, {0x1ff, 0xf, 0x6, 0x4}, {0x5, 0xa, 0xb}, {0x5, 0x2, 0x94, 0x5}, {0x2, 0x6, 0x3, 0x7e2}, {0x9, 0x91, 0x6, 0x5}]})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000009c0)={&(0x7f0000000580)={{@my=0x1, 0x3}, {@host, 0xff}, 0x400, "dc8c0e7663cb915397c9f9452b38783437fe26086743727c923e71c36b4547e791738f6bec8c3a55a841d97afecd978d798b8ec1599bb3d491ace4715ff30ce81761cda7dc1cb4ceb685e4e21d37b35396990f39ddd7033ea1b18cb1909ca43615518270f709cb62c3751486488400e413334ab46c35873ecbb021e1759ec657ff82019c03adc632ba25c1106e8bc2b51036b5d59705c7eb79861bb475da60b4ffd3414288df8e3c864e1387882dc4e2ec07a81202dfc4d0a43debef7930c57f97970fd1acd61ea715819fa285072967ded7d2baed784b8aa0363a47208b9f4b01c840f4ef52983c765ab82e9b7e5cb495905fee7030b59e864e4635f0a59ff21782f4ba54fc555274fd052158869e7a35c7c3cb78468a4f91f6e215f54713da876c85f14af94c7905dd392ce98c864ff90eb0a875141ca92292914b292ac9b4c88b2799b337ed5826ccf1c190e808eaa58dcdd0dcc8037ca6dc804314d5c538553ef00cda1c3dc94dedec2835f191405e9ed97460922d7e2d0b9fbc2634b82bc3a21c13b93be759dfebd7cfe3a46213d1407362a6d5d87977ca7a712bab14481dfcf75ebe67291398f28ac1c8151db5e83bdd81a8d7764ba47f19909aa5fd00b95e37afb7ba3e22a5d3d4d72b1329766c4d022b0d29ababa858e3321403f82660a5f016f2f761531c83679493365e87924a14a2c159b57a87c9b4f3ccca20b3a971b093577abd04f1d570b7a0af905a664e24c08b2a134128188495ee9eaeb2a629787ab82f0c770e4fcf9516ae8cd24f0030b3271ca78fe38f4795ccc18749775c763b4cc089361411443dc8b0f6df3c3a9225ba0bc6bad0789bed8881a8e477b304319c6d1c9b469f22ab7c8c0afd367c4758504d98cf07bfb0576d7cd823b4ee09c6009be7d6bf07859d89bec131b6516375ae6c107805c45c36c2f08d79749fe7507e5aa38ffe5cac97a9dfffabe22d36d536c2a5cbc425a41b5d6d4c32066babd48b733a39c0b80562159a8910340313a3e43ef809d2c6b54a75f26b29f96ee906d8d45b66d16a6852bdd7b8085c157a881bbae3dbda3738dc6ff3ea5d5bd48c9d8250953cc99a503d2190ad0dbb5284b2721c4b6141dcc5eae7652e28f2761fd196aad128c3c8bb0a9c18068d8a79e365f203b9adad4997ef20b5f98d9a90f51f06c0581eea9cbde31328761ddad74ae66c025e0f855b4634e368a30e6130f4e6210f5e3ab8d69af47327fcdeac3a7f7d7827bcad9228b517f38f669169bc6d91529cc79ead40eb9ae4f4cbd23264977fda1d440a695152aec853738abdddeb17ad9cc53745f686ed1ecadb32074270c31982d74a6b7fa0c16d6f1755ead33910f1738bf2b8b14dd90cefaeabd0e0df0b66b9f1674460752c96cdc54cb35016ccdfcb98d8f5a99599eed7053d696cd08fdcb14dd3314bdb94fed220d6"}, 0x418, 0x4})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)

2.702539614s ago: executing program 0 (id=608):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.696039604s ago: executing program 1 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfff, 0x999, 0xfffffc01, 0x800, 0xfff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.559768617s ago: executing program 2 (id=610):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r0)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r2, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0)
dup2(r2, r3)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x13)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

2.527255038s ago: executing program 1 (id=611):
r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3)
write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.357478762s ago: executing program 1 (id=613):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket(0x10, 0x803, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

2.171400216s ago: executing program 1 (id=615):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000ebffff0400000a140000005100010000"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10)
syz_extract_tcp_res(0x0, 0xf4, 0x7ff)
syz_emit_ethernet(0x86, &(0x7f0000000240)=ANY=[], 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))

2.048471439s ago: executing program 4 (id=616):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14)

2.009841031s ago: executing program 1 (id=617):
syz_mount_image$jfs(&(0x7f0000000340), &(0x7f0000000040)='./file1\x00', 0x3210846, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d752c646973636172643d3078303030303030303030303030303030342c696f636861727365743d69736f383835392d392c646973636172642c696f636861727365743d6d6163726f6d616e2c6572726f72733d72656d6f756e742d726f2c71756f74612c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c75737271756f74612c006ff298bdf09f85ee9642cda8"], 0x24, 0x62d7, &(0x7f0000021240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x18000, &(0x7f0000000280)={[{@barrier}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@norecovery}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x120088c, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c64656275672c73686f72746e616d653d6c6f7765722c757466383d302c636865636b3d7374066963742c00"], 0x11, 0x305, &(0x7f0000000380)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x40000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000280)={[{@umask={'umask', 0x3d, 0xeef}}, {}, {@type={'type', 0x3d, "c3da0558"}}, {@creator={'creator', 0x3d, "0de07c34"}}, {@part={'part', 0x3d, 0x3ff}}, {}, {@dir_umask}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x4, 0x31d, &(0x7f0000001200)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x7)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)

1.864685404s ago: executing program 4 (id=618):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x2c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)="030000001b000000080000", 0xb)
read$FUSE(r1, 0x0, 0x0)

1.713124818s ago: executing program 4 (id=619):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
unshare(0x22020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
read(r0, &(0x7f0000001000)=""/4096, 0x1000)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1.60963135s ago: executing program 2 (id=620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e)
sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

1.543429932s ago: executing program 0 (id=621):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

838.484289ms ago: executing program 0 (id=622):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0)
landlock_restrict_self(r2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0)

548.229276ms ago: executing program 2 (id=623):
r0 = socket$packet(0x11, 0x2, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@dellinkprop={0x24, 0x6d, 0x1fd, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x4008, 0x4b080}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004885}, 0x40d4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', <r5=>0x0})
gettid()
sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)

536.498336ms ago: executing program 4 (id=624):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff3}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=@delchain={0x38, 0x2c, 0xf31, 0x70bd28, 0x1ffe, {0x0, 0x0, 0x0, r6, {0xb}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010)

452.252709ms ago: executing program 0 (id=625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='noswap'])
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6tnl0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)
ioctl(r1, 0xc138fd01, &(0x7f0000000140)="04000000000000000000")
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)

183.199475ms ago: executing program 4 (id=626):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r1, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e23, [0x3, 0xf5, 0x4, 0xc3], [0x6, 0x0, 0x10004, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xecd6}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20044000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r3, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
accept4(r0, 0x0, 0x0, 0x0)

16.368159ms ago: executing program 3 (id=627):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

0s ago: executing program 4 (id=628):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x58a, &(0x7f0000000680)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xffff1579}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

kernel console output (not intermixed with test programs):

ANGE): veth0_to_batadv: link becomes ready
[   72.349343][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.367376][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.379337][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.390052][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.400155][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.410884][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.425464][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.474466][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.486518][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.497907][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.509243][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.519568][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.530821][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.541627][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.552308][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.565049][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.573052][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.583218][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.592656][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.601803][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.613335][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.622913][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.632058][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.641124][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.671352][ T4211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.671812][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.679365][ T4211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.703148][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.714322][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.724873][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.734814][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.746244][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.756365][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.767137][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.778732][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.792167][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.801468][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.810185][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.819342][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.835553][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.842984][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.848179][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   72.851053][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.868991][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   72.877903][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.893031][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.919276][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.956529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.993554][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.016927][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.041416][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.058057][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.086494][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.098528][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.103656][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.110006][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.125700][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.154093][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.183440][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.210342][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.241099][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.248966][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.276004][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.349056][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.357293][ T4269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.371934][ T4269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.379494][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   73.388548][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.410165][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.605716][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[   74.672450][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[   74.709880][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[   74.808523][   T23] Bluetooth: hci2: command 0x0419 tx timeout
[   74.834343][   T23] Bluetooth: hci1: command 0x0419 tx timeout
[   75.471724][ T4231] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   75.928064][ T4309] device syzkaller0 entered promiscuous mode
[   75.969398][  T144] Bluetooth: hci5: Frame reassembly failed (-84)
[   75.986209][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   75.996616][  T144] Bluetooth: hci5: Frame reassembly failed (-84)
[   76.001673][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   76.052297][ T4307] device dummy0 entered promiscuous mode
[   76.068454][ T4307] device eth0 entered promiscuous mode
[   76.083630][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.100345][ T4307] Cannot create hsr debugfs directory
[   77.217242][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   77.539091][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.547250][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.641022][ T4329] =======================================================
[   77.641022][ T4329] WARNING: The mand mount option has been deprecated and
[   77.641022][ T4329]          and is ignored by this kernel. Remove the mand
[   77.641022][ T4329]          option from the mount to silence this warning.
[   77.641022][ T4329] =======================================================
[   77.709424][ T4330] overlayfs: overlapping lowerdir path
[   77.801078][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short
[   78.403431][    T7] Bluetooth: hci5: command 0x1003 tx timeout
[   78.421266][ T4189] Bluetooth: hci5: sending frame failed (-49)
[   78.440826][ T4231] usb 5-1: unable to read config index 0 descriptor/start: -71
[   78.473969][ T4231] usb 5-1: can't read configurations, error -71
[   78.884320][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'.
[   78.953729][ T4338] loop0: detected capacity change from 0 to 2048
[   79.042772][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.129697][   T26] audit: type=1326 audit(1786174539.363:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4343 comm="syz.3.18" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c102910d9 code=0x0
[   79.167348][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready
[   79.190427][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.207045][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'.
[   79.224790][ T4342] Zero length message leads to an empty skb
[   79.341758][ T4350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   79.478580][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'.
[   79.763745][ T4338] syz.0.16 (4338) used greatest stack depth: 18576 bytes left
[   80.308582][ T4380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   80.533169][   T13] Bluetooth: hci5: command 0x1001 tx timeout
[   80.549551][ T4189] Bluetooth: hci5: sending frame failed (-49)
[   80.599064][ T4374] device bridge_slave_1 left promiscuous mode
[   80.615630][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.625985][ T4400] device syzkaller0 entered promiscuous mode
[   81.998850][ T4411] loop0: detected capacity change from 0 to 64
[   82.122711][ T4415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.590720][   T13] Bluetooth: hci5: command 0x1009 tx timeout
[   83.236970][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   83.531067][ T4420] loop3: detected capacity change from 0 to 32768
[   84.921865][ T4448] device wlan0 entered promiscuous mode
[   85.043505][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.191541][ T4454] device bridge_slave_1 left promiscuous mode
[   85.212128][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.482642][ T4465] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   85.502841][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'.
[   85.561128][ T4463] netlink: 6 bytes leftover after parsing attributes in process `syz.0.40'.
[   86.229051][ T4488] loop4: detected capacity change from 0 to 128
[   86.570961][ T4312] blk_update_request: I/O error, dev sda, sector 704822 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[   86.582793][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88103)
[   86.583977][ T4490] attempt to access beyond end of device
[   86.583977][ T4490] loop4: rw=2049, want=417, limit=128
[   86.597560][ T4312] blk_update_request: I/O error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[   86.616729][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88109)
[   86.628279][ T4312] blk_update_request: I/O error, dev sda, sector 704886 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0
[   86.633150][ T4314] Buffer I/O error on device sda1, logical block 88064
[   86.639558][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88169)
[   86.667475][ T1336] cfg80211: failed to load regulatory.db
[   86.695715][ T4314] Buffer I/O error on device sda1, logical block 88068
[   86.728730][ T4314] Buffer I/O error on device sda1, logical block 88069
[   86.773954][ T4314] Buffer I/O error on device sda1, logical block 88070
[   86.817669][ T4314] Buffer I/O error on device sda1, logical block 88072
[   86.878349][ T4314] Buffer I/O error on device sda1, logical block 88073
[   86.916444][ T4314] Buffer I/O error on device sda1, logical block 88074
[   86.956125][ T4314] Buffer I/O error on device sda1, logical block 88075
[   87.000770][ T4314] Buffer I/O error on device sda1, logical block 88076
[   87.036600][ T4314] Buffer I/O error on device sda1, logical block 88077
[   87.055629][ T4312] blk_update_request: I/O error, dev sda, sector 705366 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 0
[   87.066985][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88223)
[   87.183105][ T4211] attempt to access beyond end of device
[   87.183105][ T4211] loop4: rw=1, want=151, limit=128
[   87.234444][ T4312] blk_update_request: I/O error, dev sda, sector 705798 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[   87.245920][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88225)
[   87.257583][ T4312] blk_update_request: I/O error, dev sda, sector 705814 op 0x1:(WRITE) flags 0x4000 phys_seg 4 prio class 0
[   87.268207][ T4211] Buffer I/O error on dev loop4, logical block 150, lost async page write
[   87.455662][ T4312] blk_update_request: I/O error, dev sda, sector 706320 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0
[   87.467209][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88303)
[   87.478895][ T4312] blk_update_request: I/O error, dev sda, sector 706438 op 0x1:(WRITE) flags 0x0 phys_seg 25 prio class 0
[   87.490380][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88360)
[   87.728976][ T4312] blk_update_request: I/O error, dev sda, sector 706902 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 0
[   87.740454][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88374)
[   87.752198][ T4312] blk_update_request: I/O error, dev sda, sector 707006 op 0x1:(WRITE) flags 0x0 phys_seg 18 prio class 0
[   87.763659][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88393)
[   87.775301][ T4312] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 88405)
[   88.205799][ T3521] Aborting journal on device sda1-8.
[   88.224062][  T150] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[   88.233245][ T3521] JBD2: Error -5 detected when updating journal superblock for sda1-8.
[   88.291242][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.311667][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   88.340406][ T4174] EXT4-fs (sda1): I/O error while writing superblock
[   88.347274][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   88.366421][   T26] audit: type=1800 audit(1786174548.603:3): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd-run-hook" name="dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0
[   88.398089][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.457463][ T3852] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4452: inode #125: block 152: comm dhcpcd: unable to read itable block
[   88.471177][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   88.490582][ T4174] EXT4-fs (sda1): I/O error while writing superblock
[   88.497320][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   88.568407][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.610750][  T150] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   88.619069][ T4174] EXT4-fs (sda1): I/O error while writing superblock
[   88.633240][ T4264] EXT4-fs (sda1): previous I/O error to superblock detected
[   88.639199][ T3852] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[   88.650679][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   88.658998][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.670869][ T4264] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[   88.679075][ T4264] EXT4-fs (sda1): I/O error while writing superblock
[   88.721315][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   88.727919][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.751128][ T4523] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.52: Detected aborted journal
[   88.820630][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   88.821941][ T4493] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   88.827203][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   88.847346][ T4523] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.52: Detected aborted journal
[   89.059588][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   90.040323][ T4231] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting
[   90.324401][ T4553] loop3: detected capacity change from 0 to 1024
[   90.423333][ T4553] hfsplus: unable to parse mount options
[   90.432561][ T4560] loop2: detected capacity change from 0 to 128
[   90.632655][ T4563] attempt to access beyond end of device
[   90.632655][ T4563] loop2: rw=2049, want=593, limit=128
[   90.644161][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'.
[   90.922208][ T4314] attempt to access beyond end of device
[   90.922208][ T4314] loop2: rw=1, want=151, limit=128
[   90.958290][ T4314] Buffer I/O error on dev loop2, logical block 150, lost async page write
[   91.147851][ T4569] device syzkaller0 entered promiscuous mode
[   93.329794][ T4590] EXT4-fs error: 158 callbacks suppressed
[   93.329834][ T4590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.71: Detected aborted journal
[   93.346650][ T4590] EXT4-fs: 150 callbacks suppressed
[   93.346692][ T4590] EXT4-fs (sda1): Remounting filesystem read-only
[   93.451746][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   93.655893][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   93.999734][ T4590] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.71: Detected aborted journal
[   94.010615][ T4590] EXT4-fs (sda1): Remounting filesystem read-only
[   94.110776][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[   94.125411][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   94.136668][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   94.143701][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   94.170344][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   94.170724][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   94.211445][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   94.233094][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[   94.250691][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   94.284956][ T4599] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.72: Detected aborted journal
[   94.299882][ T4600] EXT4-fs (sda1): Remounting filesystem read-only
[   94.341183][ T4599] EXT4-fs (sda1): Remounting filesystem read-only
[   94.361336][ T4600] EXT4-fs (sda1): Remounting filesystem read-only
[   94.378697][ T4599] EXT4-fs (sda1): Remounting filesystem read-only
[   96.428668][ T4638] loop2: detected capacity change from 0 to 512
[   97.312898][ T4638] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.86: iget: bad extended attribute block 134217728
[   97.429237][ T4638] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.86: couldn't read orphan inode 15 (err -117)
[   97.486867][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback.
[   97.592101][ T4652] Cannot find add_set index 0 as target
[   98.215242][ T4658] loop1: detected capacity change from 0 to 256
[   98.261067][ T4647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[   98.359575][ T4659] EXT4-fs error: 101 callbacks suppressed
[   98.359594][ T4659] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.93: Detected aborted journal
[   98.383216][ T4661] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.94: Detected aborted journal
[   98.395963][ T4637] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.86: Detected aborted journal
[   98.406944][ T4659] EXT4-fs: 89 callbacks suppressed
[   98.406958][ T4659] EXT4-fs (sda1): Remounting filesystem read-only
[   98.428535][ T4638] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 208 with error 28
[   98.439912][ T4661] EXT4-fs (sda1): Remounting filesystem read-only
[   98.443404][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   98.458459][ T4637] EXT4-fs (sda1): Remounting filesystem read-only
[   98.459553][ T4658] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   98.482158][ T4661] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.94: Detected aborted journal
[   98.506724][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   98.515020][ T4664] loop0: detected capacity change from 0 to 1024
[   98.523776][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   98.550891][ T4661] EXT4-fs (sda1): Remounting filesystem read-only
[   98.566064][ T4638] EXT4-fs (loop2): This should not happen!! Data will be lost
[   98.566064][ T4638] 
[   98.566720][ T4637] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.86: Detected aborted journal
[   98.578347][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   98.608639][ T4657] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.92: Detected aborted journal
[   98.640078][ T4657] EXT4-fs (sda1): Remounting filesystem read-only
[   98.647668][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   98.659318][ T4638] EXT4-fs (loop2): Total free blocks count 0
[   98.665938][ T4664] EXT4-fs (loop0): Ignoring removed bh option
[   98.682983][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   98.701532][ T4637] EXT4-fs (sda1): Remounting filesystem read-only
[   98.708448][ T4638] EXT4-fs (loop2): Free/Dirty block details
[   98.725681][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[   98.747030][ T4638] EXT4-fs (loop2): free_blocks=0
[   98.785100][ T4638] EXT4-fs (loop2): dirty_blocks=208
[   98.790387][ T4638] EXT4-fs (loop2): Block reservation details
[   98.796971][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[   98.851802][ T4638] EXT4-fs (loop2): i_reserved_data_blocks=208
[   98.853260][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback.
[   98.962807][ T4664] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.228588][ T4705] loop0: detected capacity change from 0 to 128
[  100.308891][ T4705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'.
[  100.491394][ T3926] EXT4-fs warning: 45 callbacks suppressed
[  100.491411][ T3926] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1083: inode #121: lblock 0: comm crond: error -5 reading directory block
[  100.585052][ T4237] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.450661][   T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  101.510783][ T4237] usb 4-1: Using ep0 maxpacket: 32
[  101.630793][ T4237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.657899][ T4237] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  101.719541][   T26] audit: type=1800 audit(1786174561.953:4): pid=4725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.112" name="addr_trtype" dev="configfs" ino=34219 res=0 errno=0
[  101.788953][   T23] nvmet: connect request for invalid subsystem testnqn!
[  101.811058][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.829589][ T4725] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn"
[  101.841023][ T4237] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  101.850144][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.865381][   T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.886343][ T4237] usb 4-1: Product: syz
[  101.893038][   T21] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  101.910286][ T4237] usb 4-1: Manufacturer: syz
[  101.915304][ T4237] usb 4-1: SerialNumber: syz
[  101.926485][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.956689][ T4237] usb 4-1: config 0 descriptor??
[  101.974581][   T21] usb 3-1: config 0 descriptor??
[  102.120629][ T4723] loop1: detected capacity change from 0 to 32768
[  102.170295][ T4723] JBD2: Ignoring recovery information on journal
[  102.308607][ T4723] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.320878][   T21] usbhid 3-1:0.0: can't add hid device: -71
[  102.327184][   T21] usbhid: probe of 3-1:0.0 failed with error -71
[  102.364470][   T21] usb 3-1: USB disconnect, device number 2
[  102.539569][   T26] audit: type=1800 audit(1786174562.773:5): pid=4723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.113" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  102.605256][ T4743] netlink: 'syz.4.118': attribute type 7 has an invalid length.
[  102.614484][ T4743] netlink: 'syz.4.118': attribute type 7 has an invalid length.
[  103.378753][ T4753] EXT4-fs error: 165 callbacks suppressed
[  103.378890][ T4753] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.121: Detected aborted journal
[  103.892319][ T4227] usb 4-1: USB disconnect, device number 2
[  103.899515][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  103.911568][ T4753] EXT4-fs: 148 callbacks suppressed
[  103.911592][ T4753] EXT4-fs (sda1): Remounting filesystem read-only
[  103.924081][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  103.974621][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  103.991859][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  104.004010][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.011094][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  104.024193][ T4753] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.121: Detected aborted journal
[  104.041014][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  104.043388][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  104.073237][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.079964][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  104.091534][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  104.103353][ T4753] EXT4-fs (sda1): Remounting filesystem read-only
[  104.113518][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.123609][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.128094][ T4753] EXT4-fs (sda1): Remounting filesystem read-only
[  104.149175][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.158238][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  104.247846][ T4755] sctp: [Deprecated]: syz.0.121 (pid 4755) Use of int in max_burst socket option.
[  104.247846][ T4755] Use struct sctp_assoc_value instead
[  104.533255][ T4764] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  104.711661][ T4764] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  105.582858][ T4783] capability: warning: `syz.4.130' uses 32-bit capabilities (legacy support in use)
[  105.740703][ T4190] ocfs2: Unmounting device (7,1) on (node local)
[  105.975250][ T4796] loop0: detected capacity change from 0 to 32768
[  108.418871][ T4859] EXT4-fs error: 148 callbacks suppressed
[  108.418887][ T4859] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.148: Detected aborted journal
[  108.429410][ T4862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.149: Detected aborted journal
[  108.441504][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  108.464542][ T4863] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.150: Detected aborted journal
[  108.478061][ T4861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.151: Detected aborted journal
[  108.504612][ T4863] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.150: Detected aborted journal
[  108.535579][ T4862] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.149: Detected aborted journal
[  108.535861][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  108.571853][ T4861] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.151: Detected aborted journal
[  108.588776][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  109.641632][ T4174] EXT4-fs: 145 callbacks suppressed
[  109.641651][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  109.717754][ T4876] EXT4-fs (sda1): Remounting filesystem read-only
[  109.728333][ T4878] EXT4-fs (sda1): Remounting filesystem read-only
[  109.775658][ T4877] EXT4-fs (sda1): Remounting filesystem read-only
[  109.804607][ T4876] EXT4-fs (sda1): Remounting filesystem read-only
[  109.820126][ T4878] EXT4-fs (sda1): Remounting filesystem read-only
[  109.826363][ T4877] EXT4-fs (sda1): Remounting filesystem read-only
[  109.869856][ T4879] Illegal XDP return value 4294967274, expect packet loss!
[  109.917606][ T4882] EXT4-fs (sda1): Remounting filesystem read-only
[  109.928035][ T4882] EXT4-fs (sda1): Remounting filesystem read-only
[  109.940904][ T4882] EXT4-fs (sda1): Remounting filesystem read-only
[  109.959814][ T4885] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  109.989013][ T4884] loop3: detected capacity change from 0 to 7
[  110.006846][    C0] print_req_error: 61 callbacks suppressed
[  110.006861][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.023755][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.034631][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.045591][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.054231][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.065229][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.092563][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.103578][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.140661][ T4889] loop_set_status: loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) has still dirty pages (nrpages=1)
[  110.215114][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.226183][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.229116][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'.
[  110.244775][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.255776][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.271546][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.282530][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.291031][ T4262] ldm_validate_partition_table(): Disk read failed.
[  110.305450][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.316424][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.325038][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.336008][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.351516][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  110.362467][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  110.395040][ T4262] Dev loop3: unable to read RDB block 0
[  110.415073][ T4262]  loop3: unable to read partition table
[  110.438652][ T4262] loop3: partition table beyond EOD, truncated
[  110.458685][ T4884] ldm_validate_partition_table(): Disk read failed.
[  110.474074][ T4884] Dev loop3: unable to read RDB block 0
[  110.480369][ T4884]  loop3: unable to read partition table
[  110.490509][ T4884] loop3: partition table beyond EOD, truncated
[  110.515801][ T4891] ldm_validate_partition_table(): Disk read failed.
[  110.520326][ T4884] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  110.535666][ T4891] Dev loop3: unable to read RDB block 0
[  110.545416][ T4891]  loop3: unable to read partition table
[  110.551670][ T4891] loop3: partition table beyond EOD, truncated
[  110.558822][ T4891] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  111.493698][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  111.732268][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.921192][ T4908] device bridge_slave_0 left promiscuous mode
[  111.945503][ T4908] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.006452][ T4908] bond0: (slave bond_slave_0): Releasing backup interface
[  112.757996][ T4908] bond0: (slave bond_slave_1): Releasing backup interface
[  112.882353][ T4908] team0: Port device team_slave_0 removed
[  112.920392][ T4908] team0: Port device team_slave_1 removed
[  112.948430][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.967122][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.993483][ T4908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.005983][ T4908] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.040070][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.070696][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.096523][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.146653][ T4914] device bridge_slave_0 left promiscuous mode
[  113.169390][ T4914] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.213417][ T4914] device bridge_slave_1 left promiscuous mode
[  113.239364][ T4914] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.258404][ T4914] bond0: (slave bond_slave_0): Releasing backup interface
[  113.307987][ T4914] bond0: (slave bond_slave_1): Releasing backup interface
[  113.419894][ T4914] team0: Port device team_slave_0 removed
[  113.448008][ T4174] EXT4-fs error: 107 callbacks suppressed
[  113.448025][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  113.472014][ T4934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.169: Detected aborted journal
[  113.481533][ T4914] team0: Port device team_slave_1 removed
[  113.489505][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.502870][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  113.504636][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.531021][ T4934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.169: Detected aborted journal
[  113.537490][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  113.555129][ T4914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.569261][ T4914] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.614632][ T4927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.167: Detected aborted journal
[  113.629314][ T4934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.169: Detected aborted journal
[  113.640572][ T4932] tipc: Started in network mode
[  113.645879][ T4932] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  113.668733][ T4932] tipc: Enabled bearer <eth:syz_tun>, priority 10
[  113.682030][ T4934] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.169: Detected aborted journal
[  113.698422][ T4927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.167: Detected aborted journal
[  113.717071][ T4927] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.167: Detected aborted journal
[  114.693173][   T13] tipc: Node number set to 43690
[  114.850265][ T4174] EXT4-fs: 107 callbacks suppressed
[  114.850282][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  114.908085][ T4952] EXT4-fs (sda1): Remounting filesystem read-only
[  114.932948][ T4953] EXT4-fs (sda1): Remounting filesystem read-only
[  114.948237][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  114.961023][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  114.978202][ T4953] EXT4-fs (sda1): Remounting filesystem read-only
[  114.994383][ T4952] EXT4-fs (sda1): Remounting filesystem read-only
[  115.218824][ T4953] EXT4-fs (sda1): Remounting filesystem read-only
[  115.225457][ T4953] EXT4-fs (sda1): Remounting filesystem read-only
[  115.232431][ T4953] EXT4-fs (sda1): Remounting filesystem read-only
[  116.178013][ T4955] sched: RT throttling activated
[  118.124205][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'.
[  118.184978][ T4969] device syzkaller0 entered promiscuous mode
[  118.214917][ T4966] loop4: detected capacity change from 0 to 512
[  118.369974][ T4966] EXT4-fs (loop4): inodes count not valid: 40 vs 32
[  118.452676][ T4174] EXT4-fs error: 70 callbacks suppressed
[  118.452694][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  118.491195][ T4965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.179: Detected aborted journal
[  118.525001][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  118.547850][ T4976] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.183: Detected aborted journal
[  118.570711][ T4965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.179: Detected aborted journal
[  118.613636][ T4973] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.181: Detected aborted journal
[  118.635897][ T4976] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.183: Detected aborted journal
[  118.652498][ T4979] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.182: Detected aborted journal
[  118.661363][ T4965] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.179: Detected aborted journal
[  118.702684][ T4979] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.182: Detected aborted journal
[  119.105995][ T4991] device syzkaller0 entered promiscuous mode
[  119.424471][ T4999] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  119.462302][ T4999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  120.211943][ T5000] EXT4-fs: 82 callbacks suppressed
[  120.211954][ T5000] EXT4-fs (sda1): Remounting filesystem read-only
[  120.230729][ T5000] EXT4-fs (sda1): Remounting filesystem read-only
[  120.266647][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.273892][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  120.281775][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.292341][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.302603][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.310688][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.320938][ T5002] EXT4-fs (sda1): Remounting filesystem read-only
[  120.387472][ T5006] EXT4-fs (sda1): Remounting filesystem read-only
[  120.472136][ T5012] capability: warning: `syz.2.192' uses deprecated v2 capabilities in a way that may be insecure
[  120.762499][ T5021] xt_CT: No such helper "syz1"
[  121.444299][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  121.471272][ T5005] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  121.708937][ T5040] nvmet: adding nsid 1 to subsystem subsys1
[  122.754803][ T5046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.963961][ T5057] binder: 5056:5057 ioctl c0306201 200000000180 returned -14
[  123.030404][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'.
[  123.060359][ T5067] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  123.092885][ T5067] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821)
[  123.199468][ T5072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.463294][ T4174] EXT4-fs error: 176 callbacks suppressed
[  123.463337][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  123.623728][ T5073] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.214: Detected aborted journal
[  123.959999][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  124.047261][ T5069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.213: Detected aborted journal
[  124.061512][ T5073] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.214: Detected aborted journal
[  124.096812][ T5069] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.213: Detected aborted journal
[  124.122080][ T5073] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.214: Detected aborted journal
[  124.150839][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  124.198298][ T5077] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.215: Detected aborted journal
[  124.220707][ T5073] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.214: Detected aborted journal
[  124.312258][ T5076] netlink: 14 bytes leftover after parsing attributes in process `syz.4.214'.
[  124.680714][ T4264] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  124.836712][ T5093] device syzkaller0 entered promiscuous mode
[  124.872912][ T5093] tipc: Started in network mode
[  124.877857][ T5093] tipc: Node identity 1a0801e2d51e, cluster identity 4711
[  124.914785][ T5093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.948926][ T5092] tipc: Resetting bearer <eth:syzkaller0>
[  125.023724][ T5092] tipc: Disabling bearer <eth:syzkaller0>
[  125.052187][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.069688][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.089758][ T4264] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  125.126731][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.164015][ T4264] usb 4-1: config 0 descriptor??
[  125.270459][ T4174] EXT4-fs: 160 callbacks suppressed
[  125.270475][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  125.297930][ T5100] EXT4-fs (sda1): Remounting filesystem read-only
[  125.328855][ T5100] EXT4-fs (sda1): Remounting filesystem read-only
[  125.347946][ T5101] loop4: detected capacity change from 0 to 512
[  125.363832][ T5102] EXT4-fs (sda1): Remounting filesystem read-only
[  125.379730][ T5102] EXT4-fs (sda1): Remounting filesystem read-only
[  125.386781][ T5102] EXT4-fs (sda1): Remounting filesystem read-only
[  125.404084][ T5082] EXT4-fs (sda1): Remounting filesystem read-only
[  125.441454][ T5106] EXT4-fs (sda1): Remounting filesystem read-only
[  125.459794][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  125.466532][ T5082] EXT4-fs (sda1): Remounting filesystem read-only
[  125.496808][ T5101] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.222: iget: bad i_size value: 38620345925642
[  125.576111][ T5101] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.222: couldn't read orphan inode 15 (err -117)
[  125.649415][ T5101] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.692772][ T5109] TC_ACT_REPEAT abuse ?
[  125.697453][ T5103] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  125.787583][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.813949][ T5110] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.222: bg 0: block 5: invalid block bitmap
[  125.828038][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.835202][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.846385][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.856071][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.870763][ T5110] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 496 with error 28
[  125.887410][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.896858][ T4264] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[  125.928086][ T5110] EXT4-fs (loop4): This should not happen!! Data will be lost
[  125.928086][ T5110] 
[  125.942025][ T4264] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  125.953354][ T5110] EXT4-fs (loop4): Total free blocks count 0
[  125.959398][ T5110] EXT4-fs (loop4): Free/Dirty block details
[  125.974700][ T5110] EXT4-fs (loop4): free_blocks=0
[  125.979770][ T5110] EXT4-fs (loop4): dirty_blocks=500
[  125.985798][ T5110] EXT4-fs (loop4): Block reservation details
[  125.993365][ T5110] EXT4-fs (loop4): i_reserved_data_blocks=500
[  126.081834][ T4264] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00
[  126.478446][ T5131] binder_alloc: 5130: binder_alloc_buf, no vma
[  126.729595][ T5083] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38
[  126.743489][ T4264] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71
[  127.577075][ T4264] usb 4-1: USB disconnect, device number 3
[  127.776833][ T5140] udevd[5140]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  128.636958][ T5141] EXT4-fs error: 150 callbacks suppressed
[  128.636977][ T5141] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.235: Detected aborted journal
[  128.787899][ T5152] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.239: Detected aborted journal
[  128.851312][ T5154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.241: Detected aborted journal
[  128.865808][ T5152] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.239: Detected aborted journal
[  128.877571][ T5153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.240: Detected aborted journal
[  128.933197][ T5154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.241: Detected aborted journal
[  128.964091][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  128.967843][ T5153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.240: Detected aborted journal
[  129.008877][ T5154] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.241: Detected aborted journal
[  129.037313][ T5153] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.240: Detected aborted journal
[  129.084272][ T5156] sctp: [Deprecated]: syz.4.241 (pid 5156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.084272][ T5156] Use struct sctp_sack_info instead
[  129.122780][ T5157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'.
[  129.293496][ T5162] loop4: detected capacity change from 0 to 1024
[  129.326372][ T5164] sctp: [Deprecated]: syz.2.244 (pid 5164) Use of int in max_burst socket option.
[  129.326372][ T5164] Use struct sctp_assoc_value instead
[  129.375392][ T5162] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  129.412715][ T5162] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  129.448323][ T5164] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  129.456625][ T5164] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  129.633098][ T5162] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  129.742610][ T5172] EXT4-fs (loop4): Ignoring removed bh option
[  129.828623][ T5149] loop3: detected capacity change from 0 to 32768
[  129.846531][ T5172] EXT4-fs (loop4): re-mounted. Opts: usrjquota=bug,quota,bh,block_validity,quota,. Quota mode: writeback.
[  129.897092][ T5149] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.236 (5149)
[  130.020961][ T5149] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  130.051006][ T5149] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  130.073333][ T5190] udevd[5190]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  130.104422][ T5149] BTRFS info (device loop3): use zstd compression, level 3
[  130.135439][ T5149] BTRFS info (device loop3): use no compression
[  130.152617][ T5149] BTRFS info (device loop3): using free space tree
[  130.159207][ T5149] BTRFS info (device loop3): has skinny extents
[  130.274075][ T5197] EXT4-fs: 153 callbacks suppressed
[  130.274091][ T5197] EXT4-fs (sda1): Remounting filesystem read-only
[  130.287301][ T5197] EXT4-fs (sda1): Remounting filesystem read-only
[  130.294855][ T5197] EXT4-fs (sda1): Remounting filesystem read-only
[  130.302968][ T5197] EXT4-fs (sda1): Remounting filesystem read-only
[  130.311525][ T5197] EXT4-fs (sda1): Remounting filesystem read-only
[  130.313989][ T5184] EXT4-fs (sda1): Remounting filesystem read-only
[  130.322579][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'.
[  130.333884][ T5184] EXT4-fs (sda1): Remounting filesystem read-only
[  130.396361][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'.
[  130.429163][ T5198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.251'.
[  130.438940][ T5176] EXT4-fs (sda1): Remounting filesystem read-only
[  130.442903][ T5198] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  130.472925][ T5208] EXT4-fs (sda1): Remounting filesystem read-only
[  130.482277][ T5208] EXT4-fs (sda1): Remounting filesystem read-only
[  130.560580][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  130.580580][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  130.590563][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  130.610561][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  130.620565][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  130.630565][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  130.640559][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  130.650571][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  130.660569][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  130.670559][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  131.086158][ T5149] BTRFS error (device loop3): open_ctree failed: -12
[  131.431990][ T5236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.258'.
[  132.330276][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.337778][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.377922][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  132.386122][ T5243] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  132.743472][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.749841][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  132.809736][ T5256] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  132.882009][ T5258] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  132.934091][ T5256] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  132.987197][ T5256] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3)
[  133.026490][ T5256] overlayfs: d_ino too big (snd_seq, ino=4611686018427400257, xinobits=3)
[  133.060686][ T5256] overlayfs: d_ino too big (netdevsim, ino=4611686018427432081, xinobits=3)
[  133.340713][ T5256] overlayfs: d_ino too big (serio, ino=4611686018427400148, xinobits=3)
[  133.406948][ T5256] overlayfs: d_ino too big (ulpi, ino=4611686018427400101, xinobits=3)
[  133.453692][ T5256] overlayfs: d_ino too big (coreboot, ino=4611686018427455596, xinobits=3)
[  133.462731][ T5256] overlayfs: d_ino too big (hdaudio, ino=4611686018427400263, xinobits=3)
[  133.489435][ T5256] overlayfs: d_ino too big (iio, ino=4611686018427400226, xinobits=3)
[  133.505489][ T5256] overlayfs: d_ino too big (firewire, ino=4611686018427432093, xinobits=3)
[  133.532509][ T5256] overlayfs: d_ino too big (gpio, ino=4611686018427389088, xinobits=3)
[  133.645683][ T5268] EXT4-fs error: 154 callbacks suppressed
[  133.645700][ T5268] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.266: Detected aborted journal
[  133.716727][ T5269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.267: Detected aborted journal
[  133.730247][ T5268] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.266: Detected aborted journal
[  133.749483][ T5269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.267: Detected aborted journal
[  133.782244][ T5259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.259: Detected aborted journal
[  133.837640][ T5273] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.268: Detected aborted journal
[  133.876244][ T5275] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.269: Detected aborted journal
[  133.893539][ T5276] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.270: Detected aborted journal
[  133.924453][ T5275] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.269: Detected aborted journal
[  133.938758][ T5273] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.268: Detected aborted journal
[  134.540662][ T5240] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  134.810702][ T5240] usb 5-1: Using ep0 maxpacket: 8
[  134.940991][ T5240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  134.964413][ T5240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  134.985043][ T5240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.015792][ T5240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.058842][ T5240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.073203][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.290786][ T5325] vivid-008: =================  START STATUS  =================
[  135.300229][ T5325] vivid-008: Enable Output Cropping: true
[  135.311586][ T5325] vivid-008: Enable Output Composing: true
[  135.317575][ T5325] vivid-008: Enable Output Scaler: true
[  135.323705][ T5325] vivid-008: Tx RGB Quantization Range: Automatic
[  135.330282][ T5325] vivid-008: Transmit Mode: HDMI
[  135.337310][ T5288] EXT4-fs: 156 callbacks suppressed
[  135.337331][ T5288] EXT4-fs (sda1): Remounting filesystem read-only
[  135.349655][ T5325] vivid-008: Display Present: true inactive
[  135.355876][ T5288] EXT4-fs (sda1): Remounting filesystem read-only
[  135.362959][ T5325] vivid-008: Hotplug Present: 0x00000001
[  135.368765][ T5325] vivid-008: RxSense Present: 0x00000001
[  135.374680][ T5325] vivid-008: EDID Present: 0x00000001
[  135.380215][ T5325] vivid-008: ==================  END STATUS  ==================
[  135.388284][ T5240] usb 5-1: GET_CAPABILITIES returned 0
[  135.393966][ T5240] usbtmc 5-1:16.0: can't read capabilities
[  135.471518][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  135.508726][ T5327] EXT4-fs (sda1): Remounting filesystem read-only
[  135.519314][ T5327] EXT4-fs (sda1): Remounting filesystem read-only
[  135.578124][ T5329] EXT4-fs (sda1): Remounting filesystem read-only
[  135.588098][ T5329] EXT4-fs (sda1): Remounting filesystem read-only
[  135.594972][ T5288] EXT4-fs (sda1): Remounting filesystem read-only
[  135.635230][ T5288] EXT4-fs (sda1): Remounting filesystem read-only
[  135.642008][ T5288] EXT4-fs (sda1): Remounting filesystem read-only
[  135.670637][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  135.690381][ T4231] usb 5-1: USB disconnect, device number 4
[  136.669175][ T5341] netlink: 40 bytes leftover after parsing attributes in process `syz.0.289'.
[  136.727362][ T5345] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0
[  136.744808][ T5337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.802211][ T5350] loop2: detected capacity change from 0 to 512
[  136.818015][ T5347] binder_alloc: 5346: binder_alloc_buf, no vma
[  136.905313][ T5350] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  136.941324][ T5350] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.073711][   T26] audit: type=1800 audit(1786174597.313:6): pid=5358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.296" name="addr_trtype" dev="configfs" ino=36988 res=0 errno=0
[  137.132291][ T4231] nvmet: connect request for invalid subsystem testnqn!
[  137.156821][ T5358] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn"
[  137.403771][ T5364] kvm: pic: non byte write
[  138.980032][ T4174] EXT4-fs error: 160 callbacks suppressed
[  138.980140][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  139.493181][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  139.796422][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  139.808360][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  139.820141][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  139.832733][ T5387] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.306: Detected aborted journal
[  139.844375][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[  139.864704][ T5388] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.307: Detected aborted journal
[  139.880863][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1480: comm udevd: reading directory lblock 0
[  139.896447][ T5387] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.306: Detected aborted journal
[  140.801334][ T5391] EXT4-fs: 82 callbacks suppressed
[  140.801353][ T5391] EXT4-fs (sda1): Remounting filesystem read-only
[  140.886654][ T5396] EXT4-fs (sda1): Remounting filesystem read-only
[  140.929365][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  140.966929][   T26] audit: type=1800 audit(1786174601.203:7): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.307" name="bus" dev="ramfs" ino=37095 res=0 errno=0
[  140.981224][ T5387] EXT4-fs (sda1): Remounting filesystem read-only
[  141.015099][ T5396] EXT4-fs (sda1): Remounting filesystem read-only
[  141.025641][ T5398] EXT4-fs (sda1): Remounting filesystem read-only
[  141.033614][ T5387] EXT4-fs (sda1): Remounting filesystem read-only
[  141.069358][ T5387] EXT4-fs (sda1): Remounting filesystem read-only
[  141.081416][ T5396] EXT4-fs (sda1): Remounting filesystem read-only
[  141.097704][ T5389] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  141.130813][ T5396] EXT4-fs (sda1): Remounting filesystem read-only
[  141.181784][ T5397] binder_alloc: 5396: binder_alloc_buf, no vma
[  141.219990][ T5375] loop4: detected capacity change from 0 to 32768
[  141.443150][ T5375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.301 (5375)
[  142.180877][ T5375] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  142.189865][ T5375] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  142.211425][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[  142.240629][ T5375] BTRFS info (device loop4): trying to use backup root at mount time
[  142.248774][ T5375] BTRFS info (device loop4): setting nodatasum
[  142.270585][ T5375] BTRFS info (device loop4): enabling ssd optimizations
[  142.277584][ T5375] BTRFS info (device loop4): using spread ssd allocation scheme
[  142.305907][ T5414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'.
[  142.315429][ T5375] BTRFS info (device loop4): turning on flush-on-commit
[  142.323561][ T5375] BTRFS info (device loop4): force zlib compression, level 3
[  142.343240][ T5375] BTRFS info (device loop4): using free space tree
[  142.360606][ T5375] BTRFS info (device loop4): has skinny extents
[  142.441071][ T5427] udevd[5427]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  143.261120][ T5375] BTRFS error (device loop4): open_ctree failed: -12
[  143.987854][ T5436] EXT4-fs error: 79 callbacks suppressed
[  143.987873][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  144.163959][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  144.197919][ T5439] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.318: Detected aborted journal
[  144.232032][ T5439] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.318: Detected aborted journal
[  144.264163][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  144.283343][ T5439] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.318: Detected aborted journal
[  144.326091][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  144.423592][ T5439] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.318: Detected aborted journal
[  144.448316][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  144.536532][ T5436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.317: Detected aborted journal
[  145.335722][ T5453] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  146.298563][ T5458] EXT4-fs: 92 callbacks suppressed
[  146.298579][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.313189][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.480146][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  146.493547][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.534021][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.540639][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.651480][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.674765][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.682199][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  146.691641][ T5458] EXT4-fs (sda1): Remounting filesystem read-only
[  148.101275][   T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.742796][   T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  149.417056][ T5474] EXT4-fs error: 73 callbacks suppressed
[  149.417076][ T5474] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.326: Detected aborted journal
[  149.532622][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  149.554168][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  149.566970][   T13] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7
[  149.580206][ T5481] siw: device registration error -23
[  149.589103][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  149.679261][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  149.817753][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  149.832849][   T13] usb 5-1: config 1 interface 2 has no altsetting 0
[  149.840860][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  149.852295][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  150.021857][   T13] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  150.032046][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.040230][   T13] usb 5-1: Product: syz
[  150.047004][   T13] usb 5-1: Manufacturer: syz
[  150.052640][   T13] usb 5-1: SerialNumber: syz
[  150.159300][ T5475] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.330: Detected aborted journal
[  150.251328][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  150.368349][ T5493] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  150.461236][   T13] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  150.635302][   T13] usb 5-1: USB disconnect, device number 5
[  150.733765][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.364179][ T4174] EXT4-fs: 72 callbacks suppressed
[  151.364207][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  151.456582][ T5504] EXT4-fs (sda1): Remounting filesystem read-only
[  151.478649][ T5504] EXT4-fs (sda1): Remounting filesystem read-only
[  151.484051][ T5495] EXT4-fs (sda1): Remounting filesystem read-only
[  151.491868][ T5495] EXT4-fs (sda1): Remounting filesystem read-only
[  151.502035][ T5507] EXT4-fs (sda1): Remounting filesystem read-only
[  151.512478][ T5509] EXT4-fs (sda1): Remounting filesystem read-only
[  151.597921][ T5504] EXT4-fs (sda1): Remounting filesystem read-only
[  151.615646][ T5507] EXT4-fs (sda1): Remounting filesystem read-only
[  151.670946][ T5509] EXT4-fs (sda1): Remounting filesystem read-only
[  152.113151][ T5511] loop3: detected capacity change from 0 to 7
[  152.176016][    C0] print_req_error: 45 callbacks suppressed
[  152.176034][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.192953][    C0] buffer_io_error: 45 callbacks suppressed
[  152.192968][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  152.310130][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.321157][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  152.460850][ T5515] loop_set_status: loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) has still dirty pages (nrpages=1)
[  152.549101][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.560197][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  152.571421][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.582407][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  152.605742][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  152.616758][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  153.761512][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.772490][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  153.820796][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.831808][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  153.840302][ T5511] ldm_validate_partition_table(): Disk read failed.
[  153.872455][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.883476][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  153.922586][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.933605][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  153.967811][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  153.978858][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  154.138747][ T5511] Dev loop3: unable to read RDB block 0
[  154.389973][ T5511]  loop3: unable to read partition table
[  154.548031][ T5529] EXT4-fs error: 112 callbacks suppressed
[  154.548050][ T5529] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.344: Detected aborted journal
[  154.586996][ T5511] loop3: partition table beyond EOD, truncated
[  154.600859][ T5511] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  154.605247][ T5535] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.345: Detected aborted journal
[  154.638210][ T5533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.343: Detected aborted journal
[  154.651479][ T5536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.353: Detected aborted journal
[  154.667316][ T5535] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.345: Detected aborted journal
[  154.677704][ T5533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.343: Detected aborted journal
[  154.698425][ T5536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.353: Detected aborted journal
[  154.717267][ T5533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.343: Detected aborted journal
[  154.763219][ T5536] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.353: Detected aborted journal
[  154.786717][ T5533] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.343: Detected aborted journal
[  154.801655][ T5540] siw: device registration error -23
[  156.206749][ T5546] loop3: detected capacity change from 0 to 7
[  156.248653][ T5551] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  156.340612][ T5559] loop_set_status: loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) has still dirty pages (nrpages=1)
[  156.388099][ T5556] EXT4-fs: 99 callbacks suppressed
[  156.388114][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.400635][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.413796][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.426124][ T5545] EXT4-fs (sda1): Remounting filesystem read-only
[  156.433509][ T5546] ldm_validate_partition_table(): Disk read failed.
[  156.443036][ T5563] EXT4-fs (sda1): Remounting filesystem read-only
[  156.449561][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.456411][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.463849][ T5556] EXT4-fs (sda1): Remounting filesystem read-only
[  156.492250][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  156.497943][ T5563] EXT4-fs (sda1): Remounting filesystem read-only
[  156.531849][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'.
[  156.551529][ T5546] Dev loop3: unable to read RDB block 0
[  156.559869][ T5546]  loop3: unable to read partition table
[  156.570725][ T5240] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  156.579832][ T5565] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5
[  156.581764][ T5546] loop3: partition table beyond EOD, 
[  156.595342][ T5565] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5
[  156.603370][ T5546] truncated
[  156.615103][ T5565] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5
[  156.626076][ T5565] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5
[  156.635568][ T5565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5
[  156.645983][ T5565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  156.646562][ T4268] ldm_validate_partition_table(): Disk read failed.
[  156.662161][ T5546] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  156.675367][ T4268] Dev loop3: unable to read RDB block 0
[  156.682012][ T4268]  loop3: unable to read partition table
[  156.687970][ T4268] loop3: partition table beyond EOD, truncated
[  156.696331][ T5561] ldm_validate_partition_table(): Disk read failed.
[  156.707885][ T5561] Dev loop3: unable to read RDB block 0
[  156.715156][ T5561]  loop3: unable to read partition table
[  156.721537][ T5561] loop3: partition table beyond EOD, truncated
[  156.728727][ T5561] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  156.970772][ T5240] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.184638][ T5240] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  157.197605][ T5240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.206161][ T5240] usb 2-1: Product: syz
[  157.210356][ T5240] usb 2-1: Manufacturer: syz
[  157.215083][ T5240] usb 2-1: SerialNumber: syz
[  157.223145][ T5240] usb 2-1: config 0 descriptor??
[  157.270789][ T5229] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  157.395397][ T5240] ims_pcu 2-1:0.0: Missing CDC union descriptor
[  157.475512][ T5240] ims_pcu: probe of 2-1:0.0 failed with error -22
[  157.691566][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.797062][ T5229] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  157.971088][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.995041][ T5229] usb 4-1: config 0 descriptor??
[  158.022048][ T5553] udc-core: couldn't find an available UDC or it's busy
[  158.040612][ T5553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  158.069146][ T5240] usb 2-1: USB disconnect, device number 2
[  158.107879][ T5583] loop2: detected capacity change from 0 to 1024
[  158.219567][ T5583] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  158.239282][ T5583] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  158.366564][ T5583] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none.
[  158.386545][ T5593] EXT4-fs (loop2): Ignoring removed bh option
[  158.397011][ T5593] EXT4-fs (loop2): re-mounted. Opts: usrjquota=bug,quota,bh,block_validity,quota,. Quota mode: writeback.
[  158.482248][ T5229] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  158.534468][ T5598] siw: device registration error -23
[  158.589878][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.597401][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.389537][ T5229] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6
[  159.508399][ T5229] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  159.552310][ T4262] EXT4-fs error: 146 callbacks suppressed
[  159.552327][ T4262] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.553794][ T5599] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.363: Detected aborted journal
[  159.566691][ T4262] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.593560][ T5602] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.364: Detected aborted journal
[  159.608950][ T3544] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm acpid: reading directory lblock 0
[  159.620469][ T5599] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.363: Detected aborted journal
[  159.639877][ T3544] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm acpid: reading directory lblock 0
[  159.656382][ T4262] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.680080][ T5564] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.696243][ T4262] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  159.760873][ T5606] udevd[5606]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  159.906580][ T5614] loop3: detected capacity change from 0 to 7
[  160.015443][ T5615] netlink: 14 bytes leftover after parsing attributes in process `syz.1.368'.
[  160.029003][    C0] print_req_error: 60 callbacks suppressed
[  160.029021][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  160.045894][    C0] buffer_io_error: 60 callbacks suppressed
[  160.045909][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  160.105769][    C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  160.116809][    C0] Buffer I/O error on dev loop3, logical block 0, async page read
[  160.130616][ T4231] usb 4-1: USB disconnect, device number 4
[  160.823888][ T5621] loop2: detected capacity change from 0 to 512
[  160.849471][ T5621] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  160.887182][ T5621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.914113][ T5621] EXT4-fs (loop2): 1 truncate cleaned up
[  160.920184][ T5621] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback.
[  161.577268][ T5616] loop_set_status: loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) has still dirty pages (nrpages=1)
[  161.597200][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.608255][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.643522][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.654557][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.693628][ T5620] EXT4-fs: 104 callbacks suppressed
[  161.693646][ T5620] EXT4-fs (sda1): Remounting filesystem read-only
[  161.740247][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.751267][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.780712][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.791753][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.826654][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.837687][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.850867][ T4268] ldm_validate_partition_table(): Disk read failed.
[  161.879435][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.890434][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.928799][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.939794][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  161.970748][    C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  161.981757][    C1] Buffer I/O error on dev loop3, logical block 0, async page read
[  162.022198][ T4268] Dev loop3: unable to read RDB block 0
[  162.038730][ T4268]  loop3: unable to read partition table
[  162.057900][ T4268] loop3: partition table beyond EOD, truncated
[  162.262012][ T5625] EXT4-fs (sda1): Remounting filesystem read-only
[  162.271082][ T5614] ldm_validate_partition_table(): Disk read failed.
[  162.274862][ T5625] EXT4-fs (sda1): Remounting filesystem read-only
[  162.286901][ T5614] Dev loop3: unable to read RDB block 0
[  162.297641][ T5614]  loop3: unable to read partition table
[  162.306139][ T5614] loop3: partition table beyond EOD, truncated
[  162.340958][ T5614] loop_reread_partitions: partition scan of loop3 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  162.363322][ T5627] EXT4-fs (sda1): Remounting filesystem read-only
[  162.374124][ T5627] EXT4-fs (sda1): Remounting filesystem read-only
[  162.389279][ T5628] netlink: 'syz.3.370': attribute type 10 has an invalid length.
[  162.431234][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'.
[  162.516538][ T5630] EXT4-fs (sda1): Remounting filesystem read-only
[  162.526848][ T5630] EXT4-fs (sda1): Remounting filesystem read-only
[  162.537710][   T26] audit: type=1800 audit(1786174622.773:8): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.373" name="ipv4_address" dev="configfs" ino=38138 res=0 errno=0
[  162.999668][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  163.032323][   T26] audit: type=1800 audit(1786174623.253:9): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.373" name="ipv4_port" dev="configfs" ino=37602 res=0 errno=0
[  163.078138][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  163.121797][ T5635] EXT4-fs (sda1): Remounting filesystem read-only
[  163.313431][   T26] audit: type=1800 audit(1786174623.263:10): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.373" name="num" dev="configfs" ino=37603 res=0 errno=0
[  164.562809][ T4174] EXT4-fs error: 73 callbacks suppressed
[  164.562828][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.647882][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.769872][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.788195][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.895749][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  164.965268][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  165.036836][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  165.125586][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  165.246332][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  165.337371][ T5648] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.376: Detected aborted journal
[  166.575242][ T5674] Write-error on swap-device (8:0:271536)
[  166.656755][ T5674] Write-error on swap-device (8:0:271544)
Aug  8 07:37:06 syzkaller kern.alert kernel: [  166.575242][ T5674] Write-error [  166.693682][ T5674] Write-error on swap-device (8:0:307448)
on swap-device (8:0:271536)
Aug  8 07:37:06 syzkaller kern.alert kernel: [  166.656755][ T5674] Write-error on swap-device (8:0:271544)
Aug  8 07:37:06 syzkaller kern.alert kernel: [  166.693682][ T5674] Write-error on swap-device (8:0:307448)
[  166.813815][ T5674] Write-error on swap-device (8:0:271552)
[  166.821507][ T5674] Write-error on swap-device (8:0:271560)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  166.813815][ T5674] Write-error on swap-device (8:0:271552)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  166.821507][ T56[  166.861530][ T5674] Write-error on swap-device (8:0:307456)
74] Write-error on swap-device (8:0:271560)
[  166.962228][ T5674] Write-error on swap-device (8:0:271568)
[  166.969731][ T5674] Write-error on swap-device (8:0:271576)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  166.861530][ T5674] Write-error on swap-device (8:0:307456)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  166.962228][ T5674] Write-error on swap-device (8:0:271568)
[  167.005783][ T4174] EXT4-fs: 56 callbacks suppressed
[  167.005841][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
Aug  8 07:37:07 syzkaller kern.alert kernel: [  166.969731][ T56[  167.026370][ T5674] Write-error on swap-device (8:0:307464)
74] Write-error on swap-device (8:0:271576)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  167.026370][ T5674] Write-error on swap-device (8:0:307464)
[  167.112549][ T5674] Write-error on swap-device (8:0:271584)
Aug  8 07:37:07 syzkaller kern.alert kernel: [  167.112549][ T5674] Write-error on swap-device (8:0:271584)
[  167.337841][ T5684] EXT4-fs (sda1): Remounting filesystem read-only
[  167.372639][ T5684] EXT4-fs (sda1): Remounting filesystem read-only
[  167.379697][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  167.422743][ T5672] EXT4-fs (sda1): Remounting filesystem read-only
[  167.435901][ T5687] EXT4-fs (sda1): Remounting filesystem read-only
[  167.444747][ T5684] EXT4-fs (sda1): Remounting filesystem read-only
[  167.453812][ T5684] EXT4-fs (sda1): Remounting filesystem read-only
[  167.462485][ T5687] EXT4-fs (sda1): Remounting filesystem read-only
[  167.480036][ T5684] EXT4-fs (sda1): Remounting filesystem read-only
[  167.511823][ T5686] loop3: detected capacity change from 0 to 512
[  167.600944][ T5686] EXT4-fs (loop3): inodes count not valid: 40 vs 32
[  167.876668][ T5697] loop3: detected capacity change from 0 to 128
[  168.012062][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'.
[  168.444759][ T5702] netlink: 'syz.4.391': attribute type 1 has an invalid length.
[  168.458606][ T5702] netlink: 'syz.4.391': attribute type 4 has an invalid length.
[  168.467699][ T5702] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.391'.
[  168.773579][ T5710] Cannot find add_set index 0 as target
[  168.809853][ T5707] netlink: 14 bytes leftover after parsing attributes in process `syz.0.389'.
[  169.570994][ T5722] EXT4-fs error: 130 callbacks suppressed
[  169.571011][ T5722] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.396: Detected aborted journal
[  169.596419][ T5724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.397: Detected aborted journal
[  169.631886][ T5724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.397: Detected aborted journal
[  169.645060][ T5722] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.396: Detected aborted journal
[  169.659631][ T5722] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.396: Detected aborted journal
[  169.672683][ T5724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.397: Detected aborted journal
[  169.684151][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'.
[  169.694525][ T5724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.397: Detected aborted journal
[  169.713852][ T5722] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.396: Detected aborted journal
[  169.740957][ T5724] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.397: Detected aborted journal
[  169.762913][ T5722] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.396: Detected aborted journal
[  169.803263][ T5728] syz.3.398 uses obsolete (PF_INET,SOCK_PACKET)
[  169.825213][ T5725] loop4: detected capacity change from 0 to 256
[  169.919073][ T5731] can: request_module (can-proto-0) failed.
[  169.925236][ T5725] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xb2f9d067, utbl_chksum : 0xe619d30d)
[  171.058331][ T5731] batman_adv: batadv0: Adding interface: dummy0
[  171.064941][ T5731] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.103573][ T5731] batman_adv: batadv0: Interface activated: dummy0
[  171.158512][ T5734] batadv0: mtu less than device minimum
[  171.241877][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.254983][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.267618][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.280202][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.292824][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.305353][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.318049][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.330671][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.343298][ T5734] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  171.566469][ T5759] loop4: detected capacity change from 0 to 128
[  171.640202][ T5762] netlink: 14 bytes leftover after parsing attributes in process `syz.3.410'.
[  171.838407][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'.
[  171.911568][ T5767] Cannot find add_set index 0 as target
[  172.391916][ T5758] EXT4-fs: 126 callbacks suppressed
[  172.391956][ T5758] EXT4-fs (sda1): Remounting filesystem read-only
[  172.468845][ T5756] EXT4-fs (sda1): Remounting filesystem read-only
[  172.477052][ T5761] EXT4-fs (sda1): Remounting filesystem read-only
[  172.495644][ T5761] EXT4-fs (sda1): Remounting filesystem read-only
[  172.503310][ T5758] EXT4-fs (sda1): Remounting filesystem read-only
[  172.515917][ T5761] EXT4-fs (sda1): Remounting filesystem read-only
[  172.522956][ T5758] EXT4-fs (sda1): Remounting filesystem read-only
[  172.537029][ T5761] EXT4-fs (sda1): Remounting filesystem read-only
[  172.544832][ T5758] EXT4-fs (sda1): Remounting filesystem read-only
[  172.556824][ T5750] EXT4-fs (sda1): Remounting filesystem read-only
[  173.439881][ T5800] device syzkaller0 entered promiscuous mode
[  173.716000][ T5809] netlink: 'syz.4.422': attribute type 4 has an invalid length.
[  173.941437][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[  175.015453][ T5823] EXT4-fs error: 151 callbacks suppressed
[  175.015473][ T5823] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.424: Detected aborted journal
[  175.146294][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  175.158133][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.425: Detected aborted journal
[  175.169522][ T5803] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.421: Detected aborted journal
[  175.212958][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.425: Detected aborted journal
[  175.239825][ T5828] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.427: Detected aborted journal
[  175.308357][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.425: Detected aborted journal
[  175.340835][ T5828] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.427: Detected aborted journal
[  175.355246][ T5829] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.428: Detected aborted journal
[  175.390920][ T5815] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.425: Detected aborted journal
[  175.449863][ T5833] loop4: detected capacity change from 0 to 1024
[  176.892786][ T5833] EXT4-fs (loop4): Ignoring removed bh option
[  177.007612][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  177.147345][ T5833] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  177.391696][ T5240] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  177.403135][ T4174] EXT4-fs: 118 callbacks suppressed
[  177.403170][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  177.470456][ T5842] EXT4-fs (sda1): Remounting filesystem read-only
[  177.477364][ T5842] EXT4-fs (sda1): Remounting filesystem read-only
[  177.484796][ T5842] EXT4-fs (sda1): Remounting filesystem read-only
[  177.491374][ T5842] EXT4-fs (sda1): Remounting filesystem read-only
[  177.801576][ T5842] EXT4-fs (sda1): Remounting filesystem read-only
[  177.984542][ T5848] EXT4-fs (sda1): Remounting filesystem read-only
[  178.003354][ T5850] EXT4-fs (sda1): Remounting filesystem read-only
[  178.013391][ T5849] EXT4-fs (sda1): Remounting filesystem read-only
[  178.024855][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  178.040806][ T5240] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  178.065091][ T5240] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  178.124085][   T26] audit: type=1326 audit(1786174638.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.0.435" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25f206c0d9 code=0x0
[  178.291398][ T5240] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  178.291507][ T5240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.291582][ T5240] usb 2-1: Product: syz
[  178.291644][ T5240] usb 2-1: Manufacturer: syz
[  178.291662][ T5240] usb 2-1: SerialNumber: syz
[  178.334874][ T5845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  178.335469][ T5845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  178.374915][ T5240] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  178.921129][ T5240] mos7840: probe of ttyUSB0 failed with error -5
[  179.036737][ T5865] netlink: 140 bytes leftover after parsing attributes in process `syz.4.439'.
[  179.046473][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'.
[  179.068421][ T5867] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  179.130167][ T5867] net_ratelimit: 11 callbacks suppressed
[  179.130185][ T5867] 0: reclassify loop, rule prio 0, protocol 03
[  180.184805][ T5240] usb 2-1: USB disconnect, device number 3
[  180.194259][ T5240] mos7840 2-1:1.0: device disconnected
[  181.971574][ T3559] EXT4-fs error: 88 callbacks suppressed
[  181.971592][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  181.995397][ T5870] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.451: Detected aborted journal
[  182.013939][ T5872] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.443: Detected aborted journal
[  182.023367][ T5871] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.442: Detected aborted journal
[  182.041379][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  182.047636][ T5873] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.441: Detected aborted journal
[  182.068622][ T5870] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.451: Detected aborted journal
[  182.083499][ T5876] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.440: Detected aborted journal
[  182.090472][ T5872] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.443: Detected aborted journal
[  182.106096][ T5870] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.451: Detected aborted journal
[  182.123271][ T5877] netlink: 100 bytes leftover after parsing attributes in process `syz.1.443'.
[  182.133765][ T5874] syz.0.451 sent an empty control message without MSG_MORE.
[  182.157888][ T5877] process 'syz.1.443' launched './file0' with NULL argv: empty string added
[  182.167148][ T5878] device syzkaller0 entered promiscuous mode
[  182.297865][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.415942][ T5885] EXT4-fs: 49 callbacks suppressed
[  182.415958][ T5885] EXT4-fs (sda1): Remounting filesystem read-only
[  182.491724][ T5881] EXT4-fs (sda1): Remounting filesystem read-only
[  182.532543][ T5881] EXT4-fs (sda1): Remounting filesystem read-only
[  182.541017][ T5876] EXT4-fs (sda1): Remounting filesystem read-only
[  182.552920][ T5886] Cannot find add_set index 0 as target
[  182.559677][ T5876] EXT4-fs (sda1): Remounting filesystem read-only
[  182.568438][ T5876] EXT4-fs (sda1): Remounting filesystem read-only
[  182.575139][ T5876] EXT4-fs (sda1): Remounting filesystem read-only
[  182.870825][ T5881] EXT4-fs (sda1): Remounting filesystem read-only
[  182.878694][ T5888] set match dimension is over the limit!
[  182.885016][ T5881] EXT4-fs (sda1): Remounting filesystem read-only
[  182.892153][ T5881] EXT4-fs (sda1): Remounting filesystem read-only
[  184.826561][ T5912] device syzkaller0 entered promiscuous mode
[  185.103046][ T5917] loop3: detected capacity change from 0 to 1024
[  185.110920][ T5918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  185.230357][ T5917] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  185.255966][ T5917] EXT4-fs (loop3): inline encryption not supported
[  185.279395][ T5917] EXT4-fs (loop3): orphan cleanup on readonly fs
[  185.298058][ T5917] Quota error (device loop3): v2_read_file_info: Free block number too big (131072 >= 6).
[  185.299349][ T5922] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  185.317037][ T5917] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  185.363170][ T5917] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  185.429753][ T5922] sch_tbf: burst 7 is lower than device lo mtu (65550) !
[  185.440800][ T5917] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.457: Freeing blocks not in datazone - block = 0, count = 4096
[  185.544134][ T5917] EXT4-fs (loop3): Remounting filesystem read-only
[  185.565255][ T5917] EXT4-fs (loop3): 1 orphan inode deleted
[  185.610890][ T5917] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,noblock_validity,nogrpid,errors=remount-ro,user_xattr,inlinecrypt,. Quota mode: writeback.
[  185.759987][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'.
[  185.809892][ T5933] device bond_slave_0 entered promiscuous mode
[  185.816807][ T5933] device bond_slave_1 entered promiscuous mode
[  185.867302][ T5933] device bond_slave_0 left promiscuous mode
[  185.873423][ T5933] device bond_slave_1 left promiscuous mode
[  186.131895][ T5933] bond1: (slave vlan2): making interface the new active one
[  186.165599][ T5933] device bond_slave_0 entered promiscuous mode
[  186.171940][ T5933] device bond_slave_1 entered promiscuous mode
[  186.222496][ T5933] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  187.026698][ T4174] EXT4-fs error: 139 callbacks suppressed
[  187.026755][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  187.096369][ T5957] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:5: reading directory lblock 0
[  187.370842][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  187.422736][ T5960] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.470: Detected aborted journal
[  187.436084][ T5958] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:8: reading directory lblock 0
[  187.488366][ T5961] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:7: reading directory lblock 0
[  187.503006][ T4174] EXT4-fs: 108 callbacks suppressed
[  187.503021][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  187.532217][ T5960] EXT4-fs (sda1): Remounting filesystem read-only
[  187.570180][ T5962] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:5: reading directory lblock 0
[  187.600806][ T5963] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:8: reading directory lblock 0
[  187.636649][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  187.651765][ T5960] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.470: Detected aborted journal
[  187.737073][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  187.744140][ T5960] EXT4-fs (sda1): Remounting filesystem read-only
[  187.909209][ T5968] EXT4-fs (sda1): Remounting filesystem read-only
[  187.930349][ T5969] EXT4-fs (sda1): Remounting filesystem read-only
[  187.957731][ T5970] EXT4-fs (sda1): Remounting filesystem read-only
[  187.998433][ T5968] EXT4-fs (sda1): Remounting filesystem read-only
[  188.020048][ T5969] EXT4-fs (sda1): Remounting filesystem read-only
[  188.234408][ T5968] EXT4-fs (sda1): Remounting filesystem read-only
[  189.020656][ T5229] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  189.183241][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.477'.
[  189.193622][ T5985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.477'.
[  189.277566][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'.
[  189.451831][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'.
[  189.521908][ T5229] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[  189.615152][ T5996] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  189.626978][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.781757][ T5229] hid-rmi 0003:1532:011D.0003: failed to write hid report (-38)
[  190.837667][ T5229] hid-rmi 0003:1532:011D.0003: rmi_set_page: set page failed: -38.
[  191.078848][    C1] hid-rmi 0003:1532:011D.0003: Event data for report 11 was too short (64 vs 7)
[  191.140757][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  191.159128][   T13] Bluetooth: hci1: command 0x0406 tx timeout
[  191.223512][ T5229] hid-rmi 0003:1532:011D.0003: failed to set page select to 0.
[  191.233580][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  191.250724][   T13] Bluetooth: hci3: command 0x0406 tx timeout
[  191.266949][ T5229] hid-rmi 0003:1532:011D.0003: hiddev0,hidraw0: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[  191.313343][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  191.355800][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'.
[  191.359867][ T6025] udevd[6025]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  192.050111][ T6031] EXT4-fs error: 105 callbacks suppressed
[  192.050160][ T6031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.490: Detected aborted journal
[  192.069156][ T6031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.490: Detected aborted journal
[  192.087878][ T6031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.490: Detected aborted journal
[  192.099326][ T6031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.490: Detected aborted journal
[  192.729189][ T6031] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.490: Detected aborted journal
[  192.740254][ T6031] EXT4-fs: 76 callbacks suppressed
[  192.740303][ T6031] EXT4-fs (sda1): Remounting filesystem read-only
[  193.151855][ T6041] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal
[  193.480620][ T6041] EXT4-fs (sda1): Remounting filesystem read-only
[  193.519938][ T6041] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.493: Detected aborted journal
[  193.531562][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  193.552713][ T6046] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.494: Detected aborted journal
[  193.567330][   T13] usb 5-1: USB disconnect, device number 6
[  193.630645][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  193.645453][ T6047] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.495: Detected aborted journal
[  193.656564][ T6041] EXT4-fs (sda1): Remounting filesystem read-only
[  193.703953][ T6046] EXT4-fs (sda1): Remounting filesystem read-only
[  193.724680][ T6045] jffs2: notice: (6045) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  193.745760][ T6048] EXT4-fs (sda1): Remounting filesystem read-only
[  193.769123][ T6046] EXT4-fs (sda1): Remounting filesystem read-only
[  193.788216][ T6047] EXT4-fs (sda1): Remounting filesystem read-only
[  193.816130][ T6048] EXT4-fs (sda1): Remounting filesystem read-only
[  193.833317][ T6047] EXT4-fs (sda1): Remounting filesystem read-only
[  194.558245][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  194.574554][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  195.432396][ T6077] Cannot find add_set index 0 as target
[  196.290921][ T6087] device syzkaller0 entered promiscuous mode
[  197.371282][ T6112] EXT4-fs error: 70 callbacks suppressed
[  197.371300][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.441458][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.452755][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.464699][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.476174][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.487903][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.499534][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.507901][ T6113] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.516: Detected aborted journal
[  197.524301][ T6115] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.517: Detected aborted journal
[  197.536212][ T6112] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.515: Detected aborted journal
[  197.741538][ T6122] EXT4-fs: 75 callbacks suppressed
[  197.741557][ T6122] EXT4-fs (sda1): Remounting filesystem read-only
[  197.765147][ T6113] EXT4-fs (sda1): Remounting filesystem read-only
[  197.786914][ T6113] EXT4-fs (sda1): Remounting filesystem read-only
[  197.799483][ T6122] EXT4-fs (sda1): Remounting filesystem read-only
[  197.822884][ T6115] EXT4-fs (sda1): Remounting filesystem read-only
[  197.889691][ T6115] EXT4-fs (sda1): Remounting filesystem read-only
[  197.896727][ T6115] EXT4-fs (sda1): Remounting filesystem read-only
[  197.911631][ T6122] EXT4-fs (sda1): Remounting filesystem read-only
[  197.920660][ T6122] EXT4-fs (sda1): Remounting filesystem read-only
[  198.681096][ T6122] EXT4-fs (sda1): Remounting filesystem read-only
[  198.936018][ T6128] Cannot find add_set index 0 as target
[  199.322294][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.524'.
[  201.442633][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'.
[  202.412775][ T3559] EXT4-fs error: 71 callbacks suppressed
[  202.413319][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  202.468300][ T6161] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.531: Detected aborted journal
[  202.669026][ T6161] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.531: Detected aborted journal
[  202.769558][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  202.877051][ T6161] EXT4-fs: 47 callbacks suppressed
[  202.877477][ T6161] EXT4-fs (sda1): Remounting filesystem read-only
[  202.948013][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  203.111100][ T6161] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.531: Detected aborted journal
[  203.170226][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  203.305800][ T6161] EXT4-fs (sda1): Remounting filesystem read-only
[  203.352916][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[  203.370845][ T6167] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.533: Detected aborted journal
[  203.425618][ T6168] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.534: Detected aborted journal
[  203.472929][ T6161] EXT4-fs (sda1): Remounting filesystem read-only
[  203.501345][ T6167] EXT4-fs (sda1): Remounting filesystem read-only
[  203.511407][ T6167] EXT4-fs (sda1): Remounting filesystem read-only
[  203.525185][ T6161] EXT4-fs (sda1): Remounting filesystem read-only
[  203.646390][ T6167] EXT4-fs (sda1): Remounting filesystem read-only
[  203.676917][ T6167] EXT4-fs (sda1): Remounting filesystem read-only
[  203.683489][ T6167] EXT4-fs (sda1): Remounting filesystem read-only
[  203.704161][ T6168] EXT4-fs (sda1): Remounting filesystem read-only
[  204.750640][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  207.234413][ T6202] netlink: 'syz.1.552': attribute type 40 has an invalid length.
[  207.370837][    T7] usb 5-1: device not accepting address 7, error -71
[  207.449035][ T6208] EXT4-fs error: 50 callbacks suppressed
[  207.449073][ T6208] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.542: Detected aborted journal
[  207.656223][ T6214] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1267: comm kworker/u4:8: reading directory lblock 0
[  207.927250][ T6208] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.542: Detected aborted journal
[  207.938438][ T6208] EXT4-fs: 38 callbacks suppressed
[  207.938473][ T6208] EXT4-fs (sda1): Remounting filesystem read-only
[  207.954039][ T6208] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.542: Detected aborted journal
[  207.965086][ T6208] EXT4-fs (sda1): Remounting filesystem read-only
[  208.291775][ T6208] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.542: Detected aborted journal
[  208.302778][ T6208] EXT4-fs (sda1): Remounting filesystem read-only
[  208.339179][ T6208] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.542: Detected aborted journal
[  208.350311][ T6208] EXT4-fs (sda1): Remounting filesystem read-only
[  208.362373][ T6215] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.545: Detected aborted journal
[  208.423592][ T6216] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.548: Detected aborted journal
[  208.440790][ T6215] EXT4-fs (sda1): Remounting filesystem read-only
[  208.445079][ T6217] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.547: Detected aborted journal
[  208.462711][ T6215] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.545: Detected aborted journal
[  208.484025][ T6215] EXT4-fs (sda1): Remounting filesystem read-only
[  208.494321][ T6219] EXT4-fs (sda1): Remounting filesystem read-only
[  208.500931][ T6217] EXT4-fs (sda1): Remounting filesystem read-only
[  208.509490][ T6216] EXT4-fs (sda1): Remounting filesystem read-only
[  208.529154][ T6216] EXT4-fs (sda1): Remounting filesystem read-only
[  208.585661][ T6222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.546'.
[  208.700634][ T4237] libceph: connect (1)[c::]:6789 error -101
[  208.711199][ T4237] libceph: mon0 (1)[c::]:6789 connect error
[  208.818052][ T6218] ceph: No mds server is up or the cluster is laggy
[  209.092522][ T4237] libceph: connect (1)[c::]:6789 error -101
[  209.138820][ T4237] libceph: mon0 (1)[c::]:6789 connect error
[  210.571631][ T5239] libceph: connect (1)[c::]:6789 error -101
[  210.577685][ T5239] libceph: mon0 (1)[c::]:6789 connect error
[  211.348524][ T6255] xt_connbytes: Forcing CT accounting to be enabled
[  211.512787][ T6255] xt_CT: No such helper "netbios-ns"
[  212.543597][ T6259] EXT4-fs error: 65 callbacks suppressed
[  212.543923][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  212.615449][ T6266] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.559: Detected aborted journal
[  212.775380][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  212.867515][ T6266] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.559: Detected aborted journal
[  212.943558][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  213.008736][ T6266] EXT4-fs: 59 callbacks suppressed
[  213.009016][ T6266] EXT4-fs (sda1): Remounting filesystem read-only
[  213.075531][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  213.210612][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  213.305096][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  213.325828][ T6268] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.561: Detected aborted journal
[  213.338659][ T6268] EXT4-fs (sda1): Remounting filesystem read-only
[  213.349353][ T6268] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.561: Detected aborted journal
[  213.360460][ T6268] EXT4-fs (sda1): Remounting filesystem read-only
[  213.417902][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  213.444904][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  213.451679][ T6259] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.557: Detected aborted journal
[  213.462752][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  213.469381][ T6270] EXT4-fs (sda1): Remounting filesystem read-only
[  213.469868][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  213.482938][ T6259] EXT4-fs (sda1): Remounting filesystem read-only
[  214.008190][ T6283] netlink: 'syz.1.564': attribute type 1 has an invalid length.
[  215.158334][ T6295] loop2: detected capacity change from 0 to 128
[  215.226672][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  215.725374][ T6286] device bond2 entered promiscuous mode
[  216.053717][ T6286] 8021q: adding VLAN 0 to HW filter on device bond2
[  217.570454][ T6334] EXT4-fs error: 92 callbacks suppressed
[  217.570468][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.587201][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.602876][ T6326] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.570: Detected aborted journal
[  217.622987][ T3852] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #116: comm dhcpcd: reading directory lblock 0
[  217.647732][ T6338] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.576: Detected aborted journal
[  217.711455][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.738063][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.750013][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.763803][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  217.774943][ T6334] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.574: Detected aborted journal
[  218.254598][ T6334] EXT4-fs: 75 callbacks suppressed
[  218.254617][ T6334] EXT4-fs (sda1): Remounting filesystem read-only
[  218.374594][ T6326] EXT4-fs (sda1): Remounting filesystem read-only
[  218.392649][ T6324] EXT4-fs (sda1): Remounting filesystem read-only
[  218.403179][ T6340] EXT4-fs (sda1): Remounting filesystem read-only
[  218.410643][ T6338] EXT4-fs (sda1): Remounting filesystem read-only
[  218.427789][ T6338] EXT4-fs (sda1): Remounting filesystem read-only
[  218.441748][ T6326] EXT4-fs (sda1): Remounting filesystem read-only
[  218.463219][ T6344] EXT4-fs (sda1): Remounting filesystem read-only
[  218.478761][ T6340] EXT4-fs (sda1): Remounting filesystem read-only
[  218.493330][ T6344] EXT4-fs (sda1): Remounting filesystem read-only
[  218.636764][   T26] audit: type=1800 audit(1786174678.873:12): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.575" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  218.746109][ T6349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.576'.
[  221.033431][ T6364] device syzkaller0 entered promiscuous mode
[  221.061175][  T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.297549][ T6380] loop3: detected capacity change from 0 to 256
[  221.349072][ T6380] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.409775][ T6380] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  221.481332][ T6380] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  221.710001][  T155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.719281][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.005142][ T6405] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  222.060609][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[  222.069884][ T6408] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.083599][ T6408] batadv0: mtu less than device minimum
[  222.091763][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.104454][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.117120][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.129778][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.142502][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.155219][ T6408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  222.899167][ T6384] EXT4-fs error: 148 callbacks suppressed
[  222.899188][ T6384] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.592: Detected aborted journal
[  222.959713][ T6384] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.592: Detected aborted journal
[  222.977318][ T6406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.601: Detected aborted journal
[  223.020771][ T6406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.601: Detected aborted journal
[  223.037503][ T6406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.601: Detected aborted journal
[  223.052404][ T6411] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.602: Detected aborted journal
[  223.063700][ T6384] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.592: Detected aborted journal
[  223.075552][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  223.087198][ T6406] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.601: Detected aborted journal
[  223.099563][ T4174] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[  223.116160][ T6408] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.152804][ T6412] device bridge1 entered promiscuous mode
[  223.261043][ T6413] EXT4-fs: 149 callbacks suppressed
[  223.261100][ T6413] EXT4-fs (sda1): Remounting filesystem read-only
[  223.277011][ T6413] EXT4-fs (sda1): Remounting filesystem read-only
[  223.292868][ T6384] EXT4-fs (sda1): Remounting filesystem read-only
[  223.567048][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  224.067846][ T4174] EXT4-fs (sda1): Remounting filesystem read-only
[  224.082411][ T6417] EXT4-fs (sda1): Remounting filesystem read-only
[  224.144005][ T6413] EXT4-fs (sda1): Remounting filesystem read-only
[  224.161698][ T6417] EXT4-fs (sda1): Remounting filesystem read-only
[  224.171162][ T6417] EXT4-fs (sda1): Remounting filesystem read-only
[  224.185125][ T6418] EXT4-fs (sda1): Remounting filesystem read-only
[  224.668826][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'.
[  224.820958][ T6449] ipt_CLUSTERIP: Please specify destination IP
[  224.965352][ T6454] device syzkaller0 entered promiscuous mode
[  225.152152][ T6460] file system registered
[  225.251523][ T4191] ffs_data_put(): freeing
[  226.485467][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.624'.
[  226.565468][ T6481] tmpfs: Unknown parameter 'noswap'
[  226.821234][ T4312] net_ratelimit: 13 callbacks suppressed
[  226.821253][ T4312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.977681][ T6491] ==================================================================
[  226.986363][ T6491] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240
[  226.995362][ T6491] Read of size 2 at addr ffff88807adc6dfb by task syz.3.627/6491
[  227.003114][ T6491] 
[  227.005459][ T6491] CPU: 0 PID: 6491 Comm: syz.3.627 Not tainted syzkaller #0
[  227.012756][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.022837][ T6491] Call Trace:
[  227.026134][ T6491]  <TASK>
[  227.029085][ T6491]  dump_stack_lvl+0x188/0x250
[  227.033797][ T6491]  ? show_regs_print_info+0x20/0x20
[  227.039022][ T6491]  ? _printk+0xda/0x130
[  227.043200][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.049471][ T6491]  ? load_image+0x410/0x410
[  227.053999][ T6491]  print_address_description+0x60/0x2d0
[  227.059569][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.065864][ T6491]  kasan_report+0xdf/0x130
[  227.070310][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.076575][ T6491]  ieee80211_monitor_select_queue+0x23a/0x240
[  227.082671][ T6491]  ? ieee80211_recalc_smps_work+0x20/0x20
[  227.088414][ T6491]  netdev_core_pick_tx+0x12c/0x300
[  227.093569][ T6491]  __dev_queue_xmit+0x797/0x2e50
[  227.098529][ T6491]  ? __might_sleep+0xf0/0xf0
[  227.103141][ T6491]  ? dev_queue_xmit+0x20/0x20
[  227.107835][ T6491]  ? virtio_net_hdr_to_skb+0xb00/0x11e0
[  227.113407][ T6491]  ? packet_cached_dev_get+0x270/0x270
[  227.118897][ T6491]  packet_sendmsg+0x3cf9/0x50b0
[  227.123780][ T6491]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  227.129783][ T6491]  ? __might_sleep+0xf0/0xf0
[  227.134419][ T6491]  ? aa_sk_perm+0x7dc/0x910
[  227.138946][ T6491]  ? packet_getsockopt+0x9a0/0x9a0
[  227.144084][ T6491]  ? unpack_trans_table+0x1046/0x1690
[  227.149481][ T6491]  ? apparmor_socket_sendmsg+0x88/0x230
[  227.155047][ T6491]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  227.160347][ T6491]  ? security_socket_sendmsg+0x7c/0xa0
[  227.165832][ T6491]  ? packet_getsockopt+0x9a0/0x9a0
[  227.170968][ T6491]  ____sys_sendmsg+0x5be/0x8f0
[  227.175766][ T6491]  ? __sys_sendmsg_sock+0x30/0x30
[  227.180832][ T6491]  ? import_iovec+0x6f/0xa0
[  227.185355][ T6491]  ___sys_sendmsg+0x236/0x2e0
[  227.190060][ T6491]  ? __sys_sendmsg+0x290/0x290
[  227.194879][ T6491]  __se_sys_sendmsg+0x1b7/0x2a0
[  227.199757][ T6491]  ? __x64_sys_sendmsg+0x80/0x80
[  227.204716][ T6491]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  227.210728][ T6491]  ? lockdep_hardirqs_on+0x94/0x140
[  227.215955][ T6491]  do_syscall_64+0x4c/0xa0
[  227.220387][ T6491]  ? clear_bhb_loop+0x30/0x80
[  227.225087][ T6491]  ? clear_bhb_loop+0x30/0x80
[  227.229812][ T6491]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.235741][ T6491] RIP: 0033:0x7f6c102910d9
[  227.240182][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.259835][ T6491] RSP: 002b:00007f6c0e4e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.268316][ T6491] RAX: ffffffffffffffda RBX: 00007f6c10518fa0 RCX: 00007f6c102910d9
[  227.276316][ T6491] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
[  227.284327][ T6491] RBP: 00007f6c10328024 R08: 0000000000000000 R09: 0000000000000000
[  227.292315][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  227.300304][ T6491] R13: 00007f6c10519038 R14: 00007f6c10518fa0 R15: 00007fffde468ea8
[  227.308313][ T6491]  </TASK>
[  227.311340][ T6491] 
[  227.313675][ T6491] Allocated by task 6414:
[  227.318016][ T6491]  __kasan_kmalloc+0xaf/0xe0
[  227.322622][ T6491]  snd_seq_oss_readq_new+0x7e/0x240
[  227.327841][ T6491]  snd_seq_oss_open+0x7e6/0xf00
[  227.332710][ T6491]  odev_open+0x63/0x90
[  227.336794][ T6491]  chrdev_open+0x585/0x5f0
[  227.341231][ T6491]  do_dentry_open+0x7f7/0xf90
[  227.345934][ T6491]  path_openat+0x2718/0x2fb0
[  227.350541][ T6491]  do_filp_open+0x1df/0x400
[  227.355062][ T6491]  do_sys_openat2+0x14b/0x500
[  227.359755][ T6491]  __x64_sys_openat+0x135/0x160
[  227.364616][ T6491]  do_syscall_64+0x4c/0xa0
[  227.369043][ T6491]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.374956][ T6491] 
[  227.377315][ T6491] Freed by task 6413:
[  227.381305][ T6491]  kasan_set_track+0x4b/0x70
[  227.385915][ T6491]  kasan_set_free_info+0x1f/0x40
[  227.390870][ T6491]  ____kasan_slab_free+0xd5/0x110
[  227.395915][ T6491]  slab_free_freelist_hook+0xec/0x170
[  227.401305][ T6491]  kfree+0xef/0x2a0
[  227.405126][ T6491]  snd_seq_oss_readq_delete+0x3a/0x50
[  227.410522][ T6491]  free_devinfo+0x87/0xa0
[  227.414862][ T6491]  port_delete+0xc9/0x1a0
[  227.419214][ T6491]  snd_seq_delete_port+0x1bb/0x1f0
[  227.424353][ T6491]  snd_seq_ioctl_delete_port+0x8d/0x190
[  227.429917][ T6491]  snd_seq_event_port_detach+0xe1/0x160
[  227.435483][ T6491]  snd_seq_oss_release+0x17b/0x310
[  227.440611][ T6491]  odev_release+0x52/0x70
[  227.444972][ T6491]  __fput+0x212/0x8c0
[  227.448974][ T6491]  task_work_run+0x125/0x1a0
[  227.453598][ T6491]  exit_to_user_mode_loop+0x10f/0x130
[  227.458987][ T6491]  exit_to_user_mode_prepare+0xee/0x180
[  227.464550][ T6491]  syscall_exit_to_user_mode+0x16/0x40
[  227.470025][ T6491]  do_syscall_64+0x58/0xa0
[  227.474453][ T6491]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.480364][ T6491] 
[  227.482702][ T6491] The buggy address belongs to the object at ffff88807adc4000
[  227.482702][ T6491]  which belongs to the cache kmalloc-8k of size 8192
[  227.496767][ T6491] The buggy address is located 3579 bytes to the right of
[  227.496767][ T6491]  8192-byte region [ffff88807adc4000, ffff88807adc6000)
[  227.510747][ T6491] The buggy address belongs to the page:
[  227.516426][ T6491] page:ffffea0001eb7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7adc0
[  227.526594][ T6491] head:ffffea0001eb7000 order:3 compound_mapcount:0 compound_pincount:0
[  227.534962][ T6491] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  227.542983][ T6491] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c42280
[  227.551584][ T6491] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000
[  227.560180][ T6491] page dumped because: kasan: bad access detected
[  227.566621][ T6491] page_owner tracks the page as allocated
[  227.572342][ T6491] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5211, ts 130985619028, free_ts 130921417286
[  227.593024][ T6491]  get_page_from_freelist+0x24f6/0x2670
[  227.598597][ T6491]  __alloc_pages+0x1ee/0x480
[  227.603204][ T6491]  new_slab+0xc0/0x4b0
[  227.607298][ T6491]  ___slab_alloc+0x807/0xdd0
[  227.611903][ T6491]  __kmalloc_track_caller+0x11b/0x330
[  227.617289][ T6491]  copy_verifier_state+0x877/0xd00
[  227.622423][ T6491]  push_stack+0x1a5/0x510
[  227.626784][ T6491]  do_check+0xc319/0xefc0
[  227.631143][ T6491]  do_check_common+0xe7f/0x16e0
[  227.636020][ T6491]  bpf_check+0x88c1/0xf6b0
[  227.640463][ T6491]  bpf_prog_load+0xfdf/0x14e0
[  227.645162][ T6491]  __sys_bpf+0x532/0x6f0
[  227.649424][ T6491]  __x64_sys_bpf+0x78/0x90
[  227.653856][ T6491]  do_syscall_64+0x4c/0xa0
[  227.658319][ T6491]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.664229][ T6491] page last free stack trace:
[  227.668927][ T6491]  free_unref_page_prepare+0x637/0x6c0
[  227.674403][ T6491]  free_unref_page+0x8f/0x2a0
[  227.679094][ T6491]  __unfreeze_partials+0x188/0x1e0
[  227.684243][ T6491]  put_cpu_partial+0x12d/0x190
[  227.689023][ T6491]  qlist_free_all+0x35/0x90
[  227.693536][ T6491]  kasan_quarantine_reduce+0x150/0x160
[  227.699028][ T6491]  __kasan_slab_alloc+0x2f/0xc0
[  227.704030][ T6491]  slab_post_alloc_hook+0x4c/0x380
[  227.709168][ T6491]  kmem_cache_alloc_node+0x184/0x2c0
[  227.714475][ T6491]  __alloc_skb+0xf4/0x750
[  227.718827][ T6491]  mld_newpack+0x12f/0xba0
[  227.723264][ T6491]  add_grec+0x1364/0x1840
[  227.727613][ T6491]  mld_ifc_work+0x30a/0xd60
[  227.732155][ T6491]  process_one_work+0x867/0xff0
[  227.737026][ T6491]  worker_thread+0xad7/0x12a0
[  227.741719][ T6491]  kthread+0x42e/0x520
[  227.745803][ T6491] 
[  227.748138][ T6491] Memory state around the buggy address:
[  227.753798][ T6491]  ffff88807adc6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.761870][ T6491]  ffff88807adc6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.769943][ T6491] >ffff88807adc6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.778034][ T6491]                                                                 ^
[  227.786022][ T6491]  ffff88807adc6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.794099][ T6491]  ffff88807adc6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.802185][ T6491] ==================================================================
[  227.810252][ T6491] Disabling lock debugging due to kernel taint
[  227.816767][ T6491] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  227.823988][ T6491] CPU: 0 PID: 6491 Comm: syz.3.627 Tainted: G    B             syzkaller #0
[  227.832734][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.842823][ T6491] Call Trace:
[  227.846134][ T6491]  <TASK>
[  227.849094][ T6491]  dump_stack_lvl+0x188/0x250
[  227.853819][ T6491]  ? show_regs_print_info+0x20/0x20
[  227.859055][ T6491]  ? load_image+0x410/0x410
[  227.863608][ T6491]  panic+0x2f8/0x850
[  227.867539][ T6491]  ? bpf_jit_dump+0xd0/0xd0
[  227.872089][ T6491]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  227.878019][ T6491]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  227.883952][ T6491]  ? _raw_spin_unlock+0x40/0x40
[  227.888849][ T6491]  ? print_memory_metadata+0x314/0x400
[  227.894345][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.900623][ T6491]  check_panic_on_warn+0x80/0xa0
[  227.905602][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.911884][ T6491]  end_report+0x6d/0xf0
[  227.912557][ T6493] loop4: detected capacity change from 0 to 1024
[  227.916075][ T6491]  kasan_report+0x102/0x130
[  227.916103][ T6491]  ? ieee80211_monitor_select_queue+0x23a/0x240
[  227.929216][ T3559] EXT4-fs error: 133 callbacks suppressed
[  227.929256][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #259: comm udevd: reading directory lblock 0
[  227.933198][ T6491]  ieee80211_monitor_select_queue+0x23a/0x240
[  227.933229][ T6491]  ? ieee80211_recalc_smps_work+0x20/0x20
[  227.940401][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  227.950240][ T6491]  netdev_core_pick_tx+0x12c/0x300
[  227.950274][ T6491]  __dev_queue_xmit+0x797/0x2e50
[  227.957536][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  227.962089][ T6491]  ? __might_sleep+0xf0/0xf0
[  227.962123][ T6491]  ? dev_queue_xmit+0x20/0x20
[  227.984848][ T6480] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.625: Detected aborted journal
[  227.994737][ T6491]  ? virtio_net_hdr_to_skb+0xb00/0x11e0
[  227.994773][ T6491]  ? packet_cached_dev_get+0x270/0x270
[  227.994803][ T6491]  packet_sendmsg+0x3cf9/0x50b0
[  228.030863][ T6491]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  228.036891][ T6491]  ? __might_sleep+0xf0/0xf0
[  228.038505][ T6480] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.625: Detected aborted journal
[  228.041523][ T6491]  ? aa_sk_perm+0x7dc/0x910
[  228.041552][ T6491]  ? packet_getsockopt+0x9a0/0x9a0
[  228.062081][ T6491]  ? unpack_trans_table+0x1046/0x1690
[  228.067500][ T6491]  ? apparmor_socket_sendmsg+0x88/0x230
[  228.070138][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #264: comm udevd: reading directory lblock 0
[  228.073085][ T6491]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  228.073114][ T6491]  ? security_socket_sendmsg+0x7c/0xa0
[  228.073139][ T6491]  ? packet_getsockopt+0x9a0/0x9a0
[  228.073162][ T6491]  ____sys_sendmsg+0x5be/0x8f0
[  228.073190][ T6491]  ? __sys_sendmsg_sock+0x30/0x30
[  228.073217][ T6491]  ? import_iovec+0x6f/0xa0
[  228.073241][ T6491]  ___sys_sendmsg+0x236/0x2e0
[  228.073268][ T6491]  ? __sys_sendmsg+0x290/0x290
[  228.084896][ T6490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.627: Detected aborted journal
[  228.089900][ T6491]  __se_sys_sendmsg+0x1b7/0x2a0
[  228.109886][ T3541] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2: comm syslogd: reading directory lblock 0
[  228.110254][ T6491]  ? __x64_sys_sendmsg+0x80/0x80
[  228.139936][ T3559] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #1642: comm udevd: reading directory lblock 0
[  228.140066][ T6491]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  228.156752][ T6490] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.627: Detected aborted journal
[  228.167837][ T6491]  ? lockdep_hardirqs_on+0x94/0x140
[  228.167871][ T6491]  do_syscall_64+0x4c/0xa0
[  228.167890][ T6491]  ? clear_bhb_loop+0x30/0x80
[  228.167910][ T6491]  ? clear_bhb_loop+0x30/0x80
[  228.167931][ T6491]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  228.209676][ T6491] RIP: 0033:0x7f6c102910d9
[  228.214118][ T6491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.233788][ T6491] RSP: 002b:00007f6c0e4e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
Aug  8 07:38:08 [  228.242268][ T6491] RAX: ffffffffffffffda RBX: 00007f6c10518fa0 RCX: 00007f6c102910d9
syzkaller kern.a[  228.251679][ T6491] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005
lert kernel: [  [  228.261073][ T6491] RBP: 00007f6c10328024 R08: 0000000000000000 R09: 0000000000000000
227.566621][ T64[  228.270458][ T6491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
91] page_owner t[  228.279889][ T6491] R13: 00007f6c10519038 R14: 00007f6c10518fa0 R15: 00007fffde468ea8
[  228.279991][ T6491]  </TASK>
[  228.280385][ T6491] Kernel Offset: disabled
[  228.296584][ T6491] Rebooting in 86400 seconds..