last executing test programs:

13m14.747402171s ago: executing program 0 (id=59):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0x34, &(0x7f00000015c0)=ANY=[@ANYBLOB="00cc0a"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0xa, 0x3, "4ef23b"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

13m11.081190406s ago: executing program 0 (id=78):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r0, &(0x7f0000000440)={@val={0xa, 0x8847}, @void, @eth={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x8, 0x6, "ad126a", 0xdd, 0x29, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1}}}}}}}}, 0x6a)

13m10.831790832s ago: executing program 0 (id=80):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x40000, 0x0)
read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020)

13m10.706737594s ago: executing program 0 (id=82):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x22003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0xa, 0xfffffffb, 0x8000000000000001, 0x4, 0x0, 0x40000000fe, 0x14, 0x20000000000846, 0xb1d, 0x2, 0x7, 0x9, 0x7, 0x6, 0x7ffe, 0x2000000000009], 0x200000, 0x280e81})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13m10.408704112s ago: executing program 0 (id=84):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

13m10.342744633s ago: executing program 0 (id=85):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r2, &(0x7f0000000200), 0x10)
read(r2, &(0x7f0000000300), 0x1000)

12m55.048852539s ago: executing program 32 (id=85):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r2, &(0x7f0000000200), 0x10)
read(r2, &(0x7f0000000300), 0x1000)

4m51.000890214s ago: executing program 1 (id=1950):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f0000002a80)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a3, &(0x7f0000009780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40))
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
rmdir(&(0x7f0000000080)='./bus\x00')

4m48.414577475s ago: executing program 1 (id=1955):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x0, 0x3, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x900}, 0x4000840)
r8 = syz_open_dev$media(0x0, 0xc, 0x80c2)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=<r9=>0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r9, 0x7c80, 0x0)

4m45.19762483s ago: executing program 1 (id=1962):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)

4m43.661485455s ago: executing program 1 (id=1966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', <r3=>0x0, 0x2100, 0x700, 0x0, 0x200, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, @ethernet={0x6}, 0x9c7, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='veth0_vlan\x00', 0x0, 0x8, 0x5})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r7, 0x2, 0x70bd26, 0x8, {{}, {}, {0x14, 0x17, {0x9, 0x8, @l2={'ib', 0x3a, 'hsr0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc0d8}, 0x51)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r5, @ANYRES32], 0x28}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32, @ANYBLOB="01000000010000"], 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r5, @ANYBLOB="14000200200100000000000000000000000000010800080020000000"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32], 0x34}}, 0x0)

4m42.973508581s ago: executing program 1 (id=1980):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x4, 0x800)
getpid()
socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @empty, 0x4e27, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c)

4m39.715564747s ago: executing program 1 (id=1975):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x4, 0x800)
getpid()
socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @empty, 0x4e27, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c)

4m23.370425207s ago: executing program 33 (id=1975):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000000a082, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x4, 0x800)
getpid()
socket(0x2, 0x3, 0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @empty, 0x4e27, 0x200000001, 'nq\x00', 0x9, 0x821}, 0x2c)

15.676444087s ago: executing program 4 (id=2889):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
socket$inet_sctp(0x2, 0x1, 0x84)

10.784483244s ago: executing program 4 (id=2897):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)

10.437163712s ago: executing program 4 (id=2902):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="c1", 0x5dc}], 0x1}, 0x0)

6.972464084s ago: executing program 4 (id=2910):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet(0x23, 0x2, 0x1)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x2, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)

6.278657311s ago: executing program 3 (id=2916):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r2, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000180)=0x84)

6.024289127s ago: executing program 3 (id=2920):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
syz_emit_ethernet(0x87, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3, @ANYRES8=r3, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYBLOB="608819677fe3ebc259935663cbfcad26d0540a62fcd588d4817ec3218bbd07b70dd5f64f31b3eb9d571e312089e7bd8b052813061c312312626459bd1c9b4d816b6d587300", @ANYBLOB], 0x24}], 0x1}, 0x4000)
write(r3, &(0x7f0000000380)='dummy_udc.', 0xa)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000f600000100000000140012000a00f5d6a6c4b0639b113742308744193ecbbe469b53be2c56720fc8d6b4ad1bd608f7285374dc6f0fd8ba5c761c20d6562c3e5e73834c7e8250663568debb58e5d569f52b03304eadf4e2559c79eed26862a29192e6e33932614391dd8422cb9cb8c012576f84a4c32cf36c6d71d51ed3261231baaf0902f37f97079196e789ec3ced91c3e1b3606b1f5cae44ac71"], 0x30}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000088404000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000008"], 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x20040010)

5.322770634s ago: executing program 2 (id=2923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

3.034426478s ago: executing program 3 (id=2924):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0)

3.034143558s ago: executing program 4 (id=2925):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4)

2.920031691s ago: executing program 4 (id=2927):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885)

2.901163981s ago: executing program 3 (id=2928):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
socket$inet_sctp(0x2, 0x1, 0x84)

2.867651222s ago: executing program 2 (id=2929):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x100000000000f7)
read$watch_queue(r1, &(0x7f00000000c0)=""/16, 0x3)
keyctl$revoke(0x3, r0)

2.865667322s ago: executing program 5 (id=2930):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r0}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e)

2.708914886s ago: executing program 6 (id=2931):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newqdisc={0x15c, 0x24, 0x605, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x130, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x11}}, @TCA_RED_STAB={0x104}, @TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x7ff, 0x7fffffff, 0xd, 0xa, 0x13, 0x4}}]}}]}, 0x15c}}, 0x0)

2.707734026s ago: executing program 2 (id=2932):
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x785, 0xffffffff, 0x100000000, 0x7, 0x3, 0x4, 0x5, 0x8000000000000000, 0xc})

2.564269479s ago: executing program 2 (id=2933):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x4004800)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

1.495104325s ago: executing program 6 (id=2934):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000500)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @remote}}}, 0x118)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet(0x23, 0x2, 0x1)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r5, 0x1, 0x3}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r6, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000440)=0x2, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)

1.193808822s ago: executing program 5 (id=2936):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000040))

598.018386ms ago: executing program 3 (id=2937):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000007240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x4c010}], 0x1, 0x20040801)

490.700039ms ago: executing program 6 (id=2938):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wlan1\x00', 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c"], 0xfc}}, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10)

408.069691ms ago: executing program 5 (id=2939):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])

406.609801ms ago: executing program 2 (id=2940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

283.030544ms ago: executing program 6 (id=2941):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x13c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x128, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x74b9c7924d4830a3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

282.718024ms ago: executing program 5 (id=2942):
r0 = socket$inet6(0xa, 0x3, 0x5)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1001, 0x10ffff, 0xfffffffd})
sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000002900000036"], 0x30}}], 0x1, 0x4000000)

260.860284ms ago: executing program 3 (id=2943):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x7f, 0xe, 0x7ffffffe}]})
mmap$qrtrtun(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x100010, 0xffffffffffffffff, 0x6)

216.154755ms ago: executing program 5 (id=2944):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40010)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[], 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000001e0000300"/19], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="e69a0003040400"/17, @ANYRES32=0x0, @ANYBLOB="11010200000000002c001280080001006774700020000280050005000100000014000800fe8800"/49], 0x4c}, 0x1, 0xba01}, 0x8810)

106.672728ms ago: executing program 2 (id=2945):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x2, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0xffffffff, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x500}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0x40}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885)

106.201328ms ago: executing program 6 (id=2946):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r0}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e)

105.952418ms ago: executing program 5 (id=2947):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_io_uring_setup(0x2d39, 0x0, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r3, 0x0)
syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x8)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
socket$inet_sctp(0x2, 0x1, 0x84)

0s ago: executing program 6 (id=2948):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
writev(r1, &(0x7f0000001940)=[{&(0x7f0000000180)="0c1f", 0x2}, {0x0}], 0x2)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  618.485215][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  618.534118][T13878] XFS (loop3): Ending clean mount
[  618.549377][T13878] XFS (loop3): Quotacheck needed: Please wait.
[  618.568394][T13607] device veth0_vlan entered promiscuous mode
[  618.598114][T13607] device veth1_vlan entered promiscuous mode
[  618.628839][ T4184] XFS (loop4): Unmounting Filesystem
[  618.720321][T13878] XFS (loop3): Quotacheck: Done.
[  618.755006][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  618.764251][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  618.795954][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  618.848498][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  618.938318][T13850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  619.017297][   T26] audit: type=1800 audit(1788717420.152:38): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2052" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  619.063759][ T4193] XFS (loop2): Unmounting Filesystem
[  619.158830][T13850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  619.210432][T13607] device veth0_macvtap entered promiscuous mode
[  619.258413][T13607] device veth1_macvtap entered promiscuous mode
[  619.301237][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  619.316760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  619.414484][ T4191] XFS (loop3): Unmounting Filesystem
[  619.477008][T13607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.527773][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  619.557111][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  619.596021][T13607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.634687][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  619.669342][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  619.707235][T13607] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.716790][T13607] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.726294][T13607] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.759540][T13607] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.194638][T13918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  620.253104][T13924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  620.309067][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.331577][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.362280][T13924] device veth0 left promiscuous mode
[  620.403103][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  620.448583][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.462060][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.495449][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  620.513302][ T6415] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  621.038126][ T6415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.126791][ T6415] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.376979][ T6415] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  621.609110][ T6415] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  621.870469][T13945] loop2: detected capacity change from 0 to 2048
[  621.879643][T13947] loop6: detected capacity change from 0 to 32768
[  621.995280][T13945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  622.288444][ T6415] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  623.200442][T13947] XFS (loop6): Mounting V5 Filesystem
[  623.270173][ T6415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.278625][ T6415] usb 5-1: Product: syz
[  623.363859][ T6415] usb 5-1: Manufacturer: syz
[  623.369066][ T6415] usb 5-1: SerialNumber: syz
[  623.374631][T13947] XFS (loop6): Ending clean mount
[  623.386288][T13947] XFS (loop6): Quotacheck needed: Please wait.
[  623.407816][ T6415] usb 5-1: can't set config #1, error -71
[  623.429690][ T6415] usb 5-1: USB disconnect, device number 84
[  623.435048][T13947] XFS (loop6): Quotacheck: Done.
[  623.584029][T13966] loop4: detected capacity change from 0 to 2048
[  623.788656][   T26] audit: type=1800 audit(1788717424.862:39): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2061" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0
[  623.891141][T13966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  624.104932][   T26] audit: type=1800 audit(1788717424.872:40): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2061" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  624.191006][T13607] XFS (loop6): Unmounting Filesystem
[  624.279963][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  624.286337][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  624.505231][T13976] loop3: detected capacity change from 0 to 32768
[  624.851886][T13976] XFS (loop3): Mounting V5 Filesystem
[  625.091033][T13976] XFS (loop3): Ending clean mount
[  625.149778][T13976] XFS (loop3): Quotacheck needed: Please wait.
[  625.256276][T13976] XFS (loop3): Quotacheck: Done.
[  625.535492][   T26] audit: type=1800 audit(1788717426.662:41): pid=14000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2066" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  625.808815][T14004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  625.988642][ T4191] XFS (loop3): Unmounting Filesystem
[  626.267681][ T6415] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  626.467701][ T6415] usb 6-1: device descriptor read/64, error -71
[  626.786269][ T6415] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  627.017809][ T6415] usb 6-1: device descriptor read/64, error -71
[  627.139921][ T6415] usb usb6-port1: attempt power cycle
[  627.612279][T14040] loop3: detected capacity change from 0 to 32768
[  627.687914][ T6415] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  627.799691][ T6415] usb 6-1: device descriptor read/8, error -71
[  628.077631][ T4228] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  628.118433][T14040] XFS (loop3): Mounting V5 Filesystem
[  628.137881][ T6415] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  628.232911][T14040] XFS (loop3): Ending clean mount
[  628.241042][ T6415] usb 6-1: device descriptor read/8, error -71
[  628.259826][T14040] XFS (loop3): Quotacheck needed: Please wait.
[  628.357434][T14040] XFS (loop3): Quotacheck: Done.
[  628.367900][ T6415] usb usb6-port1: unable to enumerate USB device
[  628.483217][T14043] loop6: detected capacity change from 0 to 32768
[  628.547683][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  628.664924][   T26] audit: type=1800 audit(1788717429.772:42): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2075" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  628.865349][T14043] XFS (loop6): Mounting V5 Filesystem
[  628.969193][T14043] XFS (loop6): Ending clean mount
[  629.048987][ T4228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.062640][ T4228] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  629.065256][T14043] XFS (loop6): Quotacheck needed: Please wait.
[  629.087574][ T4228] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  629.111148][ T4191] XFS (loop3): Unmounting Filesystem
[  629.116884][   T26] audit: type=1800 audit(1788717429.862:43): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2075" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  629.314182][T14043] XFS (loop6): Quotacheck: Done.
[  629.319597][ T4228] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  629.397654][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.411766][ T4228] usb 5-1: Product: syz
[  629.416248][ T4228] usb 5-1: Manufacturer: syz
[  629.421495][ T4228] usb 5-1: SerialNumber: syz
[  629.478739][ T4228] cdc_mbim 5-1:1.0: skipping garbage
[  629.560738][T14089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  629.600141][ T4228] cdc_mbim 5-1:1.0: bind() failure
[  629.618430][ T4228] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  629.625651][ T4228] cdc_ncm 5-1:1.1: bind() failure
[  629.684337][ T4228] usb 5-1: USB disconnect, device number 85
[  629.727173][T14095] loop4: detected capacity change from 0 to 2048
[  629.814048][T14095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  630.418465][   T26] audit: type=1800 audit(1788717431.312:44): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2076" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0
[  630.824877][T14106] loop3: detected capacity change from 0 to 2048
[  630.968969][T13607] XFS (loop6): Unmounting Filesystem
[  631.798240][T14106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  632.217884][T14128] loop2: detected capacity change from 0 to 2048
[  632.261762][ T4263] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  632.345312][T14128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  632.596017][ T4263] usb 5-1: device descriptor read/64, error -71
[  633.387614][ T4263] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  633.396407][T14144] loop5: detected capacity change from 0 to 2048
[  633.547135][T14144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  633.576720][T14147] loop2: detected capacity change from 0 to 32768
[  633.589114][ T4263] usb 5-1: device descriptor read/64, error -71
[  633.767984][ T4263] usb usb5-port1: attempt power cycle
[  633.836217][T14147] XFS (loop2): Mounting V5 Filesystem
[  634.680544][T14147] XFS (loop2): Ending clean mount
[  634.688134][T14147] XFS (loop2): Quotacheck needed: Please wait.
[  634.971320][T14170] loop6: detected capacity change from 0 to 2048
[  635.001697][T14170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.030365][ T4263] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[  635.038505][T14147] XFS (loop2): Quotacheck: Done.
[  635.441020][   T26] audit: type=1800 audit(1788717436.532:45): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2091" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4430 res=0 errno=0
[  635.584048][T14180] loop3: detected capacity change from 0 to 2048
[  635.668878][T14180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.688944][T13856] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  635.731446][ T4193] XFS (loop2): Unmounting Filesystem
[  635.738263][ T4263] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  635.828073][   T26] audit: type=1800 audit(1788717436.582:46): pid=14181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2091" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  635.945166][ T4263] usb 5-1: device descriptor read/8, error -71
[  636.088188][T13856] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.103340][T13856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.114955][T13856] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  636.125622][T13856] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  636.347868][T13856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  636.357178][T13856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.365441][T13856] usb 6-1: Product: syz
[  636.370004][T13856] usb 6-1: Manufacturer: syz
[  636.374603][T13856] usb 6-1: SerialNumber: syz
[  636.448726][T13856] cdc_mbim 6-1:1.0: skipping garbage
[  636.477611][ T4263] usb usb5-port1: unable to enumerate USB device
[  636.861982][T14173] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  637.808998][T14206] loop6: detected capacity change from 0 to 2048
[  637.836827][T14206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  637.889781][T14173] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  638.258878][T14173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  638.700531][T13856] cdc_mbim 6-1:1.0: bind() failure
[  638.747762][T13856] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  638.768005][ T6415] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  638.778988][T13856] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  638.823078][T13856] usbtest: probe of 6-1:1.1 failed with error -71
[  638.877834][T13856] usb 6-1: USB disconnect, device number 101
[  638.967610][ T6415] usb 5-1: device descriptor read/64, error -71
[  639.019488][T14219] loop6: detected capacity change from 0 to 2048
[  639.121757][T14217] loop3: detected capacity change from 0 to 32768
[  639.129853][T14219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  639.202285][T14215] loop2: detected capacity change from 0 to 32768
[  639.277646][ T6415] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  639.490760][ T6415] usb 5-1: device descriptor read/64, error -71
[  639.620172][ T6415] usb usb5-port1: attempt power cycle
[  639.942516][T14217] XFS (loop3): Mounting V5 Filesystem
[  639.966963][T14215] XFS (loop2): Mounting V5 Filesystem
[  640.317676][ T6415] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  640.477875][ T6415] usb 5-1: device descriptor read/8, error -71
[  640.493097][T14215] XFS (loop2): Ending clean mount
[  640.521707][T14217] XFS (loop3): Ending clean mount
[  640.529829][T14217] XFS (loop3): Quotacheck needed: Please wait.
[  640.556175][T14215] XFS (loop2): Quotacheck needed: Please wait.
[  640.767798][ T6415] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  641.148629][T14215] XFS (loop2): Quotacheck: Done.
[  641.305977][   T26] audit: type=1800 audit(1788717442.422:47): pid=14215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2107" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  641.327734][T14217] XFS (loop3): Quotacheck: Done.
[  641.537660][ T6415] usb 5-1: device descriptor read/8, error -71
[  641.683190][ T6415] usb usb5-port1: unable to enumerate USB device
[  641.801426][ T4193] XFS (loop2): Unmounting Filesystem
[  641.868292][   T26] audit: type=1800 audit(1788717442.752:48): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  642.028469][   T26] audit: type=1800 audit(1788717442.792:49): pid=14266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2108" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  642.073451][ T4191] XFS (loop3): Unmounting Filesystem
[  642.109923][   T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  642.307688][   T23] usb 7-1: device descriptor read/64, error -71
[  642.602970][   T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  642.867950][T13856] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  643.507859][   T23] usb 7-1: device descriptor read/64, error -71
[  643.610706][T13856] usb 3-1: device descriptor read/64, error -71
[  643.677765][   T23] usb usb7-port1: attempt power cycle
[  643.837113][ T4229] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  644.148203][   T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  644.288779][   T23] usb 7-1: device descriptor read/8, error -71
[  644.308781][ T4229] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.447250][ T4229] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  644.457702][ T4229] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  644.507618][T13856] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  644.598009][   T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  644.657987][ T4229] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  644.707617][T13856] usb 3-1: device descriptor read/64, error -71
[  644.721877][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.733058][   T23] usb 7-1: device descriptor read/8, error -71
[  644.878417][   T23] usb usb7-port1: unable to enumerate USB device
[  644.890001][ T4229] usb 6-1: Product: syz
[  644.963059][ T4229] usb 6-1: Manufacturer: syz
[  645.032589][ T4229] usb 6-1: SerialNumber: syz
[  645.264741][ T4229] cdc_mbim 6-1:1.0: skipping garbage
[  645.456402][T14297] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  645.618133][T13856] usb usb3-port1: attempt power cycle
[  646.607824][T14329] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  646.996472][T14297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  647.987879][ T4229] cdc_mbim 6-1:1.0: bind() failure
[  648.042322][ T4229] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  648.148987][T14351] loop2: detected capacity change from 0 to 2048
[  648.288986][T14351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  648.299173][T14352] loop3: detected capacity change from 0 to 32768
[  648.307086][ T4229] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  648.327677][ T4229] usbtest: probe of 6-1:1.1 failed with error -71
[  648.351962][ T4229] usb 6-1: USB disconnect, device number 102
[  648.521157][T14352] XFS (loop3): Mounting V5 Filesystem
[  648.592299][T14352] XFS (loop3): Ending clean mount
[  648.599682][T14352] XFS (loop3): Quotacheck needed: Please wait.
[  649.068126][T14352] XFS (loop3): Quotacheck: Done.
[  649.765086][   T26] audit: type=1800 audit(1788717450.482:50): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2126" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  649.839428][ T4191] XFS (loop3): Unmounting Filesystem
[  650.186363][   T26] audit: type=1800 audit(1788717450.532:51): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2126" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  653.797582][ T4228] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  654.258314][ T4228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.352589][ T4228] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  654.473304][ T4228] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  655.918774][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  656.667905][T14432] loop3: detected capacity change from 0 to 256
[  656.685887][T14435] loop6: detected capacity change from 0 to 256
[  657.157592][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.165754][ T4228] usb 3-1: Product: syz
[  657.170034][ T4228] usb 3-1: Manufacturer: syz
[  657.174647][ T4228] usb 3-1: SerialNumber: syz
[  657.287874][ T4228] usb 3-1: can't set config #1, error -71
[  657.304169][ T4228] usb 3-1: USB disconnect, device number 99
[  660.963887][T14464] loop3: detected capacity change from 0 to 256
[  662.377656][ T4227] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  663.887802][ T4227] usb 3-1: device descriptor read/64, error -71
[  663.901113][T14487] loop3: detected capacity change from 0 to 2048
[  664.602568][T14487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  666.958167][T14506] loop5: detected capacity change from 0 to 256
[  667.607401][T14516] loop2: detected capacity change from 0 to 256
[  670.461890][T14528] loop6: detected capacity change from 0 to 256
[  670.571105][T14531] loop4: detected capacity change from 0 to 256
[  673.689671][T14555] loop6: detected capacity change from 0 to 256
[  675.038145][T14561] loop5: detected capacity change from 0 to 2048
[  675.277706][T14561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  676.151971][T14579] loop3: detected capacity change from 0 to 256
[  677.577799][T14319] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  677.800500][T14319] usb 5-1: device descriptor read/64, error -71
[  680.127637][T14319] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  680.402598][T14613] loop5: detected capacity change from 0 to 256
[  680.409302][T14612] loop6: detected capacity change from 0 to 256
[  683.964766][T14644] loop3: detected capacity change from 0 to 256
[  684.080575][T14646] loop4: detected capacity change from 0 to 256
[  686.226030][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  686.258663][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  686.724302][T14674] loop5: detected capacity change from 0 to 256
[  687.629486][T14683] loop4: detected capacity change from 0 to 256
[  687.703656][T14685] loop6: detected capacity change from 0 to 256
[  688.848898][T14692] Mass Storage Function, version: 2009/09/11
[  688.855986][T14692] LUN: removable file: (no medium)
[  688.867483][T14692] LUN: removable file: (no medium)
[  688.916311][T14696] loop5: detected capacity change from 0 to 256
[  690.596477][T14705] loop4: detected capacity change from 0 to 256
[  690.669997][T14707] loop6: detected capacity change from 0 to 256
[  691.097695][T14686] loop3: detected capacity change from 0 to 256
[  691.898389][ T4398] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  691.906271][ T6415] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  693.210546][T14727] loop6: detected capacity change from 0 to 256
[  693.900376][ T6415] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.911505][ T4398] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.921887][ T6415] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  693.932419][ T4398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  693.941733][ T4398] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  694.129578][T14735] loop2: detected capacity change from 0 to 256
[  694.187949][ T6415] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  694.359936][ T6415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.711711][ T6415] usb 5-1: Product: syz
[  694.831194][ T6415] usb 5-1: Manufacturer: syz
[  694.836065][ T6415] usb 5-1: SerialNumber: syz
[  694.841277][ T4398] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  694.857815][ T4398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.866093][ T4398] usb 6-1: Product: syz
[  694.870776][ T4398] usb 6-1: Manufacturer: syz
[  694.915658][ T6415] usb 5-1: can't set config #1, error -71
[  694.943897][ T4398] usb 6-1: can't set config #1, error -71
[  694.973065][ T6415] usb 5-1: USB disconnect, device number 96
[  694.985620][ T4398] usb 6-1: USB disconnect, device number 103
[  695.699421][T14747] loop4: detected capacity change from 0 to 256
[  696.364269][T14754] loop3: detected capacity change from 0 to 256
[  698.427987][ T4229] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  699.032771][ T4229] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  699.062920][ T4229] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  699.277870][ T4229] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  699.286957][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.337666][ T4229] usb 5-1: Product: syz
[  699.341878][ T4229] usb 5-1: Manufacturer: syz
[  699.346483][ T4229] usb 5-1: SerialNumber: syz
[  699.408875][ T4229] cdc_mbim 5-1:1.0: skipping garbage
[  699.614434][T14789] loop5: detected capacity change from 0 to 256
[  699.658655][T14774] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  700.307729][ T4229] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  700.313905][ T4229] cdc_mbim 5-1:1.0: bind() failure
[  700.333192][ T4229] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  700.356369][ T4229] cdc_ncm 5-1:1.1: bind() failure
[  700.481550][T14780] loop3: detected capacity change from 0 to 32768
[  700.540246][T14794] loop5: detected capacity change from 0 to 256
[  700.588653][T14780] XFS (loop3): Mounting V5 Filesystem
[  700.654213][T14790] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  700.710829][T14780] XFS (loop3): Ending clean mount
[  700.727394][T14780] XFS (loop3): Quotacheck needed: Please wait.
[  700.930106][T14780] XFS (loop3): Quotacheck: Done.
[  700.986724][   T26] audit: type=1800 audit(1788717502.122:52): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2225" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  701.863298][T14811] loop6: detected capacity change from 0 to 256
[  701.952800][ T4191] XFS (loop3): Unmounting Filesystem
[  702.313257][ T4229] usb 5-1: USB disconnect, device number 97
[  702.453862][T14819] loop5: detected capacity change from 0 to 256
[  703.954049][T14829] loop6: detected capacity change from 0 to 256
[  704.906187][T14837] loop4: detected capacity change from 0 to 32768
[  704.998558][T14839] loop5: detected capacity change from 0 to 256
[  705.191951][ T2300] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  705.391560][T14837] XFS (loop4): Mounting V5 Filesystem
[  705.797404][T14851] loop6: detected capacity change from 0 to 2048
[  705.804190][ T2300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  705.863646][ T2300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  705.905563][ T2300] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  705.979792][T14837] XFS (loop4): Ending clean mount
[  706.011727][T14837] XFS (loop4): Quotacheck needed: Please wait.
[  706.015273][T14851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  706.147949][ T2300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  706.163280][ T2300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.177481][ T2300] usb 3-1: Product: syz
[  706.182274][ T2300] usb 3-1: Manufacturer: syz
[  706.186900][ T2300] usb 3-1: SerialNumber: syz
[  706.226152][T14837] XFS (loop4): Quotacheck: Done.
[  706.391208][ T2300] cdc_mbim 3-1:1.0: skipping garbage
[  706.441607][   T26] audit: type=1800 audit(1788717507.582:53): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2242" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  706.568134][   T26] audit: type=1800 audit(1788717507.632:54): pid=14857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2242" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  706.692632][ T4184] XFS (loop4): Unmounting Filesystem
[  706.718646][T14850] loop5: detected capacity change from 0 to 32768
[  706.825128][T14855] loop3: detected capacity change from 0 to 32768
[  707.169123][T14850] XFS (loop5): Mounting V5 Filesystem
[  707.308747][T14855] XFS (loop3): Mounting V5 Filesystem
[  707.514582][T14850] XFS (loop5): Ending clean mount
[  707.527272][T14850] XFS (loop5): Quotacheck needed: Please wait.
[  707.620801][T14832] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  707.656209][T14855] XFS (loop3): Ending clean mount
[  707.673993][T14855] XFS (loop3): Quotacheck needed: Please wait.
[  707.707342][T14850] XFS (loop5): Quotacheck: Done.
[  707.712629][ T2300] cdc_mbim 3-1:1.0: bind() failure
[  707.730056][   T26] audit: type=1800 audit(1788717508.862:55): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2244" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  707.757835][ T2300] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  707.787025][ T2300] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  707.812064][ T4790] XFS (loop5): Unmounting Filesystem
[  707.820046][T14855] XFS (loop3): Quotacheck: Done.
[  707.837848][ T2300] usbtest: probe of 3-1:1.1 failed with error -71
[  707.846820][ T2300] usb 3-1: USB disconnect, device number 102
[  707.900737][   T26] audit: type=1800 audit(1788717509.002:56): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2245" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  707.961826][ T4191] XFS (loop3): Unmounting Filesystem
[  708.113888][ T4227] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  708.514632][T14893] loop2: detected capacity change from 0 to 256
[  709.144211][ T4227] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  709.155323][ T4227] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  709.307931][T13856] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  709.347941][ T4227] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  709.358726][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.366742][ T4227] usb 7-1: Product: syz
[  709.381310][ T4227] usb 7-1: Manufacturer: syz
[  710.707747][ T4227] usb 7-1: SerialNumber: syz
[  710.768799][ T4227] cdc_mbim 7-1:1.0: skipping garbage
[  710.847749][ T4227] cdc_mbim 7-1:1.0: bind() failure
[  710.855537][ T4227] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  710.966430][T14909] loop2: detected capacity change from 0 to 256
[  711.594382][ T4227] cdc_ncm 7-1:1.1: bind() failure
[  711.602562][ T4227] usb 7-1: USB disconnect, device number 6
[  711.631438][T14911] loop3: detected capacity change from 0 to 2048
[  711.707719][T13856] usb 6-1: unable to read config index 0 descriptor/start: -71
[  711.715398][T13856] usb 6-1: can't read configurations, error -71
[  711.929624][T14920] loop5: detected capacity change from 0 to 256
[  712.045919][T14911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  712.852216][T14924] loop6: detected capacity change from 0 to 256
[  713.780836][T14932] loop6: detected capacity change from 0 to 256
[  714.724937][T14936] loop6: detected capacity change from 0 to 256
[  716.480719][T13856] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  716.511056][T14956] loop5: detected capacity change from 0 to 2048
[  716.943458][T14956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  716.952976][ T2300] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  717.388317][T13856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.447411][T13856] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  717.509053][ T2300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  717.535063][ T2300] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  717.610554][T14972] loop3: detected capacity change from 0 to 256
[  717.690394][ T2300] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  717.810201][ T2300] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  718.118896][ T2300] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  718.186785][ T2300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.202093][ T2300] usb 5-1: Product: syz
[  718.206494][ T2300] usb 5-1: Manufacturer: syz
[  718.227732][ T2300] usb 5-1: SerialNumber: syz
[  718.287757][T13856] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  718.288774][ T2300] cdc_mbim 5-1:1.0: skipping garbage
[  718.304268][T13856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.329370][T13856] usb 7-1: Product: syz
[  718.337876][T13856] usb 7-1: Manufacturer: syz
[  718.347947][T13856] usb 7-1: SerialNumber: syz
[  718.458976][T13856] cdc_mbim 7-1:1.0: skipping garbage
[  718.491341][T14948] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  718.665319][T14944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  718.717482][T14978] loop3: detected capacity change from 0 to 32768
[  718.857696][T14978] XFS (loop3): Mounting V5 Filesystem
[  718.916505][T14978] XFS (loop3): Ending clean mount
[  718.924007][T14978] XFS (loop3): Quotacheck needed: Please wait.
[  719.013833][T14978] XFS (loop3): Quotacheck: Done.
[  719.137789][T13856] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS
[  719.147730][T13856] cdc_mbim 7-1:1.0: bind() failure
[  719.178602][T14948] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  719.201102][T13856] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  719.224521][T13856] cdc_ncm 7-1:1.1: bind() failure
[  719.232284][   T26] audit: type=1800 audit(1788717520.372:57): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2280" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  719.335430][   T26] audit: type=1800 audit(1788717520.422:58): pid=14992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2280" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  719.452211][T14948] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  719.486667][ T4191] XFS (loop3): Unmounting Filesystem
[  719.516340][T14991] loop2: detected capacity change from 0 to 32768
[  719.529639][T14995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  719.566136][ T2300] cdc_mbim 5-1:1.0: bind() failure
[  719.608905][ T2300] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  719.637796][ T2300] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  719.667968][ T2300] usbtest: probe of 5-1:1.1 failed with error -71
[  719.709424][ T2300] usb 5-1: USB disconnect, device number 98
[  719.744659][T14991] XFS (loop2): Mounting V5 Filesystem
[  719.850444][T14991] XFS (loop2): Ending clean mount
[  719.863062][T14991] XFS (loop2): Quotacheck needed: Please wait.
[  719.935129][T14991] XFS (loop2): Quotacheck: Done.
[  719.965668][   T26] audit: type=1800 audit(1788717521.102:59): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2282" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  720.008757][ T4193] XFS (loop2): Unmounting Filesystem
[  720.156195][T15010] loop3: detected capacity change from 0 to 256
[  720.495134][T14997] loop5: detected capacity change from 0 to 32768
[  720.770244][ T4227] usb 7-1: USB disconnect, device number 7
[  720.817007][T15016] loop6: detected capacity change from 0 to 2048
[  720.910706][T15016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  720.997452][T14997] XFS (loop5): Mounting V5 Filesystem
[  721.171963][T14997] XFS (loop5): Ending clean mount
[  721.191631][T14997] XFS (loop5): Quotacheck needed: Please wait.
[  721.405909][T15031] loop3: detected capacity change from 0 to 256
[  722.112538][T14997] XFS (loop5): Quotacheck: Done.
[  722.141094][T13856] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  722.159286][   T26] audit: type=1800 audit(1788717523.302:60): pid=14997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2284" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  722.278059][ T4790] XFS (loop5): Unmounting Filesystem
[  722.577672][T13856] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  722.721024][T15042] loop2: detected capacity change from 0 to 256
[  723.455040][T13856] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  723.466103][T13856] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  723.637819][T13856] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  723.657572][T13856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.665614][T13856] usb 7-1: Product: syz
[  723.725399][T13856] usb 7-1: Manufacturer: syz
[  723.744676][T13856] usb 7-1: SerialNumber: syz
[  723.801680][T15044] loop3: detected capacity change from 0 to 32768
[  723.809620][ T6415] Bluetooth: hci5: command 0x0406 tx timeout
[  723.810251][T13856] cdc_mbim 7-1:1.0: skipping garbage
[  723.997443][T15044] XFS (loop3): Mounting V5 Filesystem
[  724.017609][ T4228] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  724.100314][T15044] XFS (loop3): Ending clean mount
[  724.114673][T15044] XFS (loop3): Quotacheck needed: Please wait.
[  724.281778][T15059] loop5: detected capacity change from 0 to 256
[  724.965632][T15044] XFS (loop3): Quotacheck: Done.
[  725.175639][   T26] audit: type=1800 audit(1788717526.312:61): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2295" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4430 res=0 errno=0
[  725.187766][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  725.229276][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  725.238982][ T4228] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  725.259100][   T26] audit: type=1800 audit(1788717526.402:62): pid=15065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2295" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  725.367737][T14319] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  725.369898][T15029] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  725.375530][ T6415] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  725.412318][ T4228] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  725.424231][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.436087][ T4228] usb 3-1: Product: syz
[  725.442689][ T4228] usb 3-1: Manufacturer: syz
[  725.451325][ T4228] usb 3-1: SerialNumber: syz
[  725.500926][ T4191] XFS (loop3): Unmounting Filesystem
[  725.518814][ T4228] cdc_mbim 3-1:1.0: skipping garbage
[  725.524150][ T4228] cdc_mbim 3-1:1.0: skipping garbage
[  725.542346][ T4228] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found
[  725.555376][ T4228] cdc_mbim 3-1:1.0: bind() failure
[  725.725053][T15029] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.732631][T15029] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.878575][ T6415] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  725.888941][T14319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.900278][ T6415] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.911624][T14319] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  725.921968][ T6415] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  725.932082][ T6415] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  726.098052][T14319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.107230][T14319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.117738][ T6415] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.126809][ T6415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.147602][T14319] usb 5-1: Product: syz
[  726.151864][T14319] usb 5-1: Manufacturer: syz
[  726.156545][ T6415] usb 6-1: Product: syz
[  726.166341][T14319] usb 5-1: SerialNumber: syz
[  726.171320][ T6415] usb 6-1: Manufacturer: syz
[  726.179886][ T6415] usb 6-1: SerialNumber: syz
[  726.221238][T14319] cdc_mbim 5-1:1.0: skipping garbage
[  726.231730][ T6415] cdc_mbim 6-1:1.0: skipping garbage
[  726.240586][T15029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  726.272814][T15029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  726.425588][T15064] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  726.436621][T15063] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  726.536493][T15029] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  726.545513][T15029] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  726.554926][T15029] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  726.563921][T15029] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  726.660977][T13856] cdc_mbim 7-1:1.0: bind() failure
[  726.687814][T13856] cdc_ncm: probe of 7-1:1.1 failed with error -71
[  726.696366][T15070] loop3: detected capacity change from 0 to 2048
[  726.718092][T13856] cdc_mbim: probe of 7-1:1.1 failed with error -71
[  726.737677][T13856] usbtest: probe of 7-1:1.1 failed with error -71
[  726.876157][T15074] loop6: detected capacity change from 0 to 256
[  726.898310][T14319] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  726.904850][T14319] cdc_mbim 5-1:1.0: bind() failure
[  727.116770][T15063] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  727.145476][T14319] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  727.161057][T15070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  727.273887][T15075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  727.302973][T14319] cdc_ncm 5-1:1.1: bind() failure
[  727.453598][T15063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  727.562745][T13856] usb 7-1: USB disconnect, device number 8
[  727.614644][ T4229] usb 3-1: USB disconnect, device number 103
[  727.858223][ T6415] cdc_mbim 6-1:1.0: bind() failure
[  727.897806][ T6415] cdc_ncm: probe of 6-1:1.1 failed with error -71
[  727.937760][ T6415] cdc_mbim: probe of 6-1:1.1 failed with error -71
[  727.998013][ T6415] usbtest: probe of 6-1:1.1 failed with error -71
[  728.082050][ T6415] usb 6-1: USB disconnect, device number 106
[  728.253374][T15082] loop6: detected capacity change from 0 to 32768
[  728.310451][T15082] XFS (loop6): Mounting V5 Filesystem
[  728.377038][T15082] XFS (loop6): Ending clean mount
[  728.384566][T15082] XFS (loop6): Quotacheck needed: Please wait.
[  728.565466][T15097] loop2: detected capacity change from 0 to 256
[  730.171290][T15082] XFS (loop6): Quotacheck: Done.
[  730.187324][ T6415] usb 5-1: USB disconnect, device number 99
[  730.527419][T15101] loop5: detected capacity change from 0 to 256
[  730.675392][   T26] audit: type=1800 audit(1788717531.812:63): pid=15082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2302" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0
[  730.804115][T13607] XFS (loop6): Unmounting Filesystem
[  734.332515][T15162] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  734.692201][T15171] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  734.829723][T15181] loop6: detected capacity change from 0 to 256
[  735.474418][T15171] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  735.796232][T15185] loop5: detected capacity change from 0 to 256
[  737.074320][T15192] loop2: detected capacity change from 0 to 256
[  737.131047][T15194] loop3: detected capacity change from 0 to 256
[  738.606534][T15206] loop3: detected capacity change from 0 to 256
[  738.662173][T15204] loop5: detected capacity change from 0 to 256
[  739.503710][T15211] loop6: detected capacity change from 0 to 32768
[  739.605980][T15211] XFS (loop6): Mounting V5 Filesystem
[  739.756036][T15211] XFS (loop6): Ending clean mount
[  739.767575][T15211] XFS (loop6): Quotacheck needed: Please wait.
[  739.820517][T15218] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  739.828596][T15218] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  739.964749][T15211] XFS (loop6): Quotacheck: Done.
[  740.265306][T15239] loop4: detected capacity change from 0 to 256
[  740.832248][   T26] audit: type=1800 audit(1788717541.952:64): pid=15240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2341" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0
[  741.165146][T15223] loop5: detected capacity change from 0 to 32768
[  741.356181][T15258] loop3: detected capacity change from 0 to 256
[  741.559840][T15223] XFS (loop5): Mounting V5 Filesystem
[  742.022718][T15223] XFS (loop5): Ending clean mount
[  742.080797][T15223] XFS (loop5): Quotacheck needed: Please wait.
[  742.153631][T15223] XFS (loop5): Quotacheck: Done.
[  742.174668][   T26] audit: type=1800 audit(1788717543.312:65): pid=15223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2347" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  742.303573][ T4790] XFS (loop5): Unmounting Filesystem
[  742.388894][T14319] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  742.810405][T14319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  742.829886][T14319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.863145][T14319] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  742.887603][T14319] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  743.014475][T13607] XFS (loop6): Unmounting Filesystem
[  743.107986][T14319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  743.117079][T14319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.147785][T14319] usb 4-1: Product: syz
[  743.152010][T14319] usb 4-1: Manufacturer: syz
[  743.156610][T14319] usb 4-1: SerialNumber: syz
[  743.228874][T14319] cdc_mbim 4-1:1.0: skipping garbage
[  743.281413][T15289] loop5: detected capacity change from 0 to 32768
[  743.323054][T15289] XFS (loop5): Mounting V5 Filesystem
[  743.375317][T15289] XFS (loop5): Ending clean mount
[  743.407829][T15289] XFS (loop5): Quotacheck needed: Please wait.
[  743.432907][T15269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  743.456517][T15289] XFS (loop5): Quotacheck: Done.
[  743.484421][   T26] audit: type=1800 audit(1788717544.622:66): pid=15289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2367" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  743.635804][ T4790] XFS (loop5): Unmounting Filesystem
[  743.781968][T15304] loop6: detected capacity change from 0 to 32768
[  743.960521][T15304] XFS (loop6): Mounting V5 Filesystem
[  743.999692][T15304] XFS (loop6): Ending clean mount
[  744.006669][T15304] XFS (loop6): Quotacheck needed: Please wait.
[  744.098551][T15326] loop4: detected capacity change from 0 to 256
[  744.119869][T15269] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  744.367661][T15269] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  744.779497][T15304] XFS (loop6): Quotacheck: Done.
[  745.025091][T14319] cdc_mbim 4-1:1.0: bind() failure
[  745.030655][ T6415] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  745.069997][T14319] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  745.094549][T14319] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  745.125026][   T26] audit: type=1800 audit(1788717546.252:67): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2375" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0
[  745.178834][T14319] usbtest: probe of 4-1:1.1 failed with error -71
[  745.201926][T14319] usb 4-1: USB disconnect, device number 94
[  745.468278][ T6415] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  745.484969][ T6415] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  745.678505][ T6415] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  745.728622][ T6415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.766871][ T6415] usb 3-1: Product: syz
[  745.826564][ T6415] usb 3-1: Manufacturer: syz
[  745.865803][ T6415] usb 3-1: SerialNumber: syz
[  746.081593][ T6415] cdc_mbim 3-1:1.0: skipping garbage
[  746.271777][T15319] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  747.090959][T15319] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  747.164862][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  747.172358][ T6415] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  747.181456][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  747.248262][ T6415] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  747.260512][T13607] XFS (loop6): Unmounting Filesystem
[  747.280343][ T6415] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 76:23:91:21:76:59
[  747.415011][T15319] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  747.518620][ T6415] usb 3-1: USB disconnect, device number 104
[  747.528054][ T6415] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  748.136787][T15374] loop3: detected capacity change from 0 to 256
[  748.186141][T15355] loop5: detected capacity change from 0 to 32768
[  748.264337][T15380] loop6: detected capacity change from 0 to 256
[  748.375952][T15355] XFS (loop5): Mounting V5 Filesystem
[  748.584320][T15355] XFS (loop5): Ending clean mount
[  748.634452][T15355] XFS (loop5): Quotacheck needed: Please wait.
[  748.733473][T15355] XFS (loop5): Quotacheck: Done.
[  748.743850][   T26] audit: type=1800 audit(1788717549.882:68): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2380" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4429 res=0 errno=0
[  748.800162][ T4790] XFS (loop5): Unmounting Filesystem
[  749.147795][ T6282] IPVS: ip_vs_send_async error -101
[  750.399692][T15420] loop2: detected capacity change from 0 to 32768
[  750.481936][T15425] loop5: detected capacity change from 0 to 256
[  750.551924][T15405] loop4: detected capacity change from 0 to 32768
[  750.712251][T15420] XFS (loop2): Mounting V5 Filesystem
[  750.850320][T15405] XFS (loop4): Mounting V5 Filesystem
[  751.173388][T15420] XFS (loop2): Ending clean mount
[  751.201091][T15420] XFS (loop2): Quotacheck needed: Please wait.
[  751.317877][T15420] XFS (loop2): Quotacheck: Done.
[  751.513131][T15405] XFS (loop4): Ending clean mount
[  751.806632][T15405] XFS (loop4): Quotacheck needed: Please wait.
[  752.370540][T15405] XFS (loop4): Quotacheck: Done.
[  752.447787][ T4184] XFS (loop4): Unmounting Filesystem
[  753.595991][ T4193] XFS (loop2): Unmounting Filesystem
[  754.379672][T15485] loop6: detected capacity change from 0 to 256
[  754.943814][T15495] loop2: detected capacity change from 0 to 256
[  756.511384][T15518] loop3: detected capacity change from 0 to 256
[  756.601137][T15517] loop6: detected capacity change from 0 to 32768
[  756.757460][T15517] XFS (loop6): Mounting V5 Filesystem
[  756.931383][T15517] XFS (loop6): Ending clean mount
[  756.939691][T15517] XFS (loop6): Quotacheck needed: Please wait.
[  757.042781][T15517] XFS (loop6): Quotacheck: Done.
[  757.348745][   T26] audit: type=1800 audit(1788717558.492:69): pid=15535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2409" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0
[  758.229128][ T6282] IPVS: ip_vs_send_async error -101
[  760.602740][T15566] loop2: detected capacity change from 0 to 256
[  760.727634][T15569] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  761.633935][T13607] XFS (loop6): Unmounting Filesystem
[  761.672221][T15576] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  761.680845][T15576] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  761.821909][T15586] loop2: detected capacity change from 0 to 2048
[  761.922368][T15586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  762.175480][T15591] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  763.175199][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2424'.
[  763.204283][T15601] 8021q: adding VLAN 0 to HW filter on device team1
[  763.434837][T15596] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  763.576151][T15596] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  765.728238][T15612] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  765.747811][T15612] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  765.766589][T15609] ODEBUG: Out of memory. ODEBUG disabled
[  766.282244][T15621] loop4: detected capacity change from 0 to 32768
[  767.059312][T15621] XFS (loop4): Mounting V5 Filesystem
[  767.156085][T15621] XFS (loop4): Ending clean mount
[  767.163491][T15621] XFS (loop4): Quotacheck needed: Please wait.
[  767.261143][T15621] XFS (loop4): Quotacheck: Done.
[  767.535671][   T26] audit: type=1800 audit(1788717568.672:70): pid=15649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2434" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  767.797489][T15651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  768.214357][T15647] device syzkaller0 entered promiscuous mode
[  768.384468][T15655] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  768.473256][T15655] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  768.569739][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2450'.
[  768.826787][T15659] 8021q: adding VLAN 0 to HW filter on device team1
[  771.006932][ T4184] XFS (loop4): Unmounting Filesystem
[  771.514404][T15699] loop3: detected capacity change from 0 to 2048
[  771.564134][T15699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  776.004714][T15724] device syzkaller0 entered promiscuous mode
[  778.086119][ T4227] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  778.550737][ T4227] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  778.563007][ T4227] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  778.573359][ T4227] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  778.808931][ T4227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  778.829627][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.844300][ T4227] usb 5-1: Product: syz
[  778.855277][ T4227] usb 5-1: Manufacturer: syz
[  778.882616][ T4227] usb 5-1: SerialNumber: syz
[  778.985012][ T4227] cdc_mbim 5-1:1.0: skipping garbage
[  779.006034][T15754] binder: 15753:15754 ioctl c0306201 0 returned -14
[  779.188662][T15738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  779.831794][T15738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  780.099827][T15738] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  780.283933][ T4227] cdc_mbim 5-1:1.0: bind() failure
[  780.318542][ T4227] cdc_ncm: probe of 5-1:1.1 failed with error -71
[  780.366277][ T4227] cdc_mbim: probe of 5-1:1.1 failed with error -71
[  780.388492][ T4227] usbtest: probe of 5-1:1.1 failed with error -71
[  780.416039][ T4227] usb 5-1: USB disconnect, device number 100
[  783.407341][T15783] loop6: detected capacity change from 0 to 2048
[  783.518706][ T4227] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  783.545013][T15783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  785.028633][ T4227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.057600][ T4227] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  785.098610][ T4227] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  785.128381][ T4227] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  785.144307][T15797] binder: BINDER_SET_CONTEXT_MGR already set
[  785.171493][T15797] binder: 15796:15797 ioctl 4018620d 200000004a80 returned -16
[  785.212647][T15799] binder: 15796:15799 ioctl c0306201 0 returned -14
[  785.348681][ T4227] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  785.363343][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.388544][ T4227] usb 3-1: Product: syz
[  785.401711][ T4227] usb 3-1: Manufacturer: syz
[  785.417739][ T4227] usb 3-1: SerialNumber: syz
[  785.469601][ T4227] cdc_mbim 3-1:1.0: skipping garbage
[  785.671969][T15782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  785.872120][ T6282] IPVS: ip_vs_send_async error -101
[  785.937865][T15802] loop3: detected capacity change from 0 to 32768
[  786.037211][T15802] XFS (loop3): Mounting V5 Filesystem
[  786.186267][T15802] XFS (loop3): Ending clean mount
[  786.208606][ T4227] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS
[  786.225023][ T4227] cdc_mbim 3-1:1.0: bind() failure
[  786.249114][T15802] XFS (loop3): Quotacheck needed: Please wait.
[  786.291736][ T4227] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  786.360923][ T4227] cdc_ncm 3-1:1.1: bind() failure
[  786.760854][T15817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  786.814160][T15802] XFS (loop3): Quotacheck: Done.
[  786.855192][   T26] audit: type=1800 audit(1788717587.992:71): pid=15802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2476" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0
[  786.948418][ T4191] XFS (loop3): Unmounting Filesystem
[  786.977880][ T6415] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  787.237716][T14319] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  787.358412][ T6415] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.397001][ T6415] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  787.608822][T14319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  787.619785][ T6415] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  787.643885][ T6415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.661032][T14319] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  787.702674][ T6415] usb 7-1: Product: syz
[  787.719614][T14319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.741999][ T6415] usb 7-1: Manufacturer: syz
[  787.770814][ T6415] usb 7-1: SerialNumber: syz
[  787.917154][ T6415] cdc_mbim 7-1:1.0: skipping garbage
[  787.957976][T14319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  787.996913][T14319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.060251][T14319] usb 5-1: Product: syz
[  788.093053][T14319] usb 5-1: Manufacturer: syz
[  788.118995][T15815] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  788.160635][T14319] usb 5-1: SerialNumber: syz
[  788.222075][ T2300] usb 3-1: USB disconnect, device number 105
[  788.313914][T14319] cdc_mbim 5-1:1.0: skipping garbage
[  788.365714][T14319] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found
[  788.441280][T14319] cdc_mbim 5-1:1.0: bind() failure
[  788.924521][T15815] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  788.957672][ T6415] cdc_mbim 7-1:1.0: setting tx_max = 16384
[  788.986565][ T6415] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[  790.439313][ T6415] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, d2:ff:31:55:45:1b
[  790.476341][T15815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  790.879937][ T6415] usb 5-1: USB disconnect, device number 101
[  791.095089][T14319] usb 7-1: USB disconnect, device number 9
[  791.118468][T14319] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[  792.981920][T15860] loop2: detected capacity change from 0 to 2048
[  793.075725][T15860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  793.581820][T15851] loop6: detected capacity change from 0 to 32768
[  793.992434][T15851] XFS (loop6): Mounting V5 Filesystem
[  794.321107][T15851] XFS (loop6): Ending clean mount
[  794.358158][T15851] XFS (loop6): Quotacheck needed: Please wait.
[  794.805285][T15851] XFS (loop6): Quotacheck: Done.
[  794.917678][ T4227] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  794.958622][T13607] XFS (loop6): Unmounting Filesystem
[  795.121022][T15895] binder: 15894:15895 ioctl c0306201 0 returned -14
[  795.448566][ T4227] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  795.465382][ T4227] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  796.119401][ T4227] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  796.129169][ T4227] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  796.376733][ T4227] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  796.425776][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.443449][ T4227] usb 6-1: Product: syz
[  796.452825][ T4227] usb 6-1: Manufacturer: syz
[  796.462813][ T4227] usb 6-1: SerialNumber: syz
[  796.728298][ T4227] cdc_mbim 6-1:1.0: skipping garbage
[  796.956200][T15888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  798.511560][ T4227] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS
[  798.518011][T13856] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  798.543007][ T4227] cdc_mbim 6-1:1.0: bind() failure
[  798.561346][T15888] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  798.587787][ T4227] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  798.596897][ T4227] cdc_ncm 6-1:1.1: bind() failure
[  798.959461][T13856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  799.044702][T13856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  799.337737][T13856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  799.416558][T13856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.482262][T13856] usb 4-1: Product: syz
[  799.486506][T13856] usb 4-1: Manufacturer: syz
[  799.501777][T13856] usb 4-1: SerialNumber: syz
[  799.679408][T13856] usb 4-1: can't set config #1, error -71
[  799.699582][T13856] usb 4-1: USB disconnect, device number 95
[  801.094627][T14319] usb 6-1: USB disconnect, device number 107
[  803.108560][T13856] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  803.528877][T13856] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  803.611437][T13856] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  803.837902][T14319] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  805.197953][T13856] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  805.312865][T14319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.325465][T14319] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  805.336048][T14319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  805.346421][T14319] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  805.372326][T13856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.537847][T14319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  805.612885][T14319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.706691][T14319] usb 4-1: Product: syz
[  805.756888][T14319] usb 4-1: Manufacturer: syz
[  805.815217][T14319] usb 4-1: SerialNumber: syz
[  806.090692][T14319] usb 4-1: can't set config #1, error -71
[  806.110146][T14319] usb 4-1: USB disconnect, device number 96
[  806.484504][T13856] usb 6-1: Product: syz
[  806.488776][T13856] usb 6-1: Manufacturer: syz
[  806.493391][T13856] usb 6-1: SerialNumber: syz
[  806.518564][T13856] usb 6-1: can't set config #1, error -71
[  806.528728][T13856] usb 6-1: USB disconnect, device number 108
[  808.590809][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  808.597278][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  809.449924][ T2300] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  809.527681][T14319] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  809.897967][T14319] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.948892][ T2300] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  809.972330][T14319] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  809.984078][ T2300] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  809.995552][T14319] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  810.035293][T14319] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  810.142316][T13856] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  810.269466][ T2300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  810.279198][ T2300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.287182][ T2300] usb 3-1: Product: syz
[  810.291700][ T2300] usb 3-1: Manufacturer: syz
[  810.296306][ T2300] usb 3-1: SerialNumber: syz
[  810.307667][T14319] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  810.316740][T14319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.325186][T14319] usb 7-1: Product: syz
[  810.329429][T14319] usb 7-1: Manufacturer: syz
[  810.334101][T14319] usb 7-1: SerialNumber: syz
[  810.340375][ T2300] cdc_mbim 3-1:1.0: skipping garbage
[  810.389566][T14319] cdc_mbim 7-1:1.0: skipping garbage
[  810.541310][T16045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  810.548672][T13856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.560135][T13856] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  810.591424][T16052] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  810.767801][T13856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  810.776927][T13856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.785571][T13856] usb 5-1: Product: syz
[  810.789831][T13856] usb 5-1: Manufacturer: syz
[  810.794485][T13856] usb 5-1: SerialNumber: syz
[  810.838898][T13856] cdc_mbim 5-1:1.0: skipping garbage
[  811.068116][T16058] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  811.087691][T14319] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS
[  811.093869][T14319] cdc_mbim 7-1:1.0: bind() failure
[  811.104756][T16072] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  811.112648][T14319] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  811.119451][T16072] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  811.131153][T14319] cdc_ncm 7-1:1.1: bind() failure
[  811.189733][T16078] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2550'.
[  811.198637][T16045] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  811.217906][ T2300] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  811.237399][ T2300] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  811.253259][ T2300] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, fa:5f:d7:57:c3:e6
[  811.291271][T16081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2551'.
[  811.375669][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2551'.
[  811.392062][T16081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.432563][T16089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  811.454691][T16045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  811.498390][ T2300] usb 3-1: USB disconnect, device number 106
[  811.505439][ T2300] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  811.539591][T16093] cdc_mbim 3-1:1.0: Error submitting int urb - -19
[  811.554178][T13856] cdc_mbim 5-1:1.0: failed GET_NTB_PARAMETERS
[  811.575109][T13856] cdc_mbim 5-1:1.0: bind() failure
[  811.602693][T13856] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  811.620670][T13856] cdc_ncm 5-1:1.1: bind() failure
[  811.770980][T16104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2556'.
[  811.879374][T16114] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  812.780749][T13856] usb 7-1: USB disconnect, device number 10
[  812.921121][T16182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2577'.
[  812.955965][T14319] usb 5-1: USB disconnect, device number 102
[  812.979111][T16186] validate_nla: 10 callbacks suppressed
[  812.979128][T16186] netlink: 'syz.3.2578': attribute type 1 has an invalid length.
[  812.987646][ T6282] IPVS: ip_vs_send_async error -101
[  813.029260][T16186] 8021q: adding VLAN 0 to HW filter on device bond1
[  813.050263][T16186] bond1: (slave veth3): Enslaving as an active interface with a down link
[  813.064806][T16186] bond1: (slave dummy0): making interface the new active one
[  813.074303][T16186] device dummy0 entered promiscuous mode
[  813.080564][T16186] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  813.089739][ T6474] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  813.101456][T16186] netlink: 'syz.3.2578': attribute type 10 has an invalid length.
[  813.110370][T16186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2578'.
[  813.121436][T16186] bond1: (slave dummy0): Releasing active interface
[  815.843181][T16178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  815.995126][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'.
[  816.063590][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.130654][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.140578][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.184100][T16237] netlink: 'syz.2.2593': attribute type 12 has an invalid length.
[  816.190219][T16230] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  816.225876][T16237] netlink: 'syz.2.2593': attribute type 29 has an invalid length.
[  816.277326][T16237] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2593'.
[  816.304304][T16230] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  816.322222][T16237] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2593'.
[  816.380730][T16244] syz.3.2597 uses obsolete (PF_INET,SOCK_PACKET)
[  816.389007][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.413838][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.427786][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.491142][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.525921][T16230] wlan0 speed is unknown, defaulting to 1000
[  816.666412][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2606'.
[  816.780159][T16273] netlink: 'syz.3.2610': attribute type 1 has an invalid length.
[  816.832117][T16275] device syzkaller0 entered promiscuous mode
[  816.845039][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[  816.869419][T16279] bond2: (slave gretap1): making interface the new active one
[  816.879591][T16279] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  817.050098][T16288] siw: device registration error -23
[  817.147739][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'.
[  817.163625][T16293] netlink: 'syz.5.2618': attribute type 12 has an invalid length.
[  817.186031][T16293] netlink: 'syz.5.2618': attribute type 29 has an invalid length.
[  817.204108][T16293] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2618'.
[  817.233203][T16293] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2618'.
[  817.393360][T16310] netlink: 'syz.5.2626': attribute type 1 has an invalid length.
[  817.405380][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2627'.
[  817.460032][T16310] bond1: (slave gretap1): making interface the new active one
[  817.468941][T16310] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  817.579438][T16322] siw: device registration error -23
[  817.686840][T16329] netlink: 'syz.4.2634': attribute type 12 has an invalid length.
[  817.710716][T16329] netlink: 'syz.4.2634': attribute type 29 has an invalid length.
[  817.737355][T16329] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2634'.
[  817.777906][T16329] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2634'.
[  817.958024][T16345] bond1: (slave gretap1): making interface the new active one
[  818.006617][T16345] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  818.612079][T16388] validate_nla: 1 callbacks suppressed
[  818.612095][T16388] netlink: 'syz.2.2658': attribute type 1 has an invalid length.
[  818.657382][T16391] bond1: (slave gretap1): making interface the new active one
[  818.665603][T16391] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  818.944066][T16403] device syzkaller0 entered promiscuous mode
[  819.359659][T16421] 
: renamed from bond0
[  819.387822][T16421] (unnamed net_device) (uninitialized): ARP validating cannot be used with MII monitoring
[  820.260809][T16465] netlink: 'syz.2.2693': attribute type 1 has an invalid length.
[  820.353647][T16465] bond2: (slave veth3): Enslaving as an active interface with a down link
[  820.383785][T16465] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  820.403900][T16475] team0: No ports can be present during mode change
[  820.887828][T16483] device bond1 entered promiscuous mode
[  820.893862][T16483] 8021q: adding VLAN 0 to HW filter on device bond1
[  820.940325][T16483] 8021q: adding VLAN 0 to HW filter on device bond1
[  820.947361][T16483] bond1: (slave ipip0): The slave device specified does not support setting the MAC address
[  820.980351][T16483] bond1: (slave ipip0): Error -95 calling set_mac_address
[  821.445805][ T6474] nci: nci_rsp_packet: unsupported rsp opcode 0xf31
[  821.475615][T16526] __nla_validate_parse: 9 callbacks suppressed
[  821.475632][T16526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2718'.
[  824.339462][T16515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  824.665255][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'.
[  824.941090][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2749'.
[  824.963905][T16600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'.
[  825.061597][T16602] device syzkaller0 entered promiscuous mode
[  825.309091][T16604] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  825.415401][T16611] device syzkaller0 entered promiscuous mode
[  825.625229][T16615] device bridge_slave_0 left promiscuous mode
[  825.631976][T16615] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.644433][T16615] device bridge_slave_1 left promiscuous mode
[  825.652295][T16615] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.661685][T16615] bond0: (slave bond_slave_0): Releasing backup interface
[  825.669954][T16615] bond0: (slave bond_slave_1): Releasing backup interface
[  825.683840][T16615] team0: Port device team_slave_0 removed
[  825.690739][T16615] team0: Port device team_slave_1 removed
[  825.696675][T16615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.704555][T16615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  827.515045][T16575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  827.651615][T16619] ip_tables: iptables: counters copy to user failed while replacing table
[  827.670829][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'.
[  827.691627][T16626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2760'.
[  827.722554][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2760'.
[  827.777206][T16630] device syzkaller0 entered promiscuous mode
[  827.913055][T16632] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  827.950997][T16640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2764'.
[  827.978419][T16628] device syzkaller1 entered promiscuous mode
[  828.111101][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2766'.
[  828.182139][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.191068][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.198572][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2766'.
[  828.199461][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.216670][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.225074][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.233516][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.241918][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.250296][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.258679][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.267023][T16645] tc action pedit unable to extract header offset for header type (0x4)
[  828.275428][T16645] 0: reclassify loop, rule prio 0, protocol 800
[  828.349653][T16654] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2772'.
[  828.409272][T16660] 
: (slave bridge0): Releasing backup interface
[  828.416854][T16660] device bridge_slave_0 left promiscuous mode
[  828.430960][T16660] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.452498][T16660] device bridge_slave_1 left promiscuous mode
[  828.459319][T16660] bridge0: port 2(bridge_slave_1) entered disabled state
[  828.474196][T16660] 
: (slave bond_slave_0): Releasing backup interface
[  828.483356][T16660] 
: (slave bond_slave_1): Releasing backup interface
[  828.511581][T16660] team0: Port device team_slave_0 removed
[  828.519180][T16660] team0: Port device team_slave_1 removed
[  828.529843][T16660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  828.546315][T16660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  828.556709][T16660] team0: Port device geneve0 removed
[  828.566244][T16660] bond1: (slave gretap1): Releasing active interface
[  828.581654][T16654] netlink: 'syz.6.2772': attribute type 1 has an invalid length.
[  828.607462][T16665] team0: Mode changed to "loadbalance"
[  828.621513][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2774'.
[  828.745931][T16677] 0: reclassify loop, rule prio 0, protocol 800
[  828.804490][T16681] device syzkaller0 entered promiscuous mode
[  829.078180][T16696] loop6: detected capacity change from 0 to 1024
[  829.210867][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'.
[  829.249870][T16696] EXT4-fs (loop6): Ignoring removed orlov option
[  829.404060][T16696] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  829.602088][T16696] EXT4-fs (loop6): orphan cleanup on readonly fs
[  829.724818][T16696] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2786: Invalid inode table block 0 in block_group 0
[  829.788919][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  829.795834][T16696] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  829.833513][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  829.841417][T16696] EXT4-fs error (device loop6): ext4_quota_write:6648: inode #3: comm syz.6.2786: mark_inode_dirty error
[  829.863920][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  829.883785][T16696] Quota error (device loop6): write_blk: dquota write failed
[  829.905926][T16696] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  829.919439][T16704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2787'.
[  829.922578][T16696] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2786: Failed to acquire dquot type 0
[  829.978922][T16711] device syzkaller0 entered promiscuous mode
[  829.993710][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.018176][T16696] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2786: Invalid inode table block 0 in block_group 0
[  830.065417][T16720] loop5: detected capacity change from 0 to 512
[  830.077924][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.097294][T16696] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  830.156000][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.163578][T16696] EXT4-fs error (device loop6): ext4_ext_truncate:4487: inode #15: comm syz.6.2786: mark_inode_dirty error
[  830.181540][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.195678][T16720] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.2803: iget: bad i_size value: 38620345925642
[  830.237778][T16696] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2786: Invalid inode table block 0 in block_group 0
[  830.264146][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.270749][T16696] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  830.295707][T16720] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.2803: couldn't read orphan inode 15 (err -117)
[  830.313054][T16729] 0: reclassify loop, rule prio 0, protocol 800
[  830.323985][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.331053][T16720] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  830.343282][T16731] FAULT_INJECTION: forcing a failure.
[  830.343282][T16731] name failslab, interval 1, probability 0, space 0, times 0
[  830.365143][T16696] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  830.369245][T16731] CPU: 0 PID: 16731 Comm: syz.4.2797 Not tainted syzkaller #0
[  830.381167][T16731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  830.383607][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.391317][T16731] Call Trace:
[  830.391331][T16731]  <TASK>
[  830.391341][T16731]  dump_stack_lvl+0x188/0x250
[  830.403761][T16696] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.2786: Invalid inode table block 0 in block_group 0
[  830.404041][T16731]  ? show_regs_print_info+0x20/0x20
[  830.409500][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.421271][T16731]  ? load_image+0x410/0x410
[  830.421303][T16731]  ? __might_sleep+0xf0/0xf0
[  830.421321][T16731]  ? __lock_acquire+0x7b50/0x7b50
[  830.421344][T16731]  should_fail+0x383/0x4b0
[  830.421367][T16731]  should_failslab+0x5/0x20
[  830.421384][T16731]  slab_pre_alloc_hook+0x51/0xc0
[  830.421402][T16731]  kmem_cache_alloc_trace+0x47/0x290
[  830.421417][T16731]  ? get_mountpoint+0x205/0x440
[  830.421439][T16731]  get_mountpoint+0x205/0x440
[  830.421461][T16731]  attach_recursive_mnt+0x17a/0x1610
[  830.421483][T16731]  ? do_raw_spin_unlock+0x11d/0x230
[  830.421503][T16731]  ? _raw_spin_unlock+0x24/0x40
[  830.434320][T16696] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  830.437661][T16731]  ? clone_mnt+0xa43/0xcd0
[  830.437691][T16731]  ? graft_tree+0x1b0/0x1b0
[  830.437711][T16731]  ? __do_loopback+0x2b7/0x330
[  830.437727][T16731]  ? graft_tree+0x151/0x1b0
[  830.437746][T16731]  do_loopback+0x350/0x480
[  830.437765][T16731]  ? path_mount+0xfe0/0xfe0
[  830.437781][T16731]  ? path_mount+0x4e9/0xfe0
[  830.443369][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.447372][T16731]  ? user_path_at_empty+0x13e/0x190
[  830.447400][T16731]  __se_sys_mount+0x2e3/0x3d0
[  830.457436][T16696] EXT4-fs error (device loop6): ext4_truncate:4286: inode #15: comm syz.6.2786: mark_inode_dirty error
[  830.461218][T16731]  ? __x64_sys_mount+0xc0/0xc0
[  830.461246][T16731]  ? lockdep_hardirqs_on+0x94/0x140
[  830.461266][T16731]  ? __x64_sys_mount+0x1c/0xc0
[  830.461285][T16731]  do_syscall_64+0x4c/0xa0
[  830.461302][T16731]  ? clear_bhb_loop+0x30/0x80
[  830.461321][T16731]  ? clear_bhb_loop+0x30/0x80
[  830.461341][T16731]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  830.461391][T16731] RIP: 0033:0x7fa260399159
[  830.461409][T16731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.461425][T16731] RSP: 002b:00007fa25e5f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  830.461447][T16731] RAX: ffffffffffffffda RBX: 00007fa260620fa0 RCX: 00007fa260399159
[  830.461462][T16731] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000
[  830.461475][T16731] RBP: 00007fa260430024 R08: 0000000000000000 R09: 0000000000000000
[  830.461486][T16731] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000
[  830.461496][T16731] R13: 00007fa260621038 R14: 00007fa260620fa0 R15: 00007fff9c3e43d8
[  830.461522][T16731]  </TASK>
[  830.625956][T16720] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2803: bg 0: block 5: invalid block bitmap
[  830.634770][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.663381][T16720] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1112 with error 28
[  830.670128][T16696] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem
[  830.674550][T16696] EXT4-fs (loop6): Remounting filesystem read-only
[  830.724711][T16720] EXT4-fs (loop5): This should not happen!! Data will be lost
[  830.724711][T16720] 
[  830.739940][T16720] EXT4-fs (loop5): Total free blocks count 0
[  830.746081][T16720] EXT4-fs (loop5): Free/Dirty block details
[  830.763665][T16720] EXT4-fs (loop5): free_blocks=0
[  830.787688][T16720] EXT4-fs (loop5): dirty_blocks=1112
[  830.793034][T16720] EXT4-fs (loop5): Block reservation details
[  830.808572][T16720] EXT4-fs (loop5): i_reserved_data_blocks=1112
[  830.818702][T16696] EXT4-fs (loop6): 1 truncate cleaned up
[  830.832022][T16696] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,errors=remount-ro,lazytime,resuid=0x000000000000ee00,noblock_validity,minixdf,orlov,. Quota mode: writeback.
[  830.840782][T16741] FAULT_INJECTION: forcing a failure.
[  830.840782][T16741] name failslab, interval 1, probability 0, space 0, times 0
[  830.884490][T16740] FAULT_INJECTION: forcing a failure.
[  830.884490][T16740] name failslab, interval 1, probability 0, space 0, times 0
[  830.919857][T16741] CPU: 0 PID: 16741 Comm: syz.2.2800 Not tainted syzkaller #0
[  830.927366][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  830.937435][T16741] Call Trace:
[  830.940868][T16741]  <TASK>
[  830.943806][T16741]  dump_stack_lvl+0x188/0x250
[  830.948628][T16741]  ? show_regs_print_info+0x20/0x20
[  830.953854][T16741]  ? load_image+0x410/0x410
[  830.954206][T16696] EXT4-fs (loop6): shut down requested (0)
[  830.958421][T16741]  ? __might_sleep+0xf0/0xf0
[  830.958451][T16741]  ? __lock_acquire+0x7b50/0x7b50
[  830.958474][T16741]  should_fail+0x383/0x4b0
[  830.958507][T16741]  should_failslab+0x5/0x20
[  830.958524][T16741]  slab_pre_alloc_hook+0x51/0xc0
[  830.958542][T16741]  __kmalloc_node+0x6d/0x3a0
[  830.958557][T16741]  ? crypto_create_tfm_node+0x72/0x340
[  830.997853][T16741]  crypto_create_tfm_node+0x72/0x340
[  831.003160][T16741]  crypto_spawn_tfm2+0x58/0x90
[  831.007925][T16741]  hmac_init_tfm+0x7c/0x180
[  831.012451][T16741]  crypto_shash_init_tfm+0x1b5/0x310
[  831.017777][T16741]  crypto_create_tfm_node+0xfa/0x340
[  831.023084][T16741]  crypto_alloc_tfm_node+0x177/0x360
[  831.028407][T16741]  sctp_inet_listen+0x5b0/0xa90
[  831.033270][T16741]  ? sctp_sock_migrate+0xf70/0xf70
[  831.038385][T16741]  ? aa_sk_perm+0x7dc/0x910
[  831.042932][T16741]  ? aa_af_perm+0x340/0x340
[  831.047468][T16741]  ? bpf_lsm_socket_listen+0x5/0x10
[  831.052792][T16741]  __sys_listen+0x19d/0x220
[  831.057311][T16741]  __x64_sys_listen+0x56/0x60
[  831.061990][T16741]  do_syscall_64+0x4c/0xa0
[  831.066406][T16741]  ? clear_bhb_loop+0x30/0x80
[  831.071089][T16741]  ? clear_bhb_loop+0x30/0x80
[  831.075808][T16741]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  831.081719][T16741] RIP: 0033:0x7fae4ccb6159
[  831.086143][T16741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.105748][T16741] RSP: 002b:00007fae4af0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[  831.114264][T16741] RAX: ffffffffffffffda RBX: 00007fae4cf3dfa0 RCX: 00007fae4ccb6159
[  831.122240][T16741] RDX: 0000000000000000 RSI: 00000000fffffffd RDI: 0000000000000005
[  831.130220][T16741] RBP: 00007fae4cd4d024 R08: 0000000000000000 R09: 0000000000000000
[  831.138198][T16741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  831.146169][T16741] R13: 00007fae4cf3e038 R14: 00007fae4cf3dfa0 R15: 00007ffe06eafa28
[  831.154156][T16741]  </TASK>
[  831.157175][T16740] CPU: 1 PID: 16740 Comm: syz.3.2801 Not tainted syzkaller #0
[  831.157271][    C0] vkms_vblank_simulate: vblank timer overrun
[  831.164644][T16740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  831.164656][T16740] Call Trace:
[  831.182826][T16741] sctp: failed to load transform for md5: -12
[  831.183936][T16740]  <TASK>
[  831.183946][T16740]  dump_stack_lvl+0x188/0x250
[  831.183982][T16740]  ? show_regs_print_info+0x20/0x20
[  831.202827][T16740]  ? load_image+0x410/0x410
[  831.207373][T16740]  ? __lock_acquire+0x7b50/0x7b50
[  831.212606][T16740]  should_fail+0x383/0x4b0
[  831.217054][T16740]  should_failslab+0x5/0x20
[  831.221581][T16740]  slab_pre_alloc_hook+0x51/0xc0
[  831.226539][T16740]  kmem_cache_alloc_trace+0x47/0x290
[  831.231829][T16740]  ? fuse_get_tree+0x72/0x4d0
[  831.236510][T16740]  fuse_get_tree+0x72/0x4d0
[  831.241005][T16740]  ? security_capable+0x85/0xb0
[  831.245861][T16740]  vfs_get_tree+0x88/0x270
[  831.250295][T16740]  do_new_mount+0x247/0xa40
[  831.254822][T16740]  __se_sys_mount+0x2e3/0x3d0
[  831.259519][T16740]  ? __x64_sys_mount+0xc0/0xc0
[  831.264309][T16740]  ? lockdep_hardirqs_on+0x94/0x140
[  831.269525][T16740]  ? __x64_sys_mount+0x1c/0xc0
[  831.274388][T16740]  do_syscall_64+0x4c/0xa0
[  831.278821][T16740]  ? clear_bhb_loop+0x30/0x80
[  831.283520][T16740]  ? clear_bhb_loop+0x30/0x80
[  831.288218][T16740]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  831.294128][T16740] RIP: 0033:0x7f156ef2a3ca
[  831.298565][T16740] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.318186][T16740] RSP: 002b:00007f156d180e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  831.326667][T16740] RAX: ffffffffffffffda RBX: 00007f156d180ee0 RCX: 00007f156ef2a3ca
[  831.334660][T16740] RDX: 0000200000002040 RSI: 0000200000000000 RDI: 0000000000000000
[  831.342658][T16740] RBP: 0000200000002040 R08: 00007f156d180ee0 R09: 0000000000000000
[  831.350643][T16740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  831.358634][T16740] R13: 00007f156d180ea0 R14: 0000000000000000 R15: 0000200000000280
[  831.366637][T16740]  </TASK>
[  831.454372][T16748] ip_tables: iptables: counters copy to user failed while replacing table
[  831.491425][T16748] device syzkaller1 entered promiscuous mode
[  832.159966][T16751] device syzkaller0 entered promiscuous mode
[  832.679822][T16768] device syzkaller0 entered promiscuous mode
[  832.702388][T16768] __nla_validate_parse: 3 callbacks suppressed
[  832.702406][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2812'.
[  832.729331][T16772] FAULT_INJECTION: forcing a failure.
[  832.729331][T16772] name failslab, interval 1, probability 0, space 0, times 0
[  832.743102][T16772] CPU: 1 PID: 16772 Comm: syz.3.2814 Not tainted syzkaller #0
[  832.750593][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  832.760759][T16772] Call Trace:
[  832.764049][T16772]  <TASK>
[  832.766987][T16772]  dump_stack_lvl+0x188/0x250
[  832.771696][T16772]  ? show_regs_print_info+0x20/0x20
[  832.776925][T16772]  ? load_image+0x410/0x410
[  832.781460][T16772]  ? __might_sleep+0xf0/0xf0
[  832.786076][T16772]  ? __lock_acquire+0x7b50/0x7b50
[  832.791215][T16772]  should_fail+0x383/0x4b0
[  832.795661][T16772]  should_failslab+0x5/0x20
[  832.800178][T16772]  slab_pre_alloc_hook+0x51/0xc0
[  832.805139][T16772]  kmem_cache_alloc_trace+0x47/0x290
[  832.810438][T16772]  ? get_mountpoint+0x205/0x440
[  832.815332][T16772]  get_mountpoint+0x205/0x440
[  832.820006][T16772]  attach_recursive_mnt+0x17a/0x1610
[  832.825317][T16772]  ? do_raw_spin_unlock+0x11d/0x230
[  832.830521][T16772]  ? _raw_spin_unlock+0x24/0x40
[  832.835369][T16772]  ? clone_mnt+0xa43/0xcd0
[  832.839810][T16772]  ? graft_tree+0x1b0/0x1b0
[  832.844323][T16772]  ? __do_loopback+0x2b7/0x330
[  832.849085][T16772]  ? graft_tree+0x151/0x1b0
[  832.853604][T16772]  do_loopback+0x350/0x480
[  832.858039][T16772]  ? path_mount+0xfe0/0xfe0
[  832.862562][T16772]  ? path_mount+0x4e9/0xfe0
[  832.867177][T16772]  ? user_path_at_empty+0x13e/0x190
[  832.872400][T16772]  __se_sys_mount+0x2e3/0x3d0
[  832.877122][T16772]  ? __x64_sys_mount+0xc0/0xc0
[  832.881915][T16772]  ? lockdep_hardirqs_on+0x94/0x140
[  832.887144][T16772]  ? __x64_sys_mount+0x1c/0xc0
[  832.891938][T16772]  do_syscall_64+0x4c/0xa0
[  832.896383][T16772]  ? clear_bhb_loop+0x30/0x80
[  832.901134][T16772]  ? clear_bhb_loop+0x30/0x80
[  832.905898][T16772]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  832.911814][T16772] RIP: 0033:0x7f156ef29159
[  832.916248][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.935869][T16772] RSP: 002b:00007f156d181028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  832.944309][T16772] RAX: ffffffffffffffda RBX: 00007f156f1b0fa0 RCX: 00007f156ef29159
[  832.952307][T16772] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000
[  832.960300][T16772] RBP: 00007f156efc0024 R08: 0000000000000000 R09: 0000000000000000
[  832.968294][T16772] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000
[  832.976284][T16772] R13: 00007f156f1b1038 R14: 00007f156f1b0fa0 R15: 00007ffdee3d3738
[  832.984297][T16772]  </TASK>
[  833.022729][T16779] FAULT_INJECTION: forcing a failure.
[  833.022729][T16779] name failslab, interval 1, probability 0, space 0, times 0
[  833.035866][T16779] CPU: 1 PID: 16779 Comm: syz.4.2816 Not tainted syzkaller #0
[  833.043356][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  833.053431][T16779] Call Trace:
[  833.056730][T16779]  <TASK>
[  833.059676][T16779]  dump_stack_lvl+0x188/0x250
[  833.064374][T16779]  ? show_regs_print_info+0x20/0x20
[  833.069604][T16779]  ? load_image+0x410/0x410
[  833.074131][T16779]  ? __might_sleep+0xf0/0xf0
[  833.078735][T16779]  ? __lock_acquire+0x7b50/0x7b50
[  833.083799][T16779]  should_fail+0x383/0x4b0
[  833.088245][T16779]  should_failslab+0x5/0x20
[  833.092764][T16779]  slab_pre_alloc_hook+0x51/0xc0
[  833.097727][T16779]  ? security_file_alloc+0x30/0x110
[  833.102958][T16779]  kmem_cache_alloc+0x3d/0x280
[  833.107734][T16779]  ? rcu_is_watching+0x11/0xa0
[  833.112514][T16779]  security_file_alloc+0x30/0x110
[  833.117551][T16779]  __alloc_file+0xc2/0x240
[  833.121982][T16779]  alloc_empty_file+0x90/0x180
[  833.126766][T16779]  alloc_file+0x5c/0x510
[  833.131034][T16779]  ? do_raw_spin_unlock+0x11d/0x230
[  833.136258][T16779]  alloc_file_pseudo+0x180/0x200
[  833.141250][T16779]  ? alloc_empty_file_noaccount+0x80/0x80
[  833.146995][T16779]  ? alloc_fd+0x59e/0x650
[  833.151343][T16779]  sock_alloc_file+0xb3/0x240
[  833.156037][T16779]  __sys_socket+0x11d/0x170
[  833.160567][T16779]  __x64_sys_socket+0x76/0x80
[  833.165264][T16779]  do_syscall_64+0x4c/0xa0
[  833.169690][T16779]  ? clear_bhb_loop+0x30/0x80
[  833.174378][T16779]  ? clear_bhb_loop+0x30/0x80
[  833.179067][T16779]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  833.184980][T16779] RIP: 0033:0x7fa260399159
[  833.189407][T16779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.209030][T16779] RSP: 002b:00007fa25e5f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  833.217461][T16779] RAX: ffffffffffffffda RBX: 00007fa260620fa0 RCX: 00007fa260399159
[  833.225449][T16779] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[  833.233434][T16779] RBP: 00007fa260430024 R08: 0000000000000000 R09: 0000000000000000
[  833.241421][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  833.249414][T16779] R13: 00007fa260621038 R14: 00007fa260620fa0 R15: 00007fff9c3e43d8
[  833.257424][T16779]  </TASK>
[  833.367092][T16786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2819'.
[  833.385267][T16785] FAULT_INJECTION: forcing a failure.
[  833.385267][T16785] name failslab, interval 1, probability 0, space 0, times 0
[  833.421740][T16785] CPU: 0 PID: 16785 Comm: syz.5.2818 Not tainted syzkaller #0
[  833.429244][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  833.439320][T16785] Call Trace:
[  833.442608][T16785]  <TASK>
[  833.445548][T16785]  dump_stack_lvl+0x188/0x250
[  833.450267][T16785]  ? show_regs_print_info+0x20/0x20
[  833.455491][T16785]  ? load_image+0x410/0x410
[  833.460017][T16785]  ? __lock_acquire+0x7b50/0x7b50
[  833.465080][T16785]  should_fail+0x383/0x4b0
[  833.469527][T16785]  should_failslab+0x5/0x20
[  833.474056][T16785]  slab_pre_alloc_hook+0x51/0xc0
[  833.479021][T16785]  kmem_cache_alloc_trace+0x47/0x290
[  833.484327][T16785]  ? fuse_get_tree+0x72/0x4d0
[  833.489037][T16785]  fuse_get_tree+0x72/0x4d0
[  833.493558][T16785]  ? security_capable+0x85/0xb0
[  833.498431][T16785]  vfs_get_tree+0x88/0x270
[  833.502865][T16785]  do_new_mount+0x247/0xa40
[  833.507386][T16785]  __se_sys_mount+0x2e3/0x3d0
[  833.512100][T16785]  ? __x64_sys_mount+0xc0/0xc0
[  833.516892][T16785]  ? lockdep_hardirqs_on+0x94/0x140
[  833.522119][T16785]  ? __x64_sys_mount+0x1c/0xc0
[  833.526906][T16785]  do_syscall_64+0x4c/0xa0
[  833.531375][T16785]  ? clear_bhb_loop+0x30/0x80
[  833.536065][T16785]  ? clear_bhb_loop+0x30/0x80
[  833.540769][T16785]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  833.546691][T16785] RIP: 0033:0x7f63f9ccb3ca
[  833.551123][T16785] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.570743][T16785] RSP: 002b:00007f63f7f21e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  833.579201][T16785] RAX: ffffffffffffffda RBX: 00007f63f7f21ee0 RCX: 00007f63f9ccb3ca
[  833.587192][T16785] RDX: 0000200000002040 RSI: 0000200000000000 RDI: 0000000000000000
[  833.595178][T16785] RBP: 0000200000002040 R08: 00007f63f7f21ee0 R09: 0000000000000000
[  833.603164][T16785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  833.611155][T16785] R13: 00007f63f7f21ea0 R14: 0000000000000000 R15: 0000200000000280
[  833.619181][T16785]  </TASK>
[  833.622280][    C0] vkms_vblank_simulate: vblank timer overrun
[  834.720485][T16823] device syzkaller0 entered promiscuous mode
[  834.745409][T16824] FAULT_INJECTION: forcing a failure.
[  834.745409][T16824] name failslab, interval 1, probability 0, space 0, times 0
[  834.749753][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'.
[  834.764207][T16824] CPU: 0 PID: 16824 Comm: syz.2.2831 Not tainted syzkaller #0
[  834.769285][T16827] loop3: detected capacity change from 0 to 256
[  834.774703][T16824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  834.774719][T16824] Call Trace:
[  834.788692][T16826] FAULT_INJECTION: forcing a failure.
[  834.788692][T16826] name failslab, interval 1, probability 0, space 0, times 0
[  834.791238][T16824]  <TASK>
[  834.810026][T16824]  dump_stack_lvl+0x188/0x250
[  834.814820][T16824]  ? show_regs_print_info+0x20/0x20
[  834.820035][T16824]  ? load_image+0x410/0x410
[  834.824556][T16824]  ? __lock_acquire+0x7b50/0x7b50
[  834.829597][T16824]  ? ida_alloc_range+0x821/0x860
[  834.834563][T16824]  should_fail+0x383/0x4b0
[  834.838999][T16824]  should_failslab+0x5/0x20
[  834.843554][T16824]  slab_pre_alloc_hook+0x51/0xc0
[  834.848495][T16824]  ? alloc_vfsmnt+0x9d/0x450
[  834.853095][T16824]  __kmalloc_track_caller+0x69/0x330
[  834.858524][T16824]  ? alloc_vfsmnt+0x9d/0x450
[  834.863130][T16824]  kstrdup_const+0x51/0x90
[  834.867569][T16824]  alloc_vfsmnt+0x9d/0x450
[  834.871990][T16824]  clone_mnt+0x6b/0xcd0
[  834.876148][T16824]  ? is_subdir+0x1fb/0x210
[  834.880595][T16824]  __do_loopback+0x29d/0x330
[  834.885191][T16824]  do_loopback+0x320/0x480
[  834.889611][T16824]  ? path_mount+0xfe0/0xfe0
[  834.894372][T16824]  ? path_mount+0x4e9/0xfe0
[  834.898873][T16824]  ? user_path_at_empty+0x13e/0x190
[  834.904070][T16824]  __se_sys_mount+0x2e3/0x3d0
[  834.908750][T16824]  ? __x64_sys_mount+0xc0/0xc0
[  834.913518][T16824]  ? lockdep_hardirqs_on+0x94/0x140
[  834.918713][T16824]  ? __x64_sys_mount+0x1c/0xc0
[  834.923655][T16824]  do_syscall_64+0x4c/0xa0
[  834.928067][T16824]  ? clear_bhb_loop+0x30/0x80
[  834.932738][T16824]  ? clear_bhb_loop+0x30/0x80
[  834.937411][T16824]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  834.943310][T16824] RIP: 0033:0x7fae4ccb6159
[  834.947727][T16824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.967334][T16824] RSP: 002b:00007fae4af0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  834.975758][T16824] RAX: ffffffffffffffda RBX: 00007fae4cf3dfa0 RCX: 00007fae4ccb6159
[  834.983730][T16824] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000
[  834.991704][T16824] RBP: 00007fae4cd4d024 R08: 0000000000000000 R09: 0000000000000000
[  834.999769][T16824] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000
[  835.007736][T16824] R13: 00007fae4cf3e038 R14: 00007fae4cf3dfa0 R15: 00007ffe06eafa28
[  835.015722][T16824]  </TASK>
[  835.018739][T16826] CPU: 1 PID: 16826 Comm: syz.5.2833 Not tainted syzkaller #0
[  835.018813][    C0] vkms_vblank_simulate: vblank timer overrun
[  835.026219][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  835.042233][T16826] Call Trace:
[  835.045523][T16826]  <TASK>
[  835.048472][T16826]  dump_stack_lvl+0x188/0x250
[  835.053186][T16826]  ? show_regs_print_info+0x20/0x20
[  835.058416][T16826]  ? load_image+0x410/0x410
[  835.062949][T16826]  ? __might_sleep+0xf0/0xf0
[  835.067558][T16826]  ? __lock_acquire+0x7b50/0x7b50
[  835.072624][T16826]  should_fail+0x383/0x4b0
[  835.077069][T16826]  should_failslab+0x5/0x20
[  835.081608][T16826]  slab_pre_alloc_hook+0x51/0xc0
[  835.086852][T16826]  ? security_file_alloc+0x30/0x110
[  835.092090][T16826]  kmem_cache_alloc+0x3d/0x280
[  835.096873][T16826]  ? rcu_is_watching+0x11/0xa0
[  835.101658][T16826]  security_file_alloc+0x30/0x110
[  835.106804][T16826]  __alloc_file+0xc2/0x240
[  835.107721][T16831] loop6: detected capacity change from 0 to 2048
[  835.111237][T16826]  alloc_empty_file+0x90/0x180
[  835.111264][T16826]  alloc_file+0x5c/0x510
[  835.111280][T16826]  ? do_raw_spin_unlock+0x11d/0x230
[  835.131787][T16826]  alloc_file_pseudo+0x180/0x200
[  835.136724][T16826]  ? alloc_empty_file_noaccount+0x80/0x80
[  835.142439][T16826]  ? alloc_fd+0x59e/0x650
[  835.146758][T16826]  sock_alloc_file+0xb3/0x240
[  835.151438][T16826]  __sys_socket+0x11d/0x170
[  835.155945][T16826]  __x64_sys_socket+0x76/0x80
[  835.160622][T16826]  do_syscall_64+0x4c/0xa0
[  835.165031][T16826]  ? clear_bhb_loop+0x30/0x80
[  835.169708][T16826]  ? clear_bhb_loop+0x30/0x80
[  835.174604][T16826]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  835.180492][T16826] RIP: 0033:0x7f63f9cca159
[  835.184897][T16826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.204512][T16826] RSP: 002b:00007f63f7f22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  835.212921][T16826] RAX: ffffffffffffffda RBX: 00007f63f9f51fa0 RCX: 00007f63f9cca159
[  835.220903][T16826] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a
[  835.228902][T16826] RBP: 00007f63f9d61024 R08: 0000000000000000 R09: 0000000000000000
[  835.236893][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.244857][T16826] R13: 00007f63f9f52038 R14: 00007f63f9f51fa0 R15: 00007fffdb461328
[  835.252828][T16826]  </TASK>
[  835.299130][T16831]  loop6: p1 < > p4
[  835.299130][T16831]  p4: <netbsd: >
[  835.301254][T16827] FAT-fs (loop3): Directory bread(block 1285) failed
[  835.356056][T16831] loop6: p4 size 722688 extends beyond EOD, truncated
[  835.358252][T16827] FAT-fs (loop3): Directory bread(block 1286) failed
[  835.416227][T16827] FAT-fs (loop3): Directory bread(block 1287) failed
[  835.459552][T16827] FAT-fs (loop3): Directory bread(block 1288) failed
[  835.561258][T16839] wlan0 speed is unknown, defaulting to 1000
[  835.602446][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  835.620457][ T7827] udevd[7827]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  835.737966][ T7827] udevd[7827]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  835.740157][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  835.788395][T16851] device syzkaller0 entered promiscuous mode
[  835.834917][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'.
[  836.448423][T16867] FAULT_INJECTION: forcing a failure.
[  836.448423][T16867] name failslab, interval 1, probability 0, space 0, times 0
[  836.510359][T16871] loop3: detected capacity change from 0 to 4096
[  836.519443][T16867] CPU: 0 PID: 16867 Comm: syz.6.2846 Not tainted syzkaller #0
[  836.526946][T16867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  836.537015][T16867] Call Trace:
[  836.540305][T16867]  <TASK>
[  836.543244][T16867]  dump_stack_lvl+0x188/0x250
[  836.547943][T16867]  ? show_regs_print_info+0x20/0x20
[  836.553159][T16867]  ? load_image+0x410/0x410
[  836.557686][T16867]  ? __lock_acquire+0x7b50/0x7b50
[  836.562726][T16867]  ? ida_alloc_range+0x821/0x860
[  836.564468][T16872] loop2: detected capacity change from 0 to 256
[  836.567687][T16867]  should_fail+0x383/0x4b0
[  836.567722][T16867]  should_failslab+0x5/0x20
[  836.567739][T16867]  slab_pre_alloc_hook+0x51/0xc0
[  836.567756][T16867]  ? alloc_vfsmnt+0x9d/0x450
[  836.567775][T16867]  __kmalloc_track_caller+0x69/0x330
[  836.567792][T16867]  ? alloc_vfsmnt+0x9d/0x450
[  836.567816][T16867]  kstrdup_const+0x51/0x90
[  836.567834][T16867]  alloc_vfsmnt+0x9d/0x450
[  836.567855][T16867]  clone_mnt+0x6b/0xcd0
[  836.567875][T16867]  ? is_subdir+0x1fb/0x210
[  836.619705][T16867]  __do_loopback+0x29d/0x330
[  836.624321][T16867]  do_loopback+0x320/0x480
[  836.628755][T16867]  ? path_mount+0xfe0/0xfe0
[  836.633273][T16867]  ? path_mount+0x4e9/0xfe0
[  836.637799][T16867]  ? user_path_at_empty+0x13e/0x190
[  836.643015][T16867]  __se_sys_mount+0x2e3/0x3d0
[  836.647713][T16867]  ? __x64_sys_mount+0xc0/0xc0
[  836.652500][T16867]  ? lockdep_hardirqs_on+0x94/0x140
[  836.657722][T16867]  ? __x64_sys_mount+0x1c/0xc0
[  836.662511][T16867]  do_syscall_64+0x4c/0xa0
[  836.666939][T16867]  ? clear_bhb_loop+0x30/0x80
[  836.671631][T16867]  ? clear_bhb_loop+0x30/0x80
[  836.676318][T16867]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  836.682222][T16867] RIP: 0033:0x7f22aef86159
[  836.686646][T16867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  836.706267][T16867] RSP: 002b:00007f22ad1de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  836.714704][T16867] RAX: ffffffffffffffda RBX: 00007f22af20dfa0 RCX: 00007f22aef86159
[  836.722799][T16867] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000
[  836.730790][T16867] RBP: 00007f22af01d024 R08: 0000000000000000 R09: 0000000000000000
[  836.738812][T16867] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000
[  836.746813][T16867] R13: 00007f22af20e038 R14: 00007f22af20dfa0 R15: 00007ffddd8e8208
[  836.754804][T16867]  </TASK>
[  836.757915][    C0] vkms_vblank_simulate: vblank timer overrun
[  836.775007][T16875] loop5: detected capacity change from 0 to 2048
[  836.815622][T16872] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  836.832199][ T4177]  loop5: p1 < > p4
[  836.832199][ T4177]  p4: <netbsd: >
[  836.859202][ T4177] loop5: p4 size 722688 extends beyond EOD, truncated
[  836.873601][T16872] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2851'.
[  836.895968][T16875]  loop5: p1 < > p4
[  836.895968][T16875]  p4: <netbsd: >
[  836.918215][T16875] loop5: p4 size 722688 extends beyond EOD, truncated
[  837.056368][T16871] EXT4-fs (loop3): Test dummy encryption mode enabled
[  837.087729][T16871] EXT4-fs (loop3): Ignoring removed orlov option
[  837.139384][T16871] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  837.314000][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  837.341365][ T7827] udevd[7827]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  837.415568][T16890] device syzkaller0 entered promiscuous mode
[  837.517971][ T7827] udevd[7827]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  837.521435][ T7823] udevd[7823]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  837.563647][T16894] tcf_pedit_act: 41 callbacks suppressed
[  837.563663][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.577732][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.586079][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.594473][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.602842][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.611224][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.619691][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.628081][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.636422][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.644816][T16894] tc action pedit unable to extract header offset for header type (0x4)
[  837.653210][T16894] 0: reclassify loop, rule prio 0, protocol 800
[  837.672739][T16898] loop5: detected capacity change from 0 to 256
[  838.030043][T16910] loop5: detected capacity change from 0 to 128
[  838.290397][T16910] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none.
[  838.410935][T16924] udc-core: couldn't find an available UDC or it's busy
[  838.444490][T16910] ext4 filesystem being mounted at /540/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  839.428139][T16910] capability: warning: `syz.5.2863' uses deprecated v2 capabilities in a way that may be insecure
[  839.914845][T16933] device syzkaller0 entered promiscuous mode
[  842.254813][T16966] IPVS: ip_vs_edit_dest(): server weight less than zero
[  842.375545][T16969] wlan0 speed is unknown, defaulting to 1000
[  842.440512][T16971] device syzkaller0 entered promiscuous mode
[  843.026816][T16996] udc-core: couldn't find an available UDC or it's busy
[  848.006726][T17035] loop4: detected capacity change from 0 to 2048
[  848.051024][T17038] loop3: detected capacity change from 0 to 256
[  848.378790][T17035] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  848.416737][T17035] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  848.461766][T17056] udc-core: couldn't find an available UDC or it's busy
[  849.619474][T17035] device syzkaller0 entered promiscuous mode
[  852.335075][T17104] loop6: detected capacity change from 0 to 256
[  852.472083][T17109] loop5: detected capacity change from 0 to 2048
[  852.669296][T17109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  852.729508][T17109] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.757579][T17114] udc-core: couldn't find an available UDC or it's busy
[  854.082531][T17117] FAULT_INJECTION: forcing a failure.
[  854.082531][T17117] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  854.089259][T17109] device syzkaller0 entered promiscuous mode
[  854.128101][T17117] CPU: 1 PID: 17117 Comm: syz.6.2922 Not tainted syzkaller #0
[  854.135626][T17117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  854.145703][T17117] Call Trace:
[  854.148998][T17117]  <TASK>
[  854.151926][T17117]  dump_stack_lvl+0x188/0x250
[  854.156622][T17117]  ? show_regs_print_info+0x20/0x20
[  854.161838][T17117]  ? load_image+0x410/0x410
[  854.166350][T17117]  ? __lock_acquire+0x7b50/0x7b50
[  854.171384][T17117]  should_fail+0x383/0x4b0
[  854.175810][T17117]  _copy_from_user+0x2e/0x170
[  854.180496][T17117]  xfrm_user_policy+0x1ea/0x700
[  854.185352][T17117]  ? xfrm_unregister_translator+0x70/0x70
[  854.191074][T17117]  ? apparmor_capable+0x12c/0x190
[  854.196124][T17117]  ? bpf_lsm_capable+0x5/0x10
[  854.200799][T17117]  ? security_capable+0x85/0xb0
[  854.205667][T17117]  ipv6_setsockopt+0x11a5/0x3cc0
[  854.210625][T17117]  ? futex_wait_queue_me+0x16e/0x440
[  854.215923][T17117]  ? ipv6_update_options+0x400/0x400
[  854.221214][T17117]  ? __lock_acquire+0x7b50/0x7b50
[  854.226254][T17117]  ? mark_lock+0x94/0x320
[  854.230590][T17117]  ? __lock_acquire+0x1305/0x7b50
[  854.235638][T17117]  ? mark_lock+0x94/0x320
[  854.239983][T17117]  ? verify_lock_unused+0x140/0x140
[  854.245193][T17117]  ? aa_label_sk_perm+0x3e6/0x540
[  854.250231][T17117]  ? aa_sk_perm+0x910/0x910
[  854.254754][T17117]  ? __might_sleep+0xf0/0xf0
[  854.259351][T17117]  ? rcu_lock_release+0x9/0x20
[  854.264303][T17117]  ? __lock_acquire+0x7b50/0x7b50
[  854.269357][T17117]  ? aa_sk_perm+0x7dc/0x910
[  854.273882][T17117]  ? aa_af_perm+0x340/0x340
[  854.278392][T17117]  ? __fget_files+0x402/0x470
[  854.283080][T17117]  ? aa_sock_opt_perm+0x74/0x100
[  854.288025][T17117]  ? udpv6_setsockopt+0x7a/0xa0
[  854.292880][T17117]  ? sock_common_recvmsg+0x1c0/0x1c0
[  854.298173][T17117]  __sys_setsockopt+0x2bf/0x3d0
[  854.303035][T17117]  __x64_sys_setsockopt+0xb1/0xc0
[  854.308067][T17117]  do_syscall_64+0x4c/0xa0
[  854.312486][T17117]  ? clear_bhb_loop+0x30/0x80
[  854.317168][T17117]  ? clear_bhb_loop+0x30/0x80
[  854.321848][T17117]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  854.327746][T17117] RIP: 0033:0x7f22aef86159
[  854.332172][T17117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.351800][T17117] RSP: 002b:00007f22ad1de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  854.360261][T17117] RAX: ffffffffffffffda RBX: 00007f22af20dfa0 RCX: 00007f22aef86159
[  854.368241][T17117] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000003
[  854.376217][T17117] RBP: 00007f22af01d024 R08: 00000000000000e8 R09: 0000000000000000
[  854.384196][T17117] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000
[  854.392179][T17117] R13: 00007f22af20e038 R14: 00007f22af20dfa0 R15: 00007ffddd8e8208
[  854.400183][T17117]  </TASK>
[  854.641699][T17118] device vlan1 entered promiscuous mode
[  854.731010][T17118] device bridge0 entered promiscuous mode
[  857.927203][T17152] wlan0 speed is unknown, defaulting to 1000
[  858.080468][T17164] team0: No ports can be present during mode change
[  858.536629][T17152] chnl_net:caif_netlink_parms(): no params data found
[  858.541463][T17186] gadgetfs: bound to dummy_udc driver
[  859.558044][T17187] ==================================================================
[  859.566550][T17187] BUG: KASAN: use-after-free in __mutex_lock_common+0x118/0x2400
[  859.574298][T17187] Read of size 8 at addr ffff888061e5a060 by task syz.6.2948/17187
[  859.582195][T17187] 
[  859.584519][T17187] CPU: 1 PID: 17187 Comm: syz.6.2948 Not tainted syzkaller #0
[  859.591978][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  859.602136][T17187] Call Trace:
[  859.605418][T17187]  <TASK>
[  859.608351][T17187]  dump_stack_lvl+0x188/0x250
[  859.613051][T17187]  ? show_regs_print_info+0x20/0x20
[  859.618262][T17187]  ? load_image+0x410/0x410
[  859.622771][T17187]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  859.628241][T17187]  print_address_description+0x60/0x2d0
[  859.633795][T17187]  ? __mutex_lock_common+0x118/0x2400
[  859.639173][T17187]  kasan_report+0xdf/0x130
[  859.643598][T17187]  ? __mutex_lock_common+0x118/0x2400
[  859.648981][T17187]  __mutex_lock_common+0x118/0x2400
[  859.654190][T17187]  ? end_current_label_crit_section+0x170/0x170
[  859.660435][T17187]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  859.666443][T17187]  ? ep_open+0x4a/0x260
[  859.670612][T17187]  ? mutex_lock_io_nested+0x60/0x60
[  859.675832][T17187]  ? apparmor_file_open+0x3c7/0x790
[  859.681044][T17187]  ? apparmor_inode_getattr+0x20/0x20
[  859.686431][T17187]  mutex_lock_interruptible_nested+0x17/0x20
[  859.692417][T17187]  ep_open+0x4a/0x260
[  859.696412][T17187]  ? do_dentry_open+0x7ec/0xf90
[  859.701279][T17187]  ? ep_ioctl+0x1b0/0x1b0
[  859.705627][T17187]  do_dentry_open+0x7f7/0xf90
[  859.710325][T17187]  ? vfs_open+0x2b/0x80
[  859.714503][T17187]  path_openat+0x2718/0x2fb0
[  859.719104][T17187]  ? finish_lock_switch+0x12d/0x290
[  859.724326][T17187]  ? __schedule+0x11cb/0x4350
[  859.729021][T17187]  ? do_filp_open+0x400/0x400
[  859.733713][T17187]  ? __cond_resched+0xd0/0xd0
[  859.738404][T17187]  do_filp_open+0x1df/0x400
[  859.742921][T17187]  ? vfs_tmpfile+0x300/0x300
[  859.747510][T17187]  ? preempt_schedule_common+0xa5/0xd0
[  859.752994][T17187]  ? _raw_spin_unlock+0x36/0x40
[  859.757849][T17187]  ? alloc_fd+0x59e/0x650
[  859.762205][T17187]  do_sys_openat2+0x14b/0x500
[  859.766901][T17187]  ? do_sys_open+0xe0/0xe0
[  859.771331][T17187]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  859.777028][T17187]  __x64_sys_openat+0x135/0x160
[  859.781887][T17187]  do_syscall_64+0x4c/0xa0
[  859.786307][T17187]  ? clear_bhb_loop+0x30/0x80
[  859.790994][T17187]  ? clear_bhb_loop+0x30/0x80
[  859.795674][T17187]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  859.801605][T17187] RIP: 0033:0x7f22aef86159
[  859.806031][T17187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.825646][T17187] RSP: 002b:00007f22ad1bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  859.834103][T17187] RAX: ffffffffffffffda RBX: 00007f22af20e090 RCX: 00007f22aef86159
[  859.842081][T17187] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  859.850145][T17187] RBP: 00007f22af01d024 R08: 0000000000000000 R09: 0000000000000000
[  859.858125][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  859.866108][T17187] R13: 00007f22af20e128 R14: 00007f22af20e090 R15: 00007ffddd8e8208
[  859.874105][T17187]  </TASK>
[  859.877122][T17187] 
[  859.879438][T17187] Allocated by task 17186:
[  859.883843][T17187]  __kasan_kmalloc+0xaf/0xe0
[  859.888442][T17187]  gadgetfs_bind+0x25b/0x820
[  859.893029][T17187]  udc_bind_to_driver+0x203/0x5f0
[  859.898055][T17187]  usb_gadget_probe_driver+0x1fb/0x380
[  859.903511][T17187]  dev_config+0xe3c/0x1250
[  859.907921][T17187]  vfs_write+0x304/0xd70
[  859.912170][T17187]  ksys_write+0x153/0x260
[  859.916503][T17187]  do_syscall_64+0x4c/0xa0
[  859.920937][T17187]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  859.926829][T17187] 
[  859.929148][T17187] Freed by task 17185:
[  859.933215][T17187]  kasan_set_track+0x4b/0x70
[  859.937809][T17187]  kasan_set_free_info+0x1f/0x40
[  859.942748][T17187]  ____kasan_slab_free+0xd5/0x110
[  859.947772][T17187]  slab_free_freelist_hook+0xec/0x170
[  859.953139][T17187]  kfree+0xef/0x2a0
[  859.956949][T17187]  destroy_ep_files+0x280/0x340
[  859.961802][T17187]  gadgetfs_unbind+0x105/0x2a0
[  859.966570][T17187]  usb_gadget_remove_driver+0x15c/0x350
[  859.972111][T17187]  usb_gadget_unregister_driver+0x15d/0x4c0
[  859.978015][T17187]  dev_release+0x82/0x1f0
[  859.982342][T17187]  __fput+0x212/0x8c0
[  859.986323][T17187]  task_work_run+0x125/0x1a0
[  859.990912][T17187]  exit_to_user_mode_loop+0x10f/0x130
[  859.996283][T17187]  exit_to_user_mode_prepare+0xee/0x180
[  860.001824][T17187]  syscall_exit_to_user_mode+0x16/0x40
[  860.007288][T17187]  do_syscall_64+0x58/0xa0
[  860.011705][T17187]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  860.017603][T17187] 
[  860.019924][T17187] Last potentially related work creation:
[  860.025632][T17187]  kasan_save_stack+0x35/0x60
[  860.030314][T17187]  kasan_record_aux_stack+0xb8/0x100
[  860.035598][T17187]  insert_work+0x54/0x3d0
[  860.039929][T17187]  __queue_work+0x90b/0xc80
[  860.044428][T17187]  call_timer_fn+0x17b/0x540
[  860.049018][T17187]  __run_timers+0x598/0x810
[  860.053517][T17187]  run_timer_softirq+0x63/0xf0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  860.058281][T17187]  handle_softirqs+0x336/0x830
[  860.058781][ T4231] Bluetooth: hci2: command 0x0409 tx timeout
[  860.063041][T17187]  __irq_exit_rcu+0x13b/0x230
[  860.063085][T17187]  irq_exit_rcu+0x5/0x20
[  860.063097][T17187]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  860.083553][T17187]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  860.089548][T17187] 
[  860.091869][T17187] The buggy address belongs to the object at ffff888061e5a000
[  860.091869][T17187]  which belongs to the cache kmalloc-512 of size 512
[  860.105933][T17187] The buggy address is located 96 bytes inside of
[  860.105933][T17187]  512-byte region [ffff888061e5a000, ffff888061e5a200)
[  860.119151][T17187] The buggy address belongs to the page:
[  860.124785][T17187] page:ffffea0001879600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61e58
[  860.134940][T17187] head:ffffea0001879600 order:2 compound_mapcount:0 compound_pincount:0
[  860.143270][T17187] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  860.151267][T17187] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80
[  860.159866][T17187] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  860.168459][T17187] page dumped because: kasan: bad access detected
[  860.174893][T17187] page_owner tracks the page as allocated
[  860.180631][T17187] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 53207503239, free_ts 53196098071
[  860.199745][T17187]  get_page_from_freelist+0x24f6/0x2670
[  860.205317][T17187]  __alloc_pages+0x1ee/0x480
[  860.209930][T17187]  new_slab+0xc0/0x4b0
[  860.214007][T17187]  ___slab_alloc+0x807/0xdd0
[  860.218608][T17187]  __kmalloc_node_track_caller+0x13d/0x3a0
[  860.224422][T17187]  __alloc_skb+0x22c/0x750
[  860.228848][T17187]  inet6_netconf_notify_devconf+0x10b/0x1d0
[  860.234758][T17187]  __addrconf_sysctl_register+0x375/0x3e0
[  860.240493][T17187]  addrconf_sysctl_register+0x15c/0x1b0
[  860.246054][T17187]  ipv6_add_dev+0xbfb/0x11a0
[  860.250657][T17187]  addrconf_notify+0x66f/0xf20
[  860.255438][T17187]  raw_notifier_call_chain+0xcb/0x160
[  860.260831][T17187]  register_netdevice+0x12a8/0x1720
[  860.266042][T17187]  veth_newlink+0x6af/0xe20
[  860.270569][T17187]  rtnl_newlink+0x139e/0x1920
[  860.275249][T17187]  rtnetlink_rcv_msg+0x7f1/0xf10
[  860.280189][T17187] page last free stack trace:
[  860.284851][T17187]  free_unref_page_prepare+0x637/0x6c0
[  860.290315][T17187]  free_unref_page+0x8f/0x2a0
[  860.294996][T17187]  stack_depot_save+0x42f/0x460
[  860.299861][T17187]  __kasan_kmalloc+0xc6/0xe0
[  860.304439][T17187]  __netdev_adjacent_dev_insert+0x163/0x900
[  860.310329][T17187]  __netdev_upper_dev_link+0x39c/0x5a0
[  860.315790][T17187]  netdev_master_upper_dev_link+0xb9/0x100
[  860.321752][T17187]  br_add_if+0x580/0x1200
[  860.326110][T17187]  do_setlink+0xe79/0x29d0
[  860.330547][T17187]  rtnl_newlink+0x15bb/0x1920
[  860.335219][T17187]  rtnetlink_rcv_msg+0x7f1/0xf10
[  860.340140][T17187]  netlink_rcv_skb+0x1e9/0x430
[  860.344911][T17187]  netlink_unicast+0x78f/0x940
[  860.349653][T17187]  netlink_sendmsg+0x8ba/0xbe0
[  860.354412][T17187]  __sys_sendto+0x46d/0x620
[  860.358907][T17187]  __x64_sys_sendto+0xda/0xf0
[  860.363592][T17187] 
[  860.365914][T17187] Memory state around the buggy address:
[  860.371618][T17187]  ffff888061e59f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  860.379659][T17187]  ffff888061e59f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  860.387705][T17187] >ffff888061e5a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  860.395827][T17187]                                                        ^
[  860.403002][T17187]  ffff888061e5a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  860.411051][T17187]  ffff888061e5a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  860.419128][T17187] ==================================================================
[  860.427186][T17187] Disabling lock debugging due to kernel taint
[  860.438561][T17187] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  860.445782][T17187] CPU: 1 PID: 17187 Comm: syz.6.2948 Tainted: G    B             syzkaller #0
[  860.454636][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  860.464694][T17187] Call Trace:
[  860.467983][T17187]  <TASK>
[  860.470935][T17187]  dump_stack_lvl+0x188/0x250
[  860.475638][T17187]  ? show_regs_print_info+0x20/0x20
[  860.480842][T17187]  ? load_image+0x410/0x410
[  860.485348][T17187]  panic+0x2f8/0x850
[  860.489268][T17187]  ? bpf_jit_dump+0xd0/0xd0
[  860.493774][T17187]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  860.499754][T17187]  ? _raw_spin_unlock+0x40/0x40
[  860.504611][T17187]  ? __mutex_lock_common+0x118/0x2400
[  860.509982][T17187]  check_panic_on_warn+0x80/0xa0
[  860.514919][T17187]  ? __mutex_lock_common+0x118/0x2400
[  860.520286][T17187]  end_report+0x6d/0xf0
[  860.524438][T17187]  kasan_report+0x102/0x130
[  860.528944][T17187]  ? __mutex_lock_common+0x118/0x2400
[  860.534334][T17187]  __mutex_lock_common+0x118/0x2400
[  860.539549][T17187]  ? end_current_label_crit_section+0x170/0x170
[  860.545789][T17187]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  860.551773][T17187]  ? ep_open+0x4a/0x260
[  860.555939][T17187]  ? mutex_lock_io_nested+0x60/0x60
[  860.561145][T17187]  ? apparmor_file_open+0x3c7/0x790
[  860.566357][T17187]  ? apparmor_inode_getattr+0x20/0x20
[  860.571741][T17187]  mutex_lock_interruptible_nested+0x17/0x20
[  860.577733][T17187]  ep_open+0x4a/0x260
[  860.581718][T17187]  ? do_dentry_open+0x7ec/0xf90
[  860.586573][T17187]  ? ep_ioctl+0x1b0/0x1b0
[  860.590903][T17187]  do_dentry_open+0x7f7/0xf90
[  860.595587][T17187]  ? vfs_open+0x2b/0x80
[  860.599743][T17187]  path_openat+0x2718/0x2fb0
[  860.604334][T17187]  ? finish_lock_switch+0x12d/0x290
[  860.609537][T17187]  ? __schedule+0x11cb/0x4350
[  860.614223][T17187]  ? do_filp_open+0x400/0x400
[  860.618991][T17187]  ? __cond_resched+0xd0/0xd0
[  860.623670][T17187]  do_filp_open+0x1df/0x400
[  860.628173][T17187]  ? vfs_tmpfile+0x300/0x300
[  860.632767][T17187]  ? preempt_schedule_common+0xa5/0xd0
[  860.638239][T17187]  ? _raw_spin_unlock+0x36/0x40
[  860.643092][T17187]  ? alloc_fd+0x59e/0x650
[  860.647424][T17187]  do_sys_openat2+0x14b/0x500
[  860.652115][T17187]  ? do_sys_open+0xe0/0xe0
[  860.656550][T17187]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  860.662200][T17187]  __x64_sys_openat+0x135/0x160
[  860.667043][T17187]  do_syscall_64+0x4c/0xa0
[  860.671441][T17187]  ? clear_bhb_loop+0x30/0x80
[  860.676105][T17187]  ? clear_bhb_loop+0x30/0x80
[  860.680764][T17187]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  860.686637][T17187] RIP: 0033:0x7f22aef86159
[  860.691030][T17187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.710643][T17187] RSP: 002b:00007f22ad1bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  860.719043][T17187] RAX: ffffffffffffffda RBX: 00007f22af20e090 RCX: 00007f22aef86159
[  860.727009][T17187] RDX: 0000000000000002 RSI: 0000200000000600 RDI: ffffffffffffff9c
[  860.734973][T17187] RBP: 00007f22af01d024 R08: 0000000000000000 R09: 0000000000000000
[  860.742927][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  860.750884][T17187] R13: 00007f22af20e128 R14: 00007f22af20e090 R15: 00007ffddd8e8208
[  860.758848][T17187]  </TASK>
[  860.761973][T17187] Kernel Offset: disabled
[  860.766318][T17187] Rebooting in 86400 seconds..