last executing test programs:

6m34.176087221s ago: executing program 0 (id=45):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)

6m32.674783313s ago: executing program 0 (id=50):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x4, 0x700000000000000}, 0x0)
fchown(0xffffffffffffffff, 0x0, 0xee01)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x400, 0x4, 0xfffd, 0x85, 0x6, 0x7fe, 0x1, 0x4, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000001c0)={0x100})
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
io_setup(0x100, &(0x7f0000002d40))

6m31.07345511s ago: executing program 0 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

6m30.620253832s ago: executing program 32 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1})

5m40.505306387s ago: executing program 5 (id=230):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000377,dmask=00000000000000000000357,discard,iocharset=cp437,errors=continue,discard,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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")
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0)
pread64(r1, 0x0, 0x0, 0x1)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)

5m40.070991697s ago: executing program 5 (id=234):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nouid32}, {@noquota}, {@nouid32}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100)
r2 = open(&(0x7f0000000000)='./file1\x00', 0x20801, 0xa2)
fallocate(r2, 0x10, 0x6, 0x7000000)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x2, 0x0, 0x0, 0xfffffffffe000001})

5m39.60150693s ago: executing program 5 (id=237):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044094}, 0x4)
sync()
sync()
sync()
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
write$FUSE_INIT(r2, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000280)={0xc5, 0x0, r2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

5m39.303311314s ago: executing program 33 (id=237):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044094}, 0x4)
sync()
sync()
sync()
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000)
write$FUSE_INIT(r2, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000280)={0xc5, 0x0, r2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

2m30.792731336s ago: executing program 2 (id=853):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1040, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00')
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0x8000005, 0x4)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

2m30.313460079s ago: executing program 2 (id=854):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0xd419, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m29.577445825s ago: executing program 2 (id=857):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)

2m29.421176082s ago: executing program 2 (id=859):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='dmask=00000000000000000000006,umask=00000000000000000000005,namecase=1,dmask=00000000000000000006366,errors=remount-ro,errors=remount-ro,fmask=00000000000000000000002,keep_last_dots,iocharset=iso8859-13,allow_utime=00000000000000000147057,fsname=,smackfsdef=cp737,euid>', @ANYRESDEC=0x0, @ANYBLOB=',appraise,obj_type=[!,smackfsdef=dmask,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c636f88746578747d73797361646d5f752c666f776e65723e", @ANYRES64=0x0, @ANYBLOB=',\x00'], 0x1, 0x152b, &(0x7f0000003700)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)

2m29.093458168s ago: executing program 2 (id=861):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0x0)
pread64(r1, 0x0, 0x0, 0x1)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd})

2m26.993344969s ago: executing program 2 (id=866):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2001e8ffffffe4486500e98c1a33a2c7bab9979964fbf7e1bb7a361847940bab3db5c623a71dc9e1f7c753b88a856438fcf46e4392d6aa1ac5942b20bc8d1037a53726ba346673744f1db101f56bb9fcc6e036c619be105f"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}})

2m26.508360032s ago: executing program 34 (id=866):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2001e8ffffffe4486500e98c1a33a2c7bab9979964fbf7e1bb7a361847940bab3db5c623a71dc9e1f7c753b88a856438fcf46e4392d6aa1ac5942b20bc8d1037a53726ba346673744f1db101f56bb9fcc6e036c619be105f"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}})

42.209913677s ago: executing program 7 (id=1223):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c1040, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='net/psched\x00')
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8d}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc)
close_range(r1, 0xffffffffffffffff, 0x0)

41.613032236s ago: executing program 7 (id=1227):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x5, 0x1000, 0x6, 0x1, {0x5, 0x1, 0x7ff, 0x1, 0x4}, {0x4, 0x2, 0x0, 0x5, 0x4, 0x8}, 0x40, 0x1}}]}]}}]}, 0x74}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20)

41.31931406s ago: executing program 7 (id=1229):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)

39.976386265s ago: executing program 7 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")

39.551440785s ago: executing program 7 (id=1233):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100), 0x26, 0x768, &(0x7f0000001040)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+88L56EKGFFkonSXNpT40Xb4VCwWuNySSETLIhu6ndWLD1LNTmoiCIevboVSj1D/AmBQXvgmiNB/GyMpsfpXGz3TZpt6SfD0zmeWZn5vv9Zodnd2CfCeCl9Xr5J4kYiojLEVHd3J5GxOF260jEzY391h/cmCqXJFqtK78m5WGx3qpunyvZXB+P9iHx/4i4V4k488E/49abq/OTRZEvb/ZHGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phja/hfj7WefOvC0Tvfvbm29v3XjduvDZxNYqJdd2zW1uNpnsjG/6QSEzu2Lz6LYH2U9DsBAAB6Un7PPxQRA+1vqdU41G4BAAAAB0lrsAUAAAAceEn0OwMAAADg2dr6HcDW3N5e58Gm+/T7g1/eiIjhTvEH2nOII45EJSKOrSePzExINg6DPbl5KyLuTuy8/r4sr7Cbezz36I7+o3OkD+/x7OyHu+X4M9Fp/Em3x5/oMP4MbD07YY92H/8exj+0y/h3uccY33z2SmXX+LciXh3oFD/Zjp/sEv/tHuPfXvvwTrl+p8NDAlpfRJzq+PmTPBKry/MhJmbmiq6PH7j31+n73eo/tlv8pHv9Sz3W/9767/O7jSVl/NMnur//neKX18RHm3mUn8V3Ntdlf21HjBMLP3zbrf7piFb393+gY/2f91j/T18NXu9xVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbbqdplkUcj4j/xrG0qNUbZ2ZqK4vT5WsRw1FJZ+aKfDQiqhv9pOyPtdsP++d29Mcj4j8/Ht0IOlfk2VStmO538QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGw7HhFDkaRZRKQR8Uc1TbMsYqCHYwefQ34AAADAPhnudwIAAADAM+f+HwAAAA6+p73/T/Y5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBAu3zpUrm01h/cmCr709eaK/O1a2en8/p8trAylU3Vlpey2VpttsizqdrC485X1GpLYxdi5fpII683RurN1asLtZXFxtW5hcnZ/GpeeS5VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KSG2kuSZhGRtttpmmUR/4qI4agkM3NFPhoR/46I+9XKYNkf63fSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Lt6c3V+sijyZQ2NfWykL0YaL2zj/Yh4AdLo0uj3yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQD/Um6vzk0WRL9f7nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD9lf6cRES5nKqeHNr56uHkz2p7HRHvfnrl4+uTjcbyWLn9t+3tjU82t5/rR/4AAADwUrj4JDtv3adv3ccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qt5cnZ8sinx5b42L0VxtJbvs0+8aAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp/N3AAAA//9Ilcc3")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0xa18905, &(0x7f00000001c0), 0x9, 0x51b, &(0x7f0000000d40)="$eJzs3c9vG1kdAPDvTOKQpFmSBQ7LSiwrdlFaQZ2kYdsIiQWkFZxWAsqhtxIlThTFiUPitE1UQSr+ACRUARIXOHFB4j9AvXFFoB64I34KQQsHDlAj2+M0ae042fqHGn8+0tRvZt7M9/tGzfO8mZEngIH1ZkRciYgnlUrlUkRMZsvTbHpwISIO6vUeP7q7VJ2SqFSu/yOJJFtWrZ8c2We2Sc03vjrcNO7O3v76YrFY2M7mZ8obWzM7e/uX1zYWVwurhc35+bmrC9cW3lmY7Ug7JyLi3ff+/MPv//wr7/7qs7f/cPNvF79TzfkL2fpGOzqtflxyMXpkWfWIbHcjWB8MZe3J9TsRAABOpXGe/6mIuBSTMRTNz9cBAACAl1flixPx3ySiAgAAAJxbae3Z2CTNZ88BTESa5vP1Z3g/FuNpsbRT/sxKaXdzuf4M7VTk0pW1YmE2e1Z4KnJJdX6uVn46f+WZ+fmIeDUi7k+O1ebzS6Xicr8vfgAAAMCAuPDM+P/fk/XxPwAAAHDOTLVcc+NxTxMBAAAAuqb1+B8AAAA4L5qM/2/0Iw8AAACgK772/vvVqdJ4//Xyrb3d9dKty8uFnfX8xu5Sfqm0vZVfLZVWa7/Zt9Fuf8VSaetzjZddl2d29vZvbpR2N8s31469AhsAAADooVc/+eD3SUQcfH6sNlWN9DspoCeG21XIHSn/qbu5AL011O8EgL5p+/0PnFu5ficA9F3SZn3Lh3d+03qbn75APgAAQOdNf7z5/f+k7bWBg7RHKQJd4vofDC73/2Fwuf8PgysXQ3E4kH/P2QAMom7c/z+uUjlTQgAAQMdN1KYkzUfUrgNMRJrm8xGv1F4LkEtW1oqF2Yj4cLa+Oj9X2zJpO2YAAAAAAAAAAAAAAAAAAAAAAAAAAOoqlSQqZzNS2wwAAAB4aUSkf02y939NT7498ez1gZHkP5O1z4i4/ZPrP7qzWC5vz1WX//NwefnH2fIr/biCAQAAADx17dv1z/o4vTGOBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBOevzo7lJj6mXcv385IqaaxR+O0drnaOQiYvxfSQwf2S6JiKEOxD+4FxGvNYufVNOKqSyLZvHH+hg/jYgLHYgPg+xBtf/5UrO/vzTerH02//u7WuuhXlzW/30oIpbG4nj8Rv831KL/eeWUMV5/+MuZlvHvRbw+3Lz/acRPW8R/68SoyWHpW9/c329Vq/KziOmm3z/JsT3NlDe2Znb29i+vbSyuFlYLm/Pzc1cXri28szA7s7JWLGT/NokwEj/4xOiTk9o/Hvefi59m/W+1/UmL9r99Yvuf+t/DO48+Wi/mmsW/+Fbz/3+vtYifZt99n87K1fXTjfJBvXzUG7/47RsRv/t1q/Yvtzj+o23af/GU7b/09e/98ZRVAYAe2NnbX18sFgvb7QpxijofuPCXLJsuhjixcOajcbRQPS06XJLEc3Wqp+l9apfCyYXvdnaHw2eo/JF+t71doX99EgAA0B3Pj4GPa9xjL4/3MisAAAAAAAAAAAAAAAAAAAAYLL38db2Gg/40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8PAAD//zcuxu4=")
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x8)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000fc0)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000040)='#', 0x0, 0x0, 0x0})

37.871160746s ago: executing program 3 (id=1236):
chdir(&(0x7f0000000240)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f636861727365743d63703836322c666c7573682c757466383d312c636f6465706167653d313235302c636865636b3d6e6f726d616c2c696f636861727365743d6d61636963656c616e642c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c757466383d302c6e6f6e756d7461696c3d302c757466383d302c726f6469722c00a3649d1ef31283cde359cdd79881e80ea9a73bdfebba876b1b6991727372fab5c06d827162dec02af83915aed87e82508947cb8da929dffbe60191983c89011f7c0c624911c866effe7b3862bc7deb89a1eee1891818e3048383f6419a18a80364add28d1dad0ec3ea2682ff61a9116877ea36abce12d68bf3"], 0xfd, 0x2a8, &(0x7f0000000240)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)

37.761532371s ago: executing program 7 (id=1238):
r0 = socket$inet(0x2, 0x2, 0x11)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x1)
read(r1, &(0x7f0000000400), 0x120)
close(0xffffffffffffffff)
read(r1, &(0x7f0000000500), 0x1000)

37.355642381s ago: executing program 35 (id=1238):
r0 = socket$inet(0x2, 0x2, 0x11)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r1, &(0x7f0000000300), 0x1)
read(r1, &(0x7f0000000400), 0x120)
close(0xffffffffffffffff)
read(r1, &(0x7f0000000500), 0x1000)

37.349820931s ago: executing program 3 (id=1240):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
chdir(0x0)

37.338170372s ago: executing program 4 (id=1241):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x802)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x11f, 0x5, 0x3, 0x80, 0x2d0}}}}]}, 0x4c}}, 0x2000c010)
ioprio_set$pid(0x1, 0x0, 0x0)
syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f00007fe000/0x4000)=nil, 0x4000, 0x1000000)
write(0xffffffffffffffff, &(0x7f0000000800)='1', 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x10000, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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")
r8 = openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x84)
ioctl$F2FS_IOC_SET_PIN_FILE(r8, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0)

36.405495066s ago: executing program 4 (id=1242):
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000402)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x8)

35.862277283s ago: executing program 3 (id=1243):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0xf57, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x36}}}, &(0x7f0000000480)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8001)

34.979792745s ago: executing program 3 (id=1244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")

34.860740191s ago: executing program 6 (id=1245):
syz_usb_connect$midi(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000008820527004000010203010902ca000101040008090400000801032004072401001007000905a708ff030305021425011074b21421f13b3eb9ae11ca015f781a780905800810000304001025010c0915e8828d3257f15c65c255090504"], 0x0)

34.013255982s ago: executing program 3 (id=1246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = inotify_init()
getgid()
inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x150003b0)
syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/time\x00')
r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
sched_setparam(r5, &(0x7f00000006c0)=0x4)
write$cgroup_pid(r4, &(0x7f0000000240)=r5, 0x12)
utimensat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000001}, 0x240448c8)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
syz_clone(0x80000080, &(0x7f0000000380)="331d75d37601d53a8c9f88ed9aea1b3254139aa0912a12a7e66e28d8237234b3ad330889d2f706ca3f623d2ef336e2d1221792939549917e61b613d9000f601037285aef7b1ebd72e4de2e2390165f796e01c36ff50e66f3fd26119bb712a3764e8319f7610a2774896194253b9d3ec42097883c68c31dee49e45c830a869c87186aa7636c77c3c6e295c5fa057330246794a03f9c15959bf83b293ff40cc214af9e76625645d56560", 0xa9, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="17e160cccb24d2877d79a97f90342a5555b101451ecc135ff9e321c83f3f048cd914ecea2582fa0028628b0f69c2633f534935a34c564f4550dc53beb6f466514bafbde86bf180cfed0f520ec7b0e772c8582213d84a4a966d848e6530580c9443d60e9846c423791594c632327030f0b49f3653d0412dce026b3b0ac28b669288ef05b7be25ad40ad66283bccc023f41d7d121bc7aef6fdc5d4d189e1f1301e60cf28922a")

33.958204165s ago: executing program 4 (id=1247):
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
pidfd_send_signal(r5, 0x2, 0x0, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
read(r0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0)
write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x418200)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r8)
setuid(0xee01)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000000)={'netdevsim0\x00'})
sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="300301b10df2b90cf8ed4427c2220000", @ANYRES16=r9, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x1}, 0x17f9ea4ecffcbba3)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380))

33.305369456s ago: executing program 3 (id=1248):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@abort}, {@block_validity}, {@nobarrier}]}, 0x1, 0x77f, &(0x7f0000000840)="$eJzs2M9rXNUXAPDzXib5pk2+nVRdWDcVK7QgnfxqQ1M3rQtBECwUXKkY7CQNmTQlk6LJaopLXbgQVETQblyINAuhG9GA4B+gG/svCKKiCxfCyJtM0pBOpmM76bPp5wN35t575uWcO5O5vDsBPLSezB6SiMGIGImIYnM+jYi+Rq8/orb+uuvjqxezlkS9fv7XJLssro2vXtz4W0nzeSAal8SxiHju+SQeffv2vNXllbmpSqW82BwPL81fHq4urxyfnZ+aKc+UL42NnTo5eWJ0YmKya2sdHY7XvvvqzMu1s1e+HHllYS6rd7AZ27qObkpazBUi4tXdSJaDnuZ6erbMJYUcCwIAoK3sPv+RiHiqcQ9XjJ64dfNWjJvf5locAAAA0BX1w3UAAABgj8v79wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4M9XoSdQAAAGBPy/v3BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHizXxlcvbrT7mfeXsxExtJ7/erOtRwpRazz3R29E7P8jicKW65KIGOlC/trViHi81fqTRv6h6G+MtudPI+JcnvlrEa93IT88zNay/edMq+9furn/RIvvX2H9snu2sf9dv23/u5W/Z4f973KHOT7/8aV3d8x/NeKJQqv8yWb+ZIf8tQ7zf/PioY92itU/izgarfNvzTW8NH95uLq8cnx2fmqmPFO+NDZ26uTkidGJicnh6dlKeWT9sWWOT7545/t269+/U/4k2r7/73W4/iMHn/360zb5jx1p//m3ev+zmlY7zP/7Dwf+3imW5b+ww/rv9PmvdZj/hRvnbnT4UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9og0IgYjSUub/TQtlSIGIuKx2J9WFqpLz0wvXLl0IYtFDEVvOj1bKY9ERHF9nGTj0Ub/1nhs23g8Ig5GxPvFfY1x6Y2FyoW8Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCmgYgYjCQtRUQaEX8W07RUyrsqAAAAoOuG8i4AAAAA2HXO/wAAALD3Of8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwyw4eXruZRETt9L5Gy/Q1Y725VgbstjTvAoDc9LQPD9yvOoD7r5B3AUBunPGB5A7x/ruIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALD3HD20djOJiNrpfY2W6WvGenOtDNhtad4FALnpybsAIDeFvAsAcuOMDyR3iPffRQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvWew0ZK0FBFpo5+mpVLE/yNiKHqT6dlKeSQiDkTET8Xe/2Xj0byLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOuqyytzU5VKeVFHp32np/kv0/7FffEfKFXn3js5b0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOSiurwyN1WplBereVcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvtKfk4jI2tHi04Pbo33JX8XGc0S8+fH5D96aWlpaHM3mf9ucX/qwOT+WR/0AAADAdhvn9I1zPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKeqyytzU5VKeXEXO3mvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4d/4JAAD//06onQQ=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)

32.873950187s ago: executing program 36 (id=1248):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@abort}, {@block_validity}, {@nobarrier}]}, 0x1, 0x77f, &(0x7f0000000840)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)

32.859140097s ago: executing program 4 (id=1251):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000004, &(0x7f0000002000)=ANY=[], 0xfc, 0x5520, &(0x7f0000000380)="$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")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x4, r0, 'id1\x00'})
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000bc0)=ANY=[])

32.59838038s ago: executing program 6 (id=1252):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
clock_gettime(0xfffffffb, 0x0)

31.950495791s ago: executing program 6 (id=1254):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0xf57, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x36}}}, &(0x7f0000000480)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8001)

31.552218341s ago: executing program 6 (id=1256):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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")

31.019673406s ago: executing program 4 (id=1258):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183341, 0x141)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffff15, 0x1, {0x1, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffef, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000001}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1)

30.828350105s ago: executing program 6 (id=1259):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x1a1f42, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

29.367869276s ago: executing program 6 (id=1263):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, 0x0}, 0x20)

28.791982253s ago: executing program 37 (id=1263):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, 0x0}, 0x20)

28.780492034s ago: executing program 4 (id=1265):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800, 0x101403)
ioctl$BLKALIGNOFF(r0, 0x127a, 0x0)

28.780116134s ago: executing program 38 (id=1265):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x800, 0x101403)
ioctl$BLKALIGNOFF(r0, 0x127a, 0x0)

14.266705593s ago: executing program 8 (id=1239):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x5, 0x1000, 0x6, 0x1, {0x5, 0x1, 0x7ff, 0x1, 0x4}, {0x4, 0x2, 0x0, 0x5, 0x4, 0x8}, 0x40, 0x1}}]}]}}]}, 0x74}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20)

13.957402338s ago: executing program 8 (id=1280):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

13.769448867s ago: executing program 8 (id=1281):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000300)='./file0\x00')
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18000, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xd270, 0x0, 0x1, 0xd05, 0xd4})

13.324783589s ago: executing program 8 (id=1284):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)

12.796367914s ago: executing program 8 (id=1286):
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
syz_open_procfs(0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3, 0x2}})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0)

12.496283358s ago: executing program 39 (id=1286):
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b40, 0x0)
syz_open_procfs(0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3, 0x2}})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0)

5.550220013s ago: executing program 9 (id=1303):
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x109142, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

5.393027641s ago: executing program 9 (id=1304):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0)

4.886422765s ago: executing program 9 (id=1305):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2818082, &(0x7f0000000940)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@fat=@discard}, {@utf8}, {@utf8}, {@utf8}, {@numtail}, {@shortname_lower}, {@uni_xlate}, {@utf8}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)

3.467778463s ago: executing program 5 (id=1272):
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183341, 0x141)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x1}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x78bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffff15, 0x1, {0x1, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffef, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000001}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f00000000c0)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r5, &(0x7f00000001c0)='1', 0x1)

3.295837912s ago: executing program 1 (id=1307):
r0 = socket$inet6(0xa, 0x3, 0x2f)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c)

3.239707335s ago: executing program 0 (id=1264):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
madvise(0xffffffffffffffff, 0x0, 0x13)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xc)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000700)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006d"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3.161689398s ago: executing program 5 (id=1308):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x510, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000900)={0x0, 0x2c4f, 0x2044, 0x1, 0x310, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1c7, 0x400, 0x3, 0x1eb, 0x0, r0}, <r1=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x94d9, 0x0, 0x1, 0x2ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79f3, 0x8000, 0x3, 0x17f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8489, 0x200, 0x2, 0x2a, 0x0, r0}}], 0x4, &(0x7f0000002940)={0x2e, 0x6, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x0, 0xcc6, 0x0, &(0x7f0000001940)=@buf_1k="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"}}, &(0x7f00000029c0))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000002a00)={r2, 0x3, 0x600, 0x5, 0x9}, 0x1)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\xff\x87I[\xa8z>\x1cgB\xf5z\x06\a\xa4\xf2\xa3\x80\x14L\xc2\xb7\xee\xefO\x17pC11\xea)\xc5\xa2\xe9t\x82\\\x8d(\xe6\xd4\xb0L\x1e\x80\xe2Q\xd4=\xe9\xab\x01\xe3\x87hG\x98nR\xd4\x0f\x1a\xfa\xe4\xc3y\xa5\xdf$h\xb3\xe8\xb4*\xbf\x1d\xbce\xd2V%F\xc2\xde=\xfc\xfa\x99\x87\xf6\xab\xa1\xa2\xfc\xaaU\xf5\xb1\x1b\x98\xee\xd8\x8b@;\xc2\x15\xdc\xef<w\x91\x89\x86*\xfas\xf9\xd2\xc5g\x82\x10\xde\xb7\xb6\xb5\xefr\xa6\xf0\x7f1\xc1%E\xdc\xff\x1d\xdc\xb5\x01\x17\xac0\x1c\xeb7X\xda\x93\xea\xf3KK(\xc7\t@\x00K\x9bj\xfa\x1e\xe7`\xf1\xce\xe7\xd5\x16\xbe\xec\x96\xab\x1f\x1a\xce\xdf \xebF\x14u\xcc\x17}\xb3\x90\xe0\xdew\xf0\xb1\xaf\xf4\xf9\xdb\xcf\x84'}]}, 0xfffffff0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101)
pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000100), 0x84000)

3.073423062s ago: executing program 9 (id=1309):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000010c0)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x5, 0x1000, 0x6, 0x1, {0x5, 0x1, 0x7ff, 0x1, 0x4}, {0x4, 0x2, 0x0, 0x5, 0x4, 0x8}, 0x40, 0x1}}]}]}}]}, 0x74}}, 0x0)
write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20)

3.005042956s ago: executing program 1 (id=1310):
r0 = socket$inet6(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0)

1.952743157s ago: executing program 1 (id=1311):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x38)

1.757782866s ago: executing program 9 (id=1312):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x0, 0x10022, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.429781942s ago: executing program 1 (id=1313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getrusage(0xffffffffffffffff, &(0x7f0000000380))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='1-6:5/', @ANYRESDEC], 0x31)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0xfffffffffffffee7, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

1.341507346s ago: executing program 9 (id=1314):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x17, {[@global=@item_012={0x2, 0x1, 0x0, "01c8"}, @main=@item_4={0x3, 0x0, 0xa, "6bc489cf"}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xc, "01"}, @local=@item_012={0x1, 0x2, 0x3, "01"}, @global=@item_4={0x3, 0x1, 0x2, "2495e765"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}]}}, 0x0}, 0x0)

1.166637574s ago: executing program 5 (id=1315):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x1, 0x5519, &(0x7f000000b280)="$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")
symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
kcmp(0x0, 0x0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100800, &(0x7f0000000480)=ANY=[@ANYBLOB='rodir,nonumtail=0,utf8=0,utf8=0,shortname=lower,rodir,nonumtail=0,rodir,nonumtail=0,sys_immutable,utf8=1,rodir,utf8=1,shortname=lower,shortname=lower,utf8=0,pcr=00000000000000000009,obj_user=,smackfsroot=usrquota,defcontext=sysadm_u,defcontext=user_u,rootcontext=sysadm_u,mask=^MAY_READ,euid<', @ANYRESDEC=r4, @ANYBLOB="4fc9d8022254038966bf294a79217711764be2a538f2"], 0x1, 0x27b, &(0x7f0000000a80)="$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")

1.012696752s ago: executing program 0 (id=1316):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
lseek(r0, 0x7fffffffffffffff, 0x1)
sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x2b8b)

315.606385ms ago: executing program 1 (id=1317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000200)={{0x25000, 0x6000, 0xd, 0x14, 0x3, 0x7, 0x9, 0x6, 0x0, 0x85, 0x0, 0x2}, {0xdddd1000, 0xeeee8000, 0xe, 0x1, 0x3, 0x7, 0xad, 0x7, 0xa1, 0x3, 0x0, 0x9}, {0x4000, 0x9000, 0xf, 0x51, 0x2, 0x7f, 0x9, 0x4, 0x8, 0x5, 0xb8, 0x4}, {0xddd85002, 0x40000, 0xe, 0x5, 0x5, 0x90, 0x2, 0x5, 0x1, 0x1, 0x50, 0x4}, {0xa000, 0xeeee8000, 0xc, 0x9, 0xc, 0x1, 0x80, 0x22, 0x3, 0x9d, 0x4, 0xff}, {0x1, 0xdddd1000, 0x0, 0xf7, 0x0, 0xd3, 0x88, 0x3, 0x2, 0x5, 0x9}, {0x30000, 0x80a0000, 0x3, 0x6, 0x7, 0x1, 0x8, 0xac, 0x4, 0x8, 0x5, 0x2}, {0xeeef0000, 0x41000, 0x4, 0x0, 0x9, 0xf, 0x10, 0x0, 0x98, 0x2, 0x18, 0x10}, {0xa000}, {0x26000, 0x9}, 0x1, 0x0, 0x4000, 0x40000, 0x3, 0xc001, 0x54000, 0x0, [0xd5c, 0x46f, 0xb, 0x3]})

97.437756ms ago: executing program 0 (id=1318):
socket$tipc(0x1e, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0)
write$P9_RLERRORu(r0, 0x0, 0xfffffcf0)

0s ago: executing program 1 (id=1319):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

kernel console output (not intermixed with test programs):

0: link becomes ready
[  347.039976][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  347.055416][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  347.075354][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  347.115278][ T7915] device veth0_macvtap entered promiscuous mode
[  347.126698][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  347.169941][ T7915] device veth1_macvtap entered promiscuous mode
[  347.216052][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.244651][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.266777][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.284263][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.296129][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.319168][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  347.334560][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  347.358930][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  347.386348][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.413540][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.447061][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.473193][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.499259][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.521041][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  347.536319][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.569042][ T7915] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.585028][ T7915] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.631178][ T7915] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.685418][ T7915] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.945608][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.981408][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.023592][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  348.093868][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.151927][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.181692][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  350.278274][ T4354] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  350.499323][ T5343] EXT4-fs (loop6): unmounting filesystem.
[  350.499828][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.511459][ T8275] loop7: detected capacity change from 0 to 128
[  350.523890][ T8250] loop3: detected capacity change from 0 to 40427
[  350.536252][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.564035][ T8250] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  350.577120][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  350.608286][ T8250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  350.614680][ T8278] loop4: detected capacity change from 0 to 1024
[  350.618822][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  350.635069][ T8278] EXT4-fs: Ignoring removed orlov option
[  350.653103][ T8250] F2FS-fs (loop3): invalid crc_offset: 33558524
[  350.677769][ T8275] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  350.696513][ T8275] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  350.736844][ T4354] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  350.755733][ T8250] F2FS-fs (loop3): Found nat_bits in checkpoint
[  350.792658][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.815884][ T4354] usb 2-1: config 0 descriptor??
[  350.816012][ T8278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  350.824481][ T8255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  351.177450][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  351.286492][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.310023][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.347602][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.375165][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.405520][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.445837][ T8304] loop4: detected capacity change from 0 to 512
[  351.461049][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.478928][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.508777][ T4354] wacom 0003:056A:0331.0007: unknown main item tag 0x0
[  351.525168][ T8304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  351.563751][ T8304] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  351.575314][ T4354] wacom 0003:056A:0331.0007: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  351.646949][ T8304] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.954: Invalid block bitmap block 164 in block_group 0
[  351.678419][ T4354] usb 2-1: USB disconnect, device number 16
[  351.720162][ T8304] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.954: Invalid block bitmap block 164 in block_group 0
[  351.806993][ T8304] EXT4-fs error (device loop4): ext4_discard_preallocations:5132: comm syz.4.954: Error -117 reading block bitmap for 0
[  351.866028][ T8320] loop3: detected capacity change from 0 to 1024
[  351.915254][ T8320] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  352.021435][ T8320] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  352.082593][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  352.096297][ T8316] fido_id[8316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  352.513885][ T7915] EXT4-fs (loop7): unmounting filesystem.
[  352.702938][ T8341] loop6: detected capacity change from 0 to 16
[  352.824798][ T8341] erofs: (device loop6): mounted with root inode @ nid 36.
[  352.898517][ T4290] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  352.925824][ T8341] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  352.943096][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  352.943187][   T26] audit: type=1800 audit(1789154659.652:22): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.959" name="file2" dev="loop6" ino=89 res=0 errno=0
[  354.352183][ T4322] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  354.569692][ T4322] usb 2-1: not running at top speed; connect to a high speed hub
[  354.583808][ T4322] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  354.617235][ T4322] usb 2-1: string descriptor 0 read error: -22
[  354.629885][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  354.644830][ T4322] usb 2-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  354.665424][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.857652][ T8375] netlink: 'syz.7.967': attribute type 4 has an invalid length.
[  354.860463][ T8371] FAULT_INJECTION: forcing a failure.
[  354.860463][ T8371] name fail_futex, interval 1, probability 0, space 0, times 1
[  354.878331][ T8371] CPU: 0 PID: 8371 Comm: syz.3.962 Not tainted syzkaller #0
[  354.885672][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.895765][ T8371] Call Trace:
[  354.899064][ T8371]  <TASK>
[  354.902017][ T8371]  dump_stack_lvl+0x188/0x24e
[  354.906739][ T8371]  ? verify_lock_unused+0x140/0x140
[  354.911971][ T8371]  ? show_regs_print_info+0x12/0x12
[  354.917210][ T8371]  ? load_image+0x410/0x410
[  354.921755][ T8371]  ? cgroup_rstat_updated+0xce/0x350
[  354.927166][ T8371]  should_fail_ex+0x390/0x4c0
[  354.931889][ T8371]  get_futex_key+0x1b1/0x1000
[  354.936611][ T8371]  ? handle_mm_fault+0x33f5/0x3d40
[  354.941748][ T8371]  ? futex_setup_timer+0xc0/0xc0
[  354.946723][ T8371]  ? __lock_acquire+0x7c40/0x7c40
[  354.951788][ T8371]  futex_wake+0x123/0x4f0
[  354.956146][ T8371]  ? do_raw_spin_unlock+0x11d/0x230
[  354.961384][ T8371]  ? futex_wake_mark+0x150/0x150
[  354.966348][ T8371]  ? handle_mm_fault+0x288d/0x3d40
[  354.971501][ T8371]  do_futex+0x2e2/0x320
[  354.975683][ T8371]  ? do_user_addr_fault+0x8a6/0xb20
[  354.980890][ T8371]  ? __ia32_sys_get_robust_list+0x100/0x100
[  354.986790][ T8371]  ? __up_read+0x2b4/0x6b0
[  354.991219][ T8371]  __se_sys_futex+0x381/0x410
[  354.995924][ T8371]  ? __x64_sys_futex+0xf0/0xf0
[  355.000714][ T8371]  ? __x64_sys_futex+0x1d/0xf0
[  355.005479][ T8371]  do_syscall_64+0x4c/0xa0
[  355.009907][ T8371]  ? clear_bhb_loop+0x60/0xb0
[  355.014586][ T8371]  ? clear_bhb_loop+0x60/0xb0
[  355.019271][ T8371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  355.025175][ T8371] RIP: 0033:0x7f866419e159
[  355.029592][ T8371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.049203][ T8371] RSP: 002b:00007f86650910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  355.057620][ T8371] RAX: ffffffffffffffda RBX: 00007f8664425fa8 RCX: 00007f866419e159
[  355.065592][ T8371] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8664425fac
[  355.073562][ T8371] RBP: 00007f8664425fa0 R08: 00306c175a9b1770 R09: 0000000000000000
[  355.081536][ T8371] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  355.089503][ T8371] R13: 00007f8664426038 R14: 00007ffc4b187970 R15: 00007ffc4b187a58
[  355.097569][ T8371]  </TASK>
[  355.132968][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.146391][ T2169] usb 2-1: USB disconnect, device number 17
[  355.169887][ T8380] netlink: 'syz.7.967': attribute type 4 has an invalid length.
[  356.095662][ T8411] loop4: detected capacity change from 0 to 512
[  357.359774][ T8406] netlink: 64 bytes leftover after parsing attributes in process `syz.7.972'.
[  358.412254][ T8411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  358.746206][ T8411] EXT4-fs (loop4): 1 truncate cleaned up
[  358.840965][ T8411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  358.949373][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  360.193034][ T8445] FAULT_INJECTION: forcing a failure.
[  360.193034][ T8445] name fail_futex, interval 1, probability 0, space 0, times 0
[  360.309080][ T8445] CPU: 0 PID: 8445 Comm: syz.3.981 Not tainted syzkaller #0
[  360.316428][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  360.326506][ T8445] Call Trace:
[  360.329806][ T8445]  <TASK>
[  360.332753][ T8445]  dump_stack_lvl+0x188/0x24e
[  360.337470][ T8445]  ? verify_lock_unused+0x140/0x140
[  360.342708][ T8445]  ? show_regs_print_info+0x12/0x12
[  360.347939][ T8445]  ? load_image+0x410/0x410
[  360.352473][ T8445]  ? cgroup_rstat_updated+0xce/0x350
[  360.357803][ T8445]  should_fail_ex+0x390/0x4c0
[  360.362517][ T8445]  get_futex_key+0x1b1/0x1000
[  360.367238][ T8445]  ? handle_mm_fault+0x33f5/0x3d40
[  360.372372][ T8445]  ? futex_setup_timer+0xc0/0xc0
[  360.377381][ T8445]  ? __lock_acquire+0x7c40/0x7c40
[  360.382439][ T8445]  futex_wake+0x123/0x4f0
[  360.386795][ T8445]  ? do_raw_spin_unlock+0x11d/0x230
[  360.392024][ T8445]  ? futex_wake_mark+0x150/0x150
[  360.396986][ T8445]  ? handle_mm_fault+0x288d/0x3d40
[  360.402135][ T8445]  do_futex+0x2e2/0x320
[  360.406310][ T8445]  ? do_user_addr_fault+0x8a6/0xb20
[  360.411539][ T8445]  ? __ia32_sys_get_robust_list+0x100/0x100
[  360.417457][ T8445]  ? __up_read+0x2b4/0x6b0
[  360.421910][ T8445]  __se_sys_futex+0x381/0x410
[  360.426610][ T8445]  ? __x64_sys_futex+0xf0/0xf0
[  360.431398][ T8445]  ? __x64_sys_futex+0x1d/0xf0
[  360.436187][ T8445]  do_syscall_64+0x4c/0xa0
[  360.440630][ T8445]  ? clear_bhb_loop+0x60/0xb0
[  360.445333][ T8445]  ? clear_bhb_loop+0x60/0xb0
[  360.450044][ T8445]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  360.455964][ T8445] RIP: 0033:0x7f866419e159
[  360.460398][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  360.480021][ T8445] RSP: 002b:00007f86650910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  360.488442][ T8445] RAX: ffffffffffffffda RBX: 00007f8664425fa8 RCX: 00007f866419e159
[  360.496416][ T8445] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8664425fac
[  360.504387][ T8445] RBP: 00007f8664425fa0 R08: 0009154a7154e6d0 R09: 0000000000000000
[  360.512355][ T8445] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  360.520320][ T8445] R13: 00007f8664426038 R14: 00007ffc4b187970 R15: 00007ffc4b187a58
[  360.528298][ T8445]  </TASK>
[  360.819629][ T8460] loop7: detected capacity change from 0 to 128
[  360.873054][ T8460] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  360.875962][ T8423] loop1: detected capacity change from 0 to 40427
[  360.929152][ T8423] F2FS-fs (loop1): invalid crc value
[  360.940041][ T8460] EXT4-fs (loop7): group descriptors corrupted!
[  360.960467][ T8423] F2FS-fs (loop1): Found nat_bits in checkpoint
[  361.152965][ T8423] F2FS-fs (loop1): Start checkpoint disabled!
[  361.229285][ T8423] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  362.613683][ T8480] netlink: 64 bytes leftover after parsing attributes in process `syz.7.986'.
[  363.221454][ T8423] syz.1.975: attempt to access beyond end of device
[  363.221454][ T8423] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  364.308496][ T8505] loop3: detected capacity change from 0 to 1024
[  364.339173][ T8504] loop7: detected capacity change from 0 to 256
[  364.443175][ T8505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  364.465311][   T26] audit: type=1800 audit(1789154671.182:23): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.987" name="file1" dev="loop3" ino=15 res=0 errno=0
[  364.500425][   T26] audit: type=1800 audit(1789154671.222:24): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.987" name="file1" dev="loop3" ino=15 res=0 errno=0
[  364.637469][ T5047] kworker/u4:35: attempt to access beyond end of device
[  364.637469][ T5047] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  364.719146][ T5047] kworker/u4:35: attempt to access beyond end of device
[  364.719146][ T5047] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  364.773792][ T8528] loop7: detected capacity change from 0 to 512
[  364.800677][ T8528] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  365.153492][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  365.354090][ T8540] loop3: detected capacity change from 0 to 512
[  365.722113][ T8540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  365.757733][ T8540] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  365.842156][ T8534] loop1: detected capacity change from 0 to 8192
[  366.226785][ T8557] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1000'.
[  367.559104][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  367.938251][  T126] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  368.149974][  T126] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  368.188690][  T126] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  368.219488][  T126] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  368.249647][  T126] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  368.290303][  T126] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  368.325670][  T126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.353888][  T126] usb 8-1: Product: syz
[  368.377153][  T126] usb 8-1: Manufacturer: syz
[  368.403388][  T126] usb 8-1: SerialNumber: syz
[  368.425151][ T8566] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  368.456151][  T126] cdc_mbim 8-1:1.0: skipping garbage
[  368.540043][ T8562] loop1: detected capacity change from 0 to 40427
[  368.587057][ T8562] F2FS-fs (loop1): invalid crc value
[  368.620002][ T8562] F2FS-fs (loop1): Found nat_bits in checkpoint
[  368.669973][ T8566] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  368.698076][ T8566] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  368.758953][ T8562] F2FS-fs (loop1): Start checkpoint disabled!
[  368.841210][ T8562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  368.961972][ T8562] syz.1.1002: attempt to access beyond end of device
[  368.961972][ T8562] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  369.179461][ T8595] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  369.293670][ T4343] kworker/u4:6: attempt to access beyond end of device
[  369.293670][ T4343] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  369.319205][  T126] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS
[  369.325842][  T126] cdc_mbim 8-1:1.0: bind() failure
[  369.334091][  T126] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  369.341020][  T126] cdc_ncm 8-1:1.1: bind() failure
[  369.349865][  T126] usb 8-1: USB disconnect, device number 2
[  369.375156][ T4343] kworker/u4:6: attempt to access beyond end of device
[  369.375156][ T4343] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  369.684342][ T8604] loop4: detected capacity change from 0 to 8192
[  369.709460][ T8608] loop3: detected capacity change from 0 to 512
[  369.804171][ T8608] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.1014: corrupted in-inode xattr
[  369.841093][ T8608] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1014: couldn't read orphan inode 15 (err -117)
[  369.872658][ T8608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  369.887807][ T8608] EXT4-fs (loop3): shut down requested (2)
[  369.894391][ T8608] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.3.1014: error -117 reading directory block
[  370.064054][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  370.166176][ T8620] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1016'.
[  372.994019][ T8660] loop7: detected capacity change from 0 to 512
[  373.088295][ T4322] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  373.105174][ T8660] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  373.121379][ T8660] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.261362][ T7915] EXT4-fs (loop7): unmounting filesystem.
[  373.486631][ T4322] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.498614][ T4322] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.911181][ T4322] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  374.937584][ T8672] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1031'.
[  375.183428][ T2169] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  375.380738][ T2169] usb 2-1: Using ep0 maxpacket: 32
[  375.391151][ T2169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.421279][ T2169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.454199][ T2169] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  375.481342][ T2169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.515117][ T2169] usb 2-1: config 0 descriptor??
[  375.550695][ T2169] hub 2-1:0.0: USB hub found
[  375.749873][ T2169] hub 2-1:0.0: 1 port detected
[  375.976300][ T8690] loop6: detected capacity change from 0 to 256
[  376.016243][ T8690] exfat: Deprecated parameter 'namecase'
[  376.097219][ T8690] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  376.167097][ T2169] usb 2-1: USB disconnect, device number 18
[  376.262091][ T4322] usb 7-1: config 0 interface 0 has no altsetting 0
[  376.269095][ T4322] usb 7-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  376.278151][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.297390][ T4322] usb 7-1: config 0 descriptor??
[  376.318465][ T4322] usb 7-1: can't set config #0, error -71
[  376.331204][ T4322] usb 7-1: USB disconnect, device number 14
[  376.639873][ T8699] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  377.383862][ T8701] loop3: detected capacity change from 0 to 4096
[  377.487722][ T8701] EXT4-fs (loop3): Test dummy encryption mode enabled
[  377.625621][ T8706] loop1: detected capacity change from 0 to 128
[  377.848905][ T8706] syz.1.1037: attempt to access beyond end of device
[  377.848905][ T8706] loop1: rw=0, sector=121, nr_sectors = 920 limit=128
[  378.006599][ T8701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  378.530217][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.536547][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  379.581442][ T8715] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1038'.
[  380.460818][ T8730] loop1: detected capacity change from 0 to 512
[  380.523604][ T8701] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  380.537234][ T8730] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  380.578415][ T4279] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  380.680133][ T8730] EXT4-fs (loop1): 1 truncate cleaned up
[  380.685832][ T8730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  380.770061][ T4279] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.779251][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  380.781916][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  380.792631][ T4279] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.803453][ T4279] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.828386][ T4279] usb 5-1: config 0 interface 0 has no altsetting 0
[  380.854428][ T4279] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  380.873969][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.899077][ T4279] usb 5-1: config 0 descriptor??
[  381.203271][ T8752] capability: warning: `syz.3.1044' uses 32-bit capabilities (legacy support in use)
[  381.516359][ T8758] loop3: detected capacity change from 0 to 256
[  381.540089][ T8758] exfat: Deprecated parameter 'namecase'
[  381.544189][ T4279] usbhid 5-1:0.0: can't add hid device: -71
[  381.574230][ T4279] usbhid: probe of 5-1:0.0 failed with error -71
[  381.593711][ T8758] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  381.623756][ T4279] usb 5-1: USB disconnect, device number 18
[  382.953117][ T8768] loop4: detected capacity change from 0 to 512
[  382.995983][ T8766] loop1: detected capacity change from 0 to 256
[  383.036276][ T8766] exfat: Deprecated parameter 'namecase'
[  383.075865][ T8766] exfat: Deprecated parameter 'namecase'
[  383.087811][ T8768] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1050: iget: bad i_size value: 38620345925642
[  383.131223][ T8766] exfat: Deprecated parameter 'namecase'
[  383.148704][ T8768] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1050: couldn't read orphan inode 15 (err -117)
[  383.185237][ T8766] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  383.217788][ T8768] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  383.547742][ T8774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1050: bg 0: block 5: invalid block bitmap
[  383.683292][ T8774] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 188 with error 28
[  384.030588][ T8780] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1051'.
[  385.208269][ T8774] EXT4-fs (loop4): This should not happen!! Data will be lost
[  385.208269][ T8774] 
[  385.217982][ T8774] EXT4-fs (loop4): Total free blocks count 0
[  385.348293][ T8774] EXT4-fs (loop4): Free/Dirty block details
[  385.354300][ T8774] EXT4-fs (loop4): free_blocks=0
[  385.410478][ T8786] loop1: detected capacity change from 0 to 16
[  385.529834][ T8774] EXT4-fs (loop4): dirty_blocks=192
[  385.535097][ T8774] EXT4-fs (loop4): Block reservation details
[  385.571748][ T8774] EXT4-fs (loop4): i_reserved_data_blocks=192
[  385.579055][ T8786] erofs: (device loop1): mounted with root inode @ nid 36.
[  385.596066][ T8788] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  386.682239][ T8804] loop1: detected capacity change from 0 to 16
[  386.719821][ T8804] erofs: (device loop1): mounted with root inode @ nid 36.
[  386.751399][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  387.206195][ T8821] loop4: detected capacity change from 0 to 256
[  387.369124][ T8821] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  387.886754][ T8844] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1064'.
[  389.930932][ T8862] loop4: detected capacity change from 0 to 512
[  389.944327][ T8865] loop6: detected capacity change from 0 to 256
[  389.998122][ T8865] exfat: Deprecated parameter 'namecase'
[  390.002131][ T8862] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.1070: iget: bad i_size value: 38620345925642
[  390.017734][ T8865] exfat: Deprecated parameter 'namecase'
[  390.062698][ T8865] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  390.130736][ T8862] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1070: couldn't read orphan inode 15 (err -117)
[  390.188245][ T8862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  390.353609][ T8872] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1070: bg 0: block 5: invalid block bitmap
[  390.424705][ T8872] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28
[  390.471813][ T8872] EXT4-fs (loop4): This should not happen!! Data will be lost
[  390.471813][ T8872] 
[  390.538413][ T8872] EXT4-fs (loop4): Total free blocks count 0
[  390.558625][ T8872] EXT4-fs (loop4): Free/Dirty block details
[  390.568572][ T8872] EXT4-fs (loop4): free_blocks=0
[  390.574820][ T8872] EXT4-fs (loop4): dirty_blocks=296
[  390.611944][ T8872] EXT4-fs (loop4): Block reservation details
[  390.640106][ T8872] EXT4-fs (loop4): i_reserved_data_blocks=296
[  390.768460][ T4323] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  390.975087][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  390.989130][ T4323] usb 7-1: too many configurations: 151, using maximum allowed: 8
[  391.009882][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.061568][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.091546][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.117929][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.156640][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.195711][ T8900] loop4: detected capacity change from 0 to 512
[  391.196845][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.249176][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.279175][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0
[  391.305366][ T8900] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1076: attempt to clear invalid blocks 2 len 1
[  391.318480][ T4323] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  391.318510][ T4323] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  391.318530][ T4323] usb 7-1: Product: syz
[  391.318545][ T4323] usb 7-1: Manufacturer: syz
[  391.318559][ T4323] usb 7-1: SerialNumber: syz
[  391.324394][ T4323] usb 7-1: config 0 descriptor??
[  391.361900][ T8900] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  391.467519][ T8900] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1076: invalid indirect mapped block 1819239214 (level 0)
[  391.518942][ T8900] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1076: invalid indirect mapped block 1819239214 (level 1)
[  391.778348][ T8900] EXT4-fs (loop4): 1 truncate cleaned up
[  391.897674][ T8900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  392.086335][ T4323] usb 7-1: USB disconnect, device number 15
[  392.434299][ T8900] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.1076: Unrecognised inode hash code 20
[  392.498076][ T8900] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1076: Corrupt directory, running e2fsck is recommended
[  392.540298][ T8919] netlink: 'syz.1.1079': attribute type 4 has an invalid length.
[  392.556792][ T8900] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.1076: path /: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  392.617093][ T8921] netlink: 'syz.1.1079': attribute type 4 has an invalid length.
[  392.656218][ T8900] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1076: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  392.728545][ T8917] EXT4-fs error (device loop4): __ext4_iget:5102: inode #12: block 2: comm syz.4.1076: invalid block
[  392.950579][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  393.154424][ T8932] loop6: detected capacity change from 0 to 40427
[  393.179141][ T8932] F2FS-fs (loop6): invalid crc value
[  393.365259][ T8932] F2FS-fs (loop6): Found nat_bits in checkpoint
[  393.477971][ T8932] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  393.568371][ T4354] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  394.798793][ T8981] usb usb9: usbfs: process 8981 (syz.3.1085) did not claim interface 47 before use
[  395.440534][ T5343] syz-executor: attempt to access beyond end of device
[  395.440534][ T5343] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  395.448470][ T4354] usb 5-1: Using ep0 maxpacket: 16
[  395.485945][ T4354] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  395.506739][ T4354] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  395.525019][ T4354] usb 5-1: config 0 has no interface number 0
[  395.532307][ T4354] usb 5-1: config 0 interface 255 has no altsetting 0
[  395.563530][ T4354] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  395.613757][ T4354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.664568][ T4354] usb 5-1: Product: syz
[  395.685481][ T4354] usb 5-1: Manufacturer: syz
[  395.710538][ T4354] usb 5-1: SerialNumber: syz
[  395.746052][ T4354] r8152-cfgselector 5-1: config 0 descriptor??
[  396.194386][ T4354] r8152-cfgselector 5-1: Unknown version 0x0000
[  396.221663][ T4354] r8152-cfgselector 5-1: USB disconnect, device number 19
[  396.613211][ T9015] netlink: 'syz.3.1092': attribute type 4 has an invalid length.
[  396.801966][ T9016] netlink: 'syz.3.1092': attribute type 4 has an invalid length.
[  396.947810][ T9020] kvm: pic: single mode not supported
[  396.948034][ T9020] kvm: pic: single mode not supported
[  397.236452][ T9035] loop1: detected capacity change from 0 to 512
[  397.276432][ T9035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  397.374819][ T9035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  397.387265][ T9035] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.572460][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  398.105383][ T9028] loop3: detected capacity change from 0 to 40427
[  398.152382][ T9028] F2FS-fs (loop3): invalid crc value
[  398.174286][ T9028] F2FS-fs (loop3): Found nat_bits in checkpoint
[  398.337211][ T9028] F2FS-fs (loop3): Start checkpoint disabled!
[  398.398477][ T9028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  398.734265][ T9064] loop4: detected capacity change from 0 to 512
[  398.786108][ T9064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  398.830644][ T9064] EXT4-fs (loop4): 1 truncate cleaned up
[  398.836412][ T9064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  399.035268][ T9071] overlayfs: conflicting lowerdir path
[  399.148778][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  399.338725][ T9058] loop1: detected capacity change from 0 to 40427
[  399.395310][ T9058] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  399.418636][ T9058] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  399.494170][ T9058] F2FS-fs (loop1): Found nat_bits in checkpoint
[  399.588402][   T14] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  399.642823][ T9058] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  399.652331][ T9058] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  399.783672][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.808036][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.844981][   T14] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  399.884945][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.903761][   T14] usb 4-1: config 0 descriptor??
[  400.008132][ T9097] netlink: 'syz.7.1106': attribute type 4 has an invalid length.
[  400.119468][   T14] usbhid 4-1:0.0: can't add hid device: -71
[  400.120121][ T9100] netlink: 'syz.7.1106': attribute type 4 has an invalid length.
[  400.128119][   T14] usbhid: probe of 4-1:0.0 failed with error -71
[  400.142949][ T9058] overlayfs: failed to resolve './file0': -2
[  400.186145][   T14] usb 4-1: USB disconnect, device number 19
[  400.490229][ T4321] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  400.718466][   T14] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  400.767213][ T9110] loop4: detected capacity change from 0 to 40427
[  400.798365][ T9110] F2FS-fs (loop4): invalid crc value
[  400.890889][ T9110] F2FS-fs (loop4): Found nat_bits in checkpoint
[  400.923780][ T4321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.958631][ T9110] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  400.968370][ T4321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.980842][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.022579][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.098365][   T14] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  401.133396][ T4321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  401.145374][ T4321] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  401.156527][ T4321] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  401.171620][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.188269][ T4321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.204423][ T4321] usb 7-1: config 0 descriptor??
[  401.442372][ T9103] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  402.156772][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.207330][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.245072][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.472342][   T14] usb 4-1: config 0 descriptor??
[  402.541547][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.548533][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.555408][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.577811][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.644901][ T4321] wacom 0003:056A:0331.0008: unknown main item tag 0x0
[  402.704056][ T4321] wacom 0003:056A:0331.0008: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.6-1/input0
[  402.881452][ T4321] usb 7-1: USB disconnect, device number 16
[  403.051809][   T14] usb 4-1: can't set config #0, error -71
[  403.076371][   T14] usb 4-1: USB disconnect, device number 20
[  403.105277][ T4282] syz-executor: attempt to access beyond end of device
[  403.105277][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  403.375116][ T9142] fido_id[9142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  404.207119][ T9170] netlink: 'syz.4.1118': attribute type 4 has an invalid length.
[  404.301363][ T9171] netlink: 'syz.4.1118': attribute type 4 has an invalid length.
[  404.471127][ T9173] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  404.879967][ T9183] loop6: detected capacity change from 0 to 128
[  404.942791][ T9189] loop7: detected capacity change from 0 to 256
[  404.955117][ T9188] loop1: detected capacity change from 0 to 512
[  404.963139][ T9189] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  405.035293][ T9189] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  405.100713][ T9188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  405.117245][ T9188] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.1126: iget: bad i_size value: 2533274857506816
[  405.162255][ T9183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  405.171657][ T9189] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  405.204193][ T9183] System zones: 1-3, 19-19, 35-36
[  405.236431][ T9187] loop4: detected capacity change from 0 to 40427
[  405.270420][ T9187] F2FS-fs (loop4): invalid crc value
[  405.272019][ T9183] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  405.276260][ T9189] exFAT-fs (loop7): failed to load alloc-bitmap
[  405.307383][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  405.319094][ T9183] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.340087][ T9187] F2FS-fs (loop4): Found nat_bits in checkpoint
[  405.395864][ T9187] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  405.404268][ T9189] exFAT-fs (loop7): failed to recognize exfat type
[  405.504504][ T9183] EXT4-fs warning (device loop6): ext4_group_extend:1899: can't read last block, resize aborted
[  405.627705][ T5343] EXT4-fs (loop6): unmounting filesystem.
[  407.485752][ T4282] syz-executor: attempt to access beyond end of device
[  407.485752][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  408.015451][ T9219] netlink: 'syz.6.1137': attribute type 4 has an invalid length.
[  408.210149][ T9223] netlink: 'syz.6.1137': attribute type 4 has an invalid length.
[  408.629249][ T9212] loop3: detected capacity change from 0 to 40427
[  408.654760][ T9212] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64)
[  408.681996][ T9212] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  408.709167][ T9212] F2FS-fs (loop3): invalid crc value
[  408.762413][ T9212] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  408.868410][   T14] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  408.967177][ T9212] F2FS-fs (loop3): recover fsync data on readonly fs
[  408.983814][ T9212] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  408.994181][ T9212] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  409.050119][ T4279] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  409.059338][   T14] usb 7-1: Using ep0 maxpacket: 32
[  409.184263][   T14] usb 7-1: unable to get BOS descriptor or descriptor too short
[  409.310567][   T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.338260][   T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  409.349446][   T14] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  409.378321][   T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.386357][   T14] usb 7-1: Product: syz
[  409.392211][ T4279] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.394257][ T9248] loop1: detected capacity change from 0 to 512
[  409.408337][   T14] usb 7-1: Manufacturer: syz
[  409.414431][   T14] usb 7-1: SerialNumber: syz
[  409.419258][ T4279] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.442912][ T4279] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  409.463902][   T14] usb 7-1: 0:1 : does not exist
[  409.467608][ T9248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.1146: missing EA_INODE flag
[  409.498230][ T9248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1146: error while reading EA inode 2 err=-117
[  409.498281][   T14] usb 7-1: 0:2 : does not exist
[  409.522479][ T9248] EXT4-fs (loop1): 1 orphan inode deleted
[  409.530653][ T9248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  409.558320][ T4279] usb 5-1: config 0 interface 0 has no altsetting 0
[  409.564977][ T4279] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  409.585916][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.648410][ T4279] usb 5-1: config 0 descriptor??
[  409.714638][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  409.881217][   T14] usb 7-1: 3:0: failed to get current value for ch 0 (-22)
[  409.905556][   T14] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3)
[  409.941663][   T14] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3)
[  409.994917][   T14] usb 7-1: 3:0: cannot get min/max values for control 3 (id 3)
[  410.012190][   T14] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3)
[  410.033184][   T14] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3)
[  410.096763][   T14] usb 7-1: USB disconnect, device number 17
[  410.309142][ T4279] usbhid 5-1:0.0: can't add hid device: -71
[  410.315188][ T4279] usbhid: probe of 5-1:0.0 failed with error -71
[  410.330698][ T4321] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  410.340672][ T4279] usb 5-1: USB disconnect, device number 20
[  410.503593][ T9254] loop1: detected capacity change from 0 to 40427
[  410.508349][ T4321] usb 8-1: device descriptor read/64, error -71
[  410.517128][ T9254] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  410.525022][ T9254] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  410.558088][ T9254] F2FS-fs (loop1): invalid crc value
[  410.595644][ T9254] F2FS-fs (loop1): Found nat_bits in checkpoint
[  410.682840][ T9254] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  410.690358][ T9254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  410.778261][ T4321] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  410.808051][ T4288] syz-executor: attempt to access beyond end of device
[  410.808051][ T4288] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  410.824347][ T5023] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  410.834155][ T4322] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  410.847498][ T5023] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  410.942535][ T4321] usb 8-1: device descriptor read/64, error -71
[  411.032163][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.069818][ T9269] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1153'.
[  412.305522][ T4321] usb usb8-port1: attempt power cycle
[  412.378297][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.440920][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  412.513415][ T4322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  412.661065][ T4322] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  412.670348][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.909056][ T4321] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  412.917633][ T4322] usb 7-1: config 0 descriptor??
[  412.923858][ T9260] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  412.949800][ T4321] usb 8-1: device descriptor read/8, error -71
[  413.351360][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.364486][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.392395][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.405930][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.426568][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.446503][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.468977][ T9294] fuse: root generation should be zero
[  413.484412][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.507874][ T4322] wacom 0003:056A:0331.0009: unknown main item tag 0x0
[  413.526787][ T4322] wacom 0003:056A:0331.0009: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.6-1/input0
[  413.540545][ T9297] netlink: 'syz.1.1152': attribute type 4 has an invalid length.
[  413.609334][ T9298] netlink: 'syz.1.1152': attribute type 4 has an invalid length.
[  413.636995][ T4322] usb 7-1: USB disconnect, device number 18
[  413.684047][ T9300] loop4: detected capacity change from 0 to 128
[  413.724146][ T9300] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  413.797819][ T9300] VFS: Lookup of 'file0' in vfat loop4 would have caused loop
[  413.956941][ T9301] fido_id[9301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  415.469888][ T9332] loop1: detected capacity change from 0 to 512
[  415.625910][ T9332] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1172: iget: bad i_size value: 38620345925642
[  415.675607][ T9332] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1172: couldn't read orphan inode 15 (err -117)
[  415.769447][ T9332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  415.867016][ T9336] loop7: detected capacity change from 0 to 256
[  415.877401][ T9337] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1172: bg 0: block 5: invalid block bitmap
[  415.944301][ T9337] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 256 with error 28
[  416.048280][ T9337] EXT4-fs (loop1): This should not happen!! Data will be lost
[  416.048280][ T9337] 
[  416.061029][ T9340] netlink: 'syz.4.1174': attribute type 4 has an invalid length.
[  416.078447][ T9337] EXT4-fs (loop1): Total free blocks count 0
[  416.090786][ T9340] netlink: 'syz.4.1174': attribute type 4 has an invalid length.
[  416.108261][ T9337] EXT4-fs (loop1): Free/Dirty block details
[  416.118359][ T9337] EXT4-fs (loop1): free_blocks=0
[  416.123468][ T9337] EXT4-fs (loop1): dirty_blocks=256
[  416.148295][ T9337] EXT4-fs (loop1): Block reservation details
[  416.174738][ T9337] EXT4-fs (loop1): i_reserved_data_blocks=256
[  416.438342][ T9348] loop7: detected capacity change from 0 to 1024
[  416.486838][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  416.496972][ T9348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002]
[  416.528768][ T9348] System zones: 0-1, 3-36
[  416.575474][ T9348] EXT4-fs error (device loop7): ext4_orphan_get:1435: comm syz.7.1177: bad orphan inode 134217728
[  416.659147][ T9348] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  416.837162][ T7915] EXT4-fs (loop7): unmounting filesystem.
[  417.864423][ T9368] tty tty35: ldisc open failed (-12), clearing slot 34
[  418.002062][ T9370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1182'.
[  420.048307][ T4279] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  420.244075][ T4279] usb 2-1: Using ep0 maxpacket: 16
[  420.252135][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.308392][ T4279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.332545][ T4279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  420.360164][ T4279] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  420.428599][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.446014][ T4279] usb 2-1: config 0 descriptor??
[  420.876254][ T4279] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  420.895964][ T4279] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  420.931475][ T4279] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  420.945237][ T4279] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  420.956373][ T4279] microsoft 0003:045E:07DA.000A: item fetching failed at offset 6/34
[  421.373565][ T9380] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.381110][ T9380] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.628805][ T4279] microsoft 0003:045E:07DA.000A: parse failed
[  421.721872][ T4279] microsoft: probe of 0003:045E:07DA.000A failed with error -22
[  421.749726][ T4279] usb 2-1: USB disconnect, device number 19
[  421.963411][ T9399] loop3: detected capacity change from 0 to 512
[  422.041506][ T9399] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1190: iget: bad i_size value: 38620345925642
[  422.130213][ T9399] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1190: couldn't read orphan inode 15 (err -117)
[  422.238742][ T9399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  422.421352][ T9408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1190: bg 0: block 5: invalid block bitmap
[  422.496124][ T9408] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 172 with error 28
[  422.601597][ T9408] EXT4-fs (loop3): This should not happen!! Data will be lost
[  422.601597][ T9408] 
[  422.652443][ T9408] EXT4-fs (loop3): Total free blocks count 0
[  422.698435][ T9408] EXT4-fs (loop3): Free/Dirty block details
[  422.724873][ T9408] EXT4-fs (loop3): free_blocks=0
[  422.746221][ T9408] EXT4-fs (loop3): dirty_blocks=172
[  422.775607][ T9408] EXT4-fs (loop3): Block reservation details
[  422.795908][ T9408] EXT4-fs (loop3): i_reserved_data_blocks=172
[  423.031614][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  423.032506][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.124394][ T9380] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.559008][ T9380] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.568104][ T9380] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.577871][ T9380] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.586867][ T9380] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  424.626134][ T9427] loop3: detected capacity change from 0 to 16
[  424.658013][ T9427] erofs: (device loop3): mounted with root inode @ nid 36.
[  424.679333][ T4290] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000]
[  424.692819][ T9427] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192]
[  424.711738][   T26] audit: type=1800 audit(1789154731.422:25): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1197" name="file2" dev="loop3" ino=89 res=0 errno=0
[  425.580578][ T9386] netlink: 'syz.4.1186': attribute type 4 has an invalid length.
[  425.694234][ T9387] netlink: 'syz.4.1186': attribute type 4 has an invalid length.
[  426.034084][ T9430] loop7: detected capacity change from 0 to 40427
[  426.099218][ T9430] F2FS-fs (loop7): invalid crc value
[  426.188290][ T9430] F2FS-fs (loop7): Found nat_bits in checkpoint
[  426.244659][ T9430] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  428.245645][ T7915] syz-executor: attempt to access beyond end of device
[  428.245645][ T7915] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  428.265841][ T9449] loop1: detected capacity change from 0 to 512
[  428.354660][ T9449] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1204: iget: bad i_size value: 38620345925642
[  428.436775][ T9449] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1204: couldn't read orphan inode 15 (err -117)
[  428.450100][ T9449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  428.553218][ T9458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1204: bg 0: block 5: invalid block bitmap
[  428.620775][ T9458] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 812 with error 28
[  428.673033][ T9458] EXT4-fs (loop1): This should not happen!! Data will be lost
[  428.673033][ T9458] 
[  428.684692][ T9458] EXT4-fs (loop1): Total free blocks count 0
[  428.700946][ T9458] EXT4-fs (loop1): Free/Dirty block details
[  428.706975][ T9458] EXT4-fs (loop1): free_blocks=0
[  428.716438][ T9458] EXT4-fs (loop1): dirty_blocks=812
[  428.743852][ T9458] EXT4-fs (loop1): Block reservation details
[  428.780937][ T9458] EXT4-fs (loop1): i_reserved_data_blocks=812
[  429.031968][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  429.121159][ T9466] netlink: 'syz.6.1209': attribute type 4 has an invalid length.
[  429.222649][ T9473] netlink: 'syz.6.1209': attribute type 4 has an invalid length.
[  429.266509][ T9476] loop4: detected capacity change from 0 to 256
[  429.645878][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'.
[  429.728352][ T4279] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  430.010519][ T4279] usb 7-1: unable to get BOS descriptor or descriptor too short
[  430.038927][ T4279] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.086570][ T4279] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  430.091958][ T9491] loop1: detected capacity change from 0 to 40427
[  430.105473][ T9491] F2FS-fs (loop1): invalid crc value
[  430.180756][ T9491] F2FS-fs (loop1): Found nat_bits in checkpoint
[  430.184590][ T4279] usb 7-1: string descriptor 0 read error: -22
[  430.252036][ T4279] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  430.297094][ T4279] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.328283][ T9491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  430.371706][ T4279] usb 7-1: selecting invalid altsetting 1
[  430.397939][ T4279] usb 7-1: unit 3 not found!
[  430.506524][ T9500] loop4: detected capacity change from 0 to 40427
[  430.516627][ T9500] F2FS-fs (loop4): invalid crc value
[  430.571434][ T4279] usb 7-1: cannot request logical cluster ID: 0 (err: -5)
[  430.589180][ T4279] usb 7-1: invalid MIXER UNIT descriptor 6
[  430.596795][ T9500] F2FS-fs (loop4): Found nat_bits in checkpoint
[  430.691322][ T9500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  430.709484][ T4279] snd-usb-audio: probe of 7-1:1.0 failed with error -5
[  430.880758][ T4268] udevd[4268]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  430.908557][ T4321] usb 7-1: USB disconnect, device number 19
[  431.479947][ T9514] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1220'.
[  431.903200][ T9519] loop6: detected capacity change from 0 to 256
[  431.946877][ T9519] exfat: Deprecated parameter 'utf8'
[  431.980735][ T9519] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  432.015875][ T9514] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  432.464692][ T9523] netlink: 'syz.7.1223': attribute type 4 has an invalid length.
[  432.552729][ T9525] netlink: 'syz.7.1223': attribute type 4 has an invalid length.
[  432.761343][ T4282] syz-executor: attempt to access beyond end of device
[  432.761343][ T4282] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  433.068381][ T4322] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  433.325958][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.390474][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.493023][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  433.518289][ T4322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  433.546587][ T4322] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  433.564775][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.633736][ T4322] usb 4-1: config 0 descriptor??
[  433.652406][ T9531] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  434.068401][ T4321] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  434.139510][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.146445][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.215126][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.238635][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.266768][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.275692][ T4321] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.307863][ T4321] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.324468][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.341999][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.360533][ T4321] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  434.385009][ T4322] wacom 0003:056A:0331.000B: unknown main item tag 0x0
[  434.422637][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0
[  434.428512][ T9544] loop7: detected capacity change from 0 to 512
[  434.445603][ T4321] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  434.468322][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.476761][ T4322] wacom 0003:056A:0331.000B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0
[  434.495325][ T9544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  434.525851][ T4321] usb 5-1: config 0 descriptor??
[  434.527071][ T9544] System zones: 1-12
[  434.543272][ T9544] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1231: missing EA_INODE flag
[  434.575108][ T9544] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1231: error while reading EA inode 12 err=-117
[  434.604534][ T4322] usb 4-1: USB disconnect, device number 21
[  434.714997][ T9544] EXT4-fs (loop7): 1 orphan inode deleted
[  434.721319][ T9544] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  434.819504][ T7915] EXT4-fs (loop7): unmounting filesystem.
[  434.846225][ T9552] fido_id[9552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  435.010092][ T9554] loop6: detected capacity change from 0 to 256
[  435.205161][ T9558] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1235'.
[  436.439678][ T4321] usbhid 5-1:0.0: can't add hid device: -71
[  436.445712][ T4321] usbhid: probe of 5-1:0.0 failed with error -71
[  436.521253][ T4321] usb 5-1: USB disconnect, device number 21
[  436.730459][ T9561] loop3: detected capacity change from 0 to 256
[  437.307673][ T9564] loop6: detected capacity change from 0 to 40427
[  437.335612][ T9564] F2FS-fs (loop6): invalid crc value
[  437.407375][ T9564] F2FS-fs (loop6): Found nat_bits in checkpoint
[  437.452550][ T9564] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  439.480789][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  439.490366][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  439.498494][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  439.509373][ T5343] syz-executor: attempt to access beyond end of device
[  439.509373][ T5343] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  439.509882][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  439.532815][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  439.558467][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  439.730778][ T9603] loop3: detected capacity change from 0 to 512
[  439.819736][ T9603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  439.827767][ T9603] System zones: 1-12
[  439.861109][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.867462][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  439.954829][ T9603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.1244: missing EA_INODE flag
[  440.028322][ T9603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1244: error while reading EA inode 12 err=-117
[  440.059532][ T9603] EXT4-fs (loop3): 1 orphan inode deleted
[  440.065323][ T9603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  440.360981][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  440.528276][ T9598] chnl_net:caif_netlink_parms(): no params data found
[  440.578403][ T4354] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  440.774848][ T4354] usb 7-1: Using ep0 maxpacket: 8
[  440.782926][ T4354] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.837110][ T4354] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xA7, skipping
[  440.859975][ T4354] usb 7-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  440.878516][ T4354] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  440.888501][ T4354] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8
[  440.911976][ T4354] usb 7-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40
[  440.925268][ T4354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.933414][ T4354] usb 7-1: Product: syz
[  440.937607][ T4354] usb 7-1: Manufacturer: syz
[  440.942450][ T4354] usb 7-1: SerialNumber: syz
[  441.167432][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.184018][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.202837][ T4354] snd-usb-audio: probe of 7-1:1.0 failed with error -2
[  441.204786][ T9598] device bridge_slave_0 entered promiscuous mode
[  441.227085][ T4354] usb 7-1: USB disconnect, device number 20
[  441.275373][ T9598] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.284421][ T4267] udevd[4267]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.292933][ T9598] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.309288][ T4288] syz-executor: attempt to access beyond end of device
[  441.309288][ T4288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  441.386681][ T9598] device bridge_slave_1 entered promiscuous mode
[  441.426890][ T5048] device hsr_slave_0 left promiscuous mode
[  441.450655][ T5048] device hsr_slave_1 left promiscuous mode
[  441.483423][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.495778][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  441.554856][ T5048] device bridge_slave_1 left promiscuous mode
[  441.574672][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.607092][ T5048] device bridge_slave_0 left promiscuous mode
[  441.617709][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.624995][ T4291] Bluetooth: hci0: command 0x0409 tx timeout
[  442.215839][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  442.225734][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  442.233938][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  442.248757][ T4290] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  442.256399][ T4290] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  442.264278][ T4290] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  442.630139][ T9633] loop4: detected capacity change from 0 to 40427
[  442.661025][ T9633] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x40002010)
[  442.685902][ T9633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  442.729229][ T9633] F2FS-fs (loop4): invalid crc value
[  442.767656][ T9633] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241185545270265317)
[  442.992242][ T9674] loop6: detected capacity change from 0 to 512
[  443.058795][ T9633] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  443.065890][ T9633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  443.145009][ T9674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  443.166764][ T9674] System zones: 1-12
[  443.232340][ T9674] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1256: missing EA_INODE flag
[  443.304487][ T9674] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1256: error while reading EA inode 12 err=-117
[  443.345452][ T4282] syz-executor: attempt to access beyond end of device
[  443.345452][ T4282] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  443.384988][ T9674] EXT4-fs (loop6): 1 orphan inode deleted
[  443.385637][ T4282] syz-executor: attempt to access beyond end of device
[  443.385637][ T4282] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  443.391301][ T9674] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  443.432912][ T9675] loop1: detected capacity change from 0 to 40427
[  443.487427][ T9675] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  443.513712][ T9675] F2FS-fs (loop1): invalid crc value
[  443.531108][ T9675] F2FS-fs (loop1): invalid crc value
[  443.539746][ T9675] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  443.550006][ T5343] EXT4-fs (loop6): unmounting filesystem.
[  443.584147][ T4591] kworker/u4:12: attempt to access beyond end of device
[  443.584147][ T4591] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  443.665479][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  443.700001][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  443.798742][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  443.892367][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.942136][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.240778][ T5048] bond0 (unregistering): Released all slaves
[  444.338444][ T4291] Bluetooth: hci3: command 0x0409 tx timeout
[  444.419593][ T9598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.463032][ T9598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.524250][ T9598] team0: Port device team_slave_0 added
[  444.577020][ T9598] team0: Port device team_slave_1 added
[  444.722436][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.756527][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.808261][ T9598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.853929][ T9598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.884478][ T9598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.918587][ T9598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.051984][ T9598] device hsr_slave_0 entered promiscuous mode
[  445.100267][ T9598] device hsr_slave_1 entered promiscuous mode
[  445.136897][ T9598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  445.155259][ T9598] Cannot create hsr debugfs directory
[  445.192330][ T9647] chnl_net:caif_netlink_parms(): no params data found
[  445.665681][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.673460][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.691394][ T9647] device bridge_slave_0 entered promiscuous mode
[  445.727452][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.736808][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.752736][ T9647] device bridge_slave_1 entered promiscuous mode
[  445.778328][ T4291] Bluetooth: hci0: command 0x040f tx timeout
[  445.925538][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.965849][ T9712] loop1: detected capacity change from 0 to 512
[  445.975090][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.030631][ T9712] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  446.077082][ T5048] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.185054][ T4290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  446.208618][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  446.225809][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  446.234855][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  446.245265][ T5023] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  446.264742][ T4293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  446.270548][ T5048] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.273368][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  446.308574][ T9647] team0: Port device team_slave_0 added
[  446.316479][ T9647] team0: Port device team_slave_1 added
[  446.332994][ T9717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  446.333007][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  446.351727][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  446.360146][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  446.368291][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  446.376484][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  446.419350][ T4293] Bluetooth: hci3: command 0x041b tx timeout
[  446.435292][ T9720] loop1: detected capacity change from 0 to 512
[  446.458380][ T9720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  446.459080][ T5048] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.476773][ T9720] System zones: 1-12
[  446.482728][ T9720] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1267: missing EA_INODE flag
[  446.515867][ T9720] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1267: error while reading EA inode 12 err=-117
[  446.549707][ T9720] EXT4-fs (loop1): 1 orphan inode deleted
[  446.555500][ T9720] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  446.660228][ T5048] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.699826][ T9598] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  446.724151][ T9598] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  446.742867][ T9598] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  446.784262][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.791644][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.826376][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.126793][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.378432][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.445228][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  447.568663][ T9647] device hsr_slave_0 entered promiscuous mode
[  447.599626][ T9647] device hsr_slave_1 entered promiscuous mode
[  447.606681][ T9647] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  447.632905][ T9647] Cannot create hsr debugfs directory
[  447.858682][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[  448.067351][ T9647] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  448.097846][ T9647] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  448.126556][ T9647] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  448.167188][ T9647] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  448.392257][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.428287][ T4293] Bluetooth: hci1: command 0x0409 tx timeout
[  448.435100][ T4293] Bluetooth: hci2: command 0x0409 tx timeout
[  448.474803][ T9647] 8021q: adding VLAN 0 to HW filter on device team0
[  448.498593][ T4293] Bluetooth: hci3: command 0x040f tx timeout
[  448.562710][ T9598] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  448.614568][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  448.624726][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  448.636761][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  448.676931][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  448.695038][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  448.707302][ T9739] loop1: detected capacity change from 0 to 512
[  448.707873][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  448.726726][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.733925][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.749379][ T9739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  448.757903][ T9739] System zones: 1-12
[  448.763580][ T9739] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1268: missing EA_INODE flag
[  448.763615][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  448.783807][ T9739] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1268: error while reading EA inode 12 err=-117
[  448.790413][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  448.797290][ T9739] EXT4-fs (loop1): 1 orphan inode deleted
[  448.810734][ T9739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  448.815421][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.826742][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.861713][ T4288] EXT4-fs (loop1): unmounting filesystem.
[  448.868127][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  448.877608][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  448.886868][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  448.896525][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  448.912013][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  448.922134][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  448.997116][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  449.015038][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  449.025686][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  449.042750][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  449.052277][ T9647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  449.228370][ T4354] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  449.341006][ T5048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.371926][ T9598] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.404323][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  449.422671][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  449.430129][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.455137][ T9598] 8021q: adding VLAN 0 to HW filter on device team0
[  449.458322][ T4354] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  449.503480][ T5048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.538506][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  449.547196][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  449.558294][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.585616][ T4354] usb 2-1: config 0 descriptor??
[  449.598804][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.605925][ T5034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.639651][ T9713] chnl_net:caif_netlink_parms(): no params data found
[  449.684327][ T5048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.698059][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  449.719421][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  449.738673][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  449.749044][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.756205][ T5034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.764380][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  449.776033][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  449.805998][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  449.827908][ T4354] usbhid 2-1:0.0: can't add hid device: -71
[  449.839090][ T4354] usbhid: probe of 2-1:0.0 failed with error -71
[  449.847933][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  449.871412][ T4354] usb 2-1: USB disconnect, device number 20
[  449.886455][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  449.930623][ T5048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.958867][ T9715] chnl_net:caif_netlink_parms(): no params data found
[  449.996356][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  450.013447][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  450.056497][ T9598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  450.093180][ T9598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  450.137142][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  450.146377][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  450.173106][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  450.202293][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  450.230227][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  450.248018][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  450.311994][ T9647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.384445][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  450.458465][ T4354] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  450.509230][ T4293] Bluetooth: hci2: command 0x041b tx timeout
[  450.515332][ T4293] Bluetooth: hci1: command 0x041b tx timeout
[  450.580019][ T4293] Bluetooth: hci3: command 0x0419 tx timeout
[  450.651378][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.659538][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.679048][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.696749][ T9713] device bridge_slave_0 entered promiscuous mode
[  450.708436][ T4354] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  450.717509][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.741706][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.749583][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.775407][ T4354] usb 2-1: config 0 descriptor??
[  450.780628][ T9713] device bridge_slave_1 entered promiscuous mode
[  450.807627][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.815847][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.833526][ T9715] device bridge_slave_0 entered promiscuous mode
[  450.859677][ T9713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.878412][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.889158][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.915413][ T9715] device bridge_slave_1 entered promiscuous mode
[  450.963206][ T9713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.038105][ T9715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.098548][ T9715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.137018][ T5048] tipc: Left network mode
[  451.177442][ T9713] team0: Port device team_slave_0 added
[  451.213026][ T5048] tipc: Left network mode
[  451.216054][ T9715] team0: Port device team_slave_0 added
[  451.241008][ T9713] team0: Port device team_slave_1 added
[  451.272985][ T9715] team0: Port device team_slave_1 added
[  451.350888][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  451.368992][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  451.388153][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.516088][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.533668][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.564442][ T9713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.587752][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.605633][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.632591][ T4354] aiptek 2-1:0.0: Aiptek using 400 ms programming speed
[  451.668042][ T9713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  451.668493][ T4354] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21
[  451.689751][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  451.697251][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  451.716427][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.737739][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.836706][ T9715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.936260][ T9715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  451.948994][ T9715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.984569][ T9715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.016686][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  452.050493][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  452.079469][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  452.100088][  T126] usb 2-1: USB disconnect, device number 21
[  452.100245][    C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  452.116322][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  452.126338][ T9647] device veth0_vlan entered promiscuous mode
[  452.257581][ T9647] device veth1_vlan entered promiscuous mode
[  452.383880][ T9713] device hsr_slave_0 entered promiscuous mode
[  452.400491][ T9713] device hsr_slave_1 entered promiscuous mode
[  452.407263][ T9713] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.421030][ T9713] Cannot create hsr debugfs directory
[  452.488427][ T9715] device hsr_slave_0 entered promiscuous mode
[  452.495108][ T9715] device hsr_slave_1 entered promiscuous mode
[  452.502115][ T9715] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.510005][ T9715] Cannot create hsr debugfs directory
[  452.521192][ T9647] device veth0_macvtap entered promiscuous mode
[  452.551544][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  452.560239][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  452.571486][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  452.581261][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  452.588413][ T4293] Bluetooth: hci1: command 0x040f tx timeout
[  452.595179][ T4293] Bluetooth: hci2: command 0x040f tx timeout
[  452.606202][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  452.616497][ T9647] device veth1_macvtap entered promiscuous mode
[  452.783266][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.802862][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.825021][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  452.838011][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.857740][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  452.865679][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  452.883240][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  452.896364][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  452.914478][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  452.925988][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  453.039214][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.078254][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.093616][ T9647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  453.128282][ T9647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  453.145422][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.179455][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  453.198465][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  453.209376][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  453.249678][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  453.304945][ T9598] device veth0_vlan entered promiscuous mode
[  453.427047][ T9647] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.441344][ T9647] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.452274][ T9647] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.474753][ T9647] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.492417][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  453.515099][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  453.532842][ T9598] device veth1_vlan entered promiscuous mode
[  453.586367][ T9831] kvm: pic: non byte write
[  453.966941][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  453.980879][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  454.091305][ T9598] device veth0_macvtap entered promiscuous mode
[  454.169050][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.172037][ T9598] device veth1_macvtap entered promiscuous mode
[  454.180741][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.274144][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  454.283401][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  454.294291][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  454.356200][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  454.368151][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.382220][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  454.394682][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.407566][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  454.427438][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.443860][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.453402][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.474287][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.548449][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  454.573003][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  454.585501][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  454.596859][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  454.628300][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.638615][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  454.649944][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.668324][ T4293] Bluetooth: hci2: command 0x0419 tx timeout
[  454.672914][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  454.674339][ T4293] Bluetooth: hci1: command 0x0419 tx timeout
[  454.685130][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  454.703188][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.714564][ T9598] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.723407][ T9598] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.736716][ T9598] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.746468][ T9598] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.787168][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  454.811127][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  455.178262][ T4324] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  455.364003][ T5048] device hsr_slave_0 left promiscuous mode
[  455.527847][ T5048] device hsr_slave_1 left promiscuous mode
[  455.594757][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.669452][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.754232][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.820523][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.902023][ T5048] device bridge_slave_1 left promiscuous mode
[  456.008441][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.011102][ T4324] usb 2-1: Using ep0 maxpacket: 32
[  456.034844][ T4324] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  456.043704][ T5048] device bridge_slave_0 left promiscuous mode
[  456.049032][ T4324] usb 2-1: config 0 has no interface number 0
[  456.055893][ T4324] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.058475][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.067514][ T4324] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.091694][ T4324] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  456.102702][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.123521][ T4324] usb 2-1: config 0 descriptor??
[  456.129519][ T5048] device hsr_slave_0 left promiscuous mode
[  456.142394][ T5048] device hsr_slave_1 left promiscuous mode
[  456.159104][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  456.166597][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.174801][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  456.182843][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  456.193446][ T5048] device bridge_slave_1 left promiscuous mode
[  456.202480][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.211912][ T5048] device bridge_slave_0 left promiscuous mode
[  456.218132][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.267160][ T5048] device veth1_macvtap left promiscuous mode
[  456.273408][ T5048] device veth0_macvtap left promiscuous mode
[  456.279873][ T5048] device veth1_vlan left promiscuous mode
[  456.285699][ T5048] device veth0_vlan left promiscuous mode
[  456.296242][ T5048] device veth1_macvtap left promiscuous mode
[  456.302523][ T5048] device veth0_macvtap left promiscuous mode
[  456.309028][ T5048] device veth0_vlan left promiscuous mode
[  456.744910][ T4324] uclogic 0003:28BD:0094.000C: failed retrieving string descriptor #100: -71
[  456.754068][ T4324] uclogic 0003:28BD:0094.000C: failed retrieving pen parameters: -71
[  456.762533][ T4324] uclogic 0003:28BD:0094.000C: pen probing failed: -71
[  456.770476][ T4324] uclogic 0003:28BD:0094.000C: failed probing parameters: -71
[  456.777986][ T4324] uclogic: probe of 0003:28BD:0094.000C failed with error -71
[  456.805848][ T4324] usb 2-1: USB disconnect, device number 22
[  457.133428][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  457.180273][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  457.223081][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.266975][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  457.459181][ T9864] futex_wake_op: syz.1.1277 tries to shift op by 144; fix this program
[  457.498385][ T9864] loop1: detected capacity change from 0 to 256
[  457.542547][ T9864] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  457.617963][   T26] audit: type=1800 audit(1789154764.322:26): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1277" name="file1" dev="loop1" ino=1048642 res=0 errno=0
[  458.379341][ T5048] bond0 (unregistering): Released all slaves
[  459.030980][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  459.073985][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  459.115255][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.162400][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.455038][ T5048] bond0 (unregistering): Released all slaves
[  459.769068][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.776939][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.779799][ T4591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.793208][ T4591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.821968][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  459.937526][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  460.132849][ T4354] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  460.280510][ T9713] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  460.300443][ T9713] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  460.320399][ T9713] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  460.364251][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.383787][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.396075][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  460.414690][ T4354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  460.426985][ T4354] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  460.443989][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.456893][ T9713] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  460.472301][ T4354] usb 2-1: config 0 descriptor??
[  460.488731][ T9870] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  460.644570][ T9715] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  460.657100][ T9884] loop8: detected capacity change from 0 to 512
[  460.719952][ T9884] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  460.746301][ T9715] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  460.767640][ T9715] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  460.789932][ T9715] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  460.810964][ T9884] EXT4-fs (loop8): 1 truncate cleaned up
[  460.816651][ T9884] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  460.865549][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.931414][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  460.967560][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  460.969628][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  460.994890][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  461.008507][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.016489][ T9713] 8021q: adding VLAN 0 to HW filter on device team0
[  461.055989][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  461.066023][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.073929][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  461.078365][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.095746][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.102853][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.103642][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.109990][ T5032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.120965][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  461.167298][ T4354] wacom 0003:056A:0331.000D: unknown main item tag 0x0
[  461.168794][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  461.185735][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  461.210419][ T4354] wacom 0003:056A:0331.000D: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  461.219079][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.228648][ T5032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.244214][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  461.326747][ T4354] usb 2-1: USB disconnect, device number 23
[  461.345834][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  461.404858][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  461.421728][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  461.436890][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  461.446602][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  461.462521][ T9713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  461.463374][ T9894] fido_id[9894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  461.475325][ T9713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  461.513363][ T9715] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.523987][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  461.535130][ T9598] EXT4-fs (loop8): unmounting filesystem.
[  461.543267][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  461.557574][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  461.590143][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  461.620581][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  461.674910][ T9715] 8021q: adding VLAN 0 to HW filter on device team0
[  461.712319][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  461.748664][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  461.768869][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  461.833310][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  461.860489][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  461.879471][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.886620][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.982596][ T5048] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.035598][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  462.161350][ T5048] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.217541][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  462.243910][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  462.289665][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.296845][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.360638][ T5032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  462.422551][ T5048] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.480521][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  462.513910][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  462.548057][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  462.582382][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  462.595108][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  462.595688][ T9713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.616797][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  462.625402][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  462.634885][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  462.642244][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  462.750151][ T5048] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.818957][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  462.836366][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  462.907585][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  462.929835][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  462.947882][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  462.977881][ T9715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  463.021570][ T9715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  463.048665][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  463.062251][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  463.072211][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  463.087950][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  463.097446][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  463.730584][ T9917] chnl_net:caif_netlink_parms(): no params data found
[  464.744454][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  464.856887][ T9953] loop9: detected capacity change from 0 to 512
[  464.864592][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  464.874452][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  464.921111][ T9917] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.930420][ T9953] EXT4-fs error (device loop9): ext4_orphan_get:1409: inode #15: comm syz.9.1296: iget: bad i_size value: 38620345925642
[  464.943164][ T4322] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  464.951893][ T9917] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.968284][ T9953] EXT4-fs error (device loop9): ext4_orphan_get:1414: comm syz.9.1296: couldn't read orphan inode 15 (err -117)
[  464.985808][ T9917] device bridge_slave_0 entered promiscuous mode
[  464.993942][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  464.999131][ T9953] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  465.003554][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  465.049077][ T9713] device veth0_vlan entered promiscuous mode
[  465.078838][ T9917] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.085957][ T9917] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.104484][ T9647] EXT4-fs (loop9): unmounting filesystem.
[  465.108303][ T9917] device bridge_slave_1 entered promiscuous mode
[  465.118422][ T4322] usb 2-1: device descriptor read/64, error -71
[  465.138157][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  465.149238][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  465.157719][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  465.165597][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  465.176127][ T9715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  465.201915][ T9713] device veth1_vlan entered promiscuous mode
[  465.255889][ T9917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.272965][ T9917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.332965][ T9917] team0: Port device team_slave_0 added
[  465.349799][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  465.359077][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  465.370838][ T9713] device veth0_macvtap entered promiscuous mode
[  465.389719][ T9917] team0: Port device team_slave_1 added
[  465.418469][ T4322] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  465.437264][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.445451][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.473559][ T9917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.486743][ T9713] device veth1_macvtap entered promiscuous mode
[  465.508429][   T41] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  465.521270][ T9917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.528731][ T9917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.560219][ T9917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.604606][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  465.610254][ T4322] usb 2-1: device descriptor read/64, error -71
[  465.613167][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  465.627004][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  465.635871][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  465.689906][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.701214][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.711956][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.723435][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.736601][   T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.748856][ T4322] usb usb2-port1: attempt power cycle
[  465.756608][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.764086][   T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.774069][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  465.782080][   T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  465.793799][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  465.802848][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  465.810936][   T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1040, setting to 1024
[  465.822126][   T41] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  465.822982][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  465.831581][   T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.855783][   T41] usb 10-1: config 0 descriptor??
[  465.863925][ T9958] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  465.867676][ T9917] device hsr_slave_0 entered promiscuous mode
[  465.879533][ T9917] device hsr_slave_1 entered promiscuous mode
[  465.888910][ T9917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  465.896505][ T9917] Cannot create hsr debugfs directory
[  465.902951][ T9715] device veth0_vlan entered promiscuous mode
[  465.914008][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  465.922457][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  465.997238][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.008002][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.018593][ T9713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.029359][ T9713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.041201][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.067646][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  466.077819][ T2898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  466.093988][ T9715] device veth1_vlan entered promiscuous mode
[  466.126508][ T9713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.136348][ T9713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.145750][ T9713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.154610][ T9713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.181517][ T4322] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  466.242324][ T4322] usb 2-1: device descriptor read/8, error -71
[  466.296855][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.304614][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.311760][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.333546][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.341016][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.347912][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.355258][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.362693][   T41] wacom 0003:056A:0331.000E: unknown main item tag 0x0
[  466.371990][   T41] wacom 0003:056A:0331.000E: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.9-1/input0
[  466.385956][ T5048] device hsr_slave_0 left promiscuous mode
[  466.392856][ T5048] device hsr_slave_1 left promiscuous mode
[  466.400911][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.408612][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.416198][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.424053][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.431739][ T5048] device bridge_slave_1 left promiscuous mode
[  466.437919][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.446169][ T5048] device bridge_slave_0 left promiscuous mode
[  466.456873][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.495751][ T5048] device veth1_macvtap left promiscuous mode
[  466.502723][ T5048] device veth0_macvtap left promiscuous mode
[  466.505378][ T9685] usb 10-1: USB disconnect, device number 2
[  466.516861][ T5048] device veth1_vlan left promiscuous mode
[  466.523022][ T4322] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  466.537532][ T5048] device veth0_vlan left promiscuous mode
[  466.570345][ T4322] usb 2-1: device descriptor read/8, error -71
[  466.590618][ T9959] fido_id[9959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  466.703704][ T4322] usb usb2-port1: unable to enumerate USB device
[  466.823533][ T4293] Bluetooth: hci0: command 0x041b tx timeout
[  467.097571][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  467.162683][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  467.204769][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  467.269434][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  467.732638][ T5048] bond0 (unregistering): Released all slaves
[  468.083947][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  468.127484][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  468.203939][ T9715] device veth0_macvtap entered promiscuous mode
[  468.268027][ T9715] device veth1_macvtap entered promiscuous mode
[  468.454114][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.471470][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.483884][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.494454][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.523244][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.600882][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  468.616108][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  468.639057][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  468.661867][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.681259][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.697872][ T9715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.708805][ T9715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.720868][ T9715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.763428][ T9981] overlayfs: failed to resolve './file0': -2
[  468.883714][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  468.896934][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  468.905298][ T4293] Bluetooth: hci0: command 0x040f tx timeout
[  468.916464][ T4322] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  469.136893][ T4322] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.172603][ T4322] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.233295][ T4322] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  469.301780][ T4322] usb 2-1: config 0 interface 0 has no altsetting 0
[  469.351384][ T4322] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  469.399921][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.494594][ T4322] usb 2-1: config 0 descriptor??
[  470.077201][ T9715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.106602][ T9715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.117878][ T4322] usbhid 2-1:0.0: can't add hid device: -71
[  470.142278][ T4322] usbhid: probe of 2-1:0.0 failed with error -71
[  470.144848][ T9715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.157535][ T9715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.179323][ T4322] usb 2-1: USB disconnect, device number 28
[  470.216890][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.249004][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.391100][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  470.628799][ T5028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.646860][ T5028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.667968][ T5037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.698269][ T5037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.749085][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  470.771332][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  470.836563][ T5034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.860819][ T5034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.938492][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  470.966756][T10004] loop9: detected capacity change from 0 to 256
[  470.970285][T10006] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1272'.
[  470.982404][ T4293] Bluetooth: hci0: command 0x0419 tx timeout
[  471.018868][T10006] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[  471.132249][ T9917] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  471.176473][ T9917] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  471.231364][ T9917] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  471.269684][ T9917] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  471.326018][T10013] loop5: detected capacity change from 0 to 512
[  471.461075][T10013] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.1308: iget: bad i_size value: 38620345925642
[  471.578860][T10022] loop0: detected capacity change from 0 to 512
[  471.590620][T10022] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  471.728304][T10013] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1308: couldn't read orphan inode 15 (err -117)
[  472.072855][T10013] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  472.465923][T10028] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1308: bg 0: block 5: invalid block bitmap
[  472.589304][ T9917] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.633680][T10028] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 160 with error 28
[  472.682600][T10030] overlayfs: failed to resolve './file0': -2
[  472.718793][T10028] EXT4-fs (loop5): This should not happen!! Data will be lost
[  472.718793][T10028] 
[  472.772471][T10028] EXT4-fs (loop5): Total free blocks count 0
[  472.823105][T10028] EXT4-fs (loop5): Free/Dirty block details
[  472.874799][T10028] EXT4-fs (loop5): free_blocks=0
[  472.905141][T10028] EXT4-fs (loop5): dirty_blocks=164
[  472.945614][T10028] EXT4-fs (loop5): Block reservation details
[  472.986103][T10028] EXT4-fs (loop5): i_reserved_data_blocks=164
[  473.488812][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  473.518413][   T41] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  473.534966][ T9713] EXT4-fs (loop5): unmounting filesystem.
[  473.562104][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  473.684194][ T9917] 8021q: adding VLAN 0 to HW filter on device team0
[  473.773191][   T41] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.901332][   T41] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.060520][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  474.070396][   T41] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  474.101100][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  474.115185][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.122396][ T5027] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.187357][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  474.216022][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  474.246151][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.253791][ T5027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  474.348727][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  474.402190][T10048] loop5: detected capacity change from 0 to 40427
[  474.410003][   T41] usb 10-1: config 0 interface 0 has no altsetting 0
[  474.416750][   T41] usb 10-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  474.426612][   T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.436636][T10048] F2FS-fs (loop5): invalid crc value
[  474.445406][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  474.463288][T10055] ------------[ cut here ]------------
[  474.470234][T10055] WARNING: CPU: 1 PID: 10055 at mm/page_alloc.c:5634 __alloc_pages+0x2fe/0x4f0
[  474.479466][T10055] Modules linked in:
[  474.483395][T10055] CPU: 1 PID: 10055 Comm: syz.0.1318 Not tainted syzkaller #0
[  474.490936][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  474.501471][T10055] RIP: 0010:__alloc_pages+0x2fe/0x4f0
[  474.506893][T10055] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 9f 8f 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  474.526605][T10055] RSP: 0018:ffffc90003f17a20 EFLAGS: 00010246
[  474.532755][T10055] RAX: ffffc90003f17a00 RBX: 1ffff920007e2f48 RCX: 0000000000000000
[  474.540807][T10055] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003f17a88
[  474.548866][T10055] RBP: ffffc90003f17b10 R08: ffffc90003f17a87 R09: ffffc90003f17a60
[  474.556881][T10055] R10: dffffc0000000000 R11: fffff520007e2f51 R12: 0000000000000013
[  474.564927][T10055] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  474.572973][T10055] FS:  00007f521f5dc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  474.581987][T10055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  474.588627][T10055] CR2: 000000110c3da8f5 CR3: 0000000064706000 CR4: 00000000003506e0
[  474.596637][T10055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  474.604663][T10055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  474.612688][T10055] Call Trace:
[  474.615977][T10055]  <TASK>
[  474.618951][T10055]  ? aa_file_perm+0x112/0xf00
[  474.623751][T10055]  ? zone_statistics+0x170/0x170
[  474.628773][T10055]  __kmalloc_large_node+0x8c/0x1f0
[  474.633999][T10055]  ? bitmap_parse_user+0x1f/0x60
[  474.635246][T10059] overlayfs: upper fs does not support file handles, falling back to index=off.
[  474.638999][T10055]  __kmalloc_node_track_caller+0x10f/0x240
[  474.639087][T10055]  memdup_user_nul+0x28/0xf0
[  474.639175][T10055]  bitmap_parse_user+0x1f/0x60
[  474.639203][T10055]  write_irq_affinity+0x1bc/0x310
[  474.669023][T10055]  ? irq_affinity_proc_show+0x100/0x100
[  474.674602][T10055]  ? rcu_read_lock_any_held+0xb0/0x130
[  474.680189][T10055]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  474.685501][T10055]  ? end_current_label_crit_section+0x14b/0x170
[  474.691807][T10055]  ? irq_affinity_proc_open+0x50/0x50
[  474.697201][T10055]  proc_reg_write+0x1dd/0x2c0
[  474.701971][T10055]  ? proc_reg_llseek+0x280/0x280
[  474.706946][T10055]  vfs_write+0x2dc/0x9a0
[  474.711326][T10055]  ? file_end_write+0x250/0x250
[  474.716218][T10055]  ? __fget_files+0x28/0x460
[  474.720893][T10055]  ? __fget_files+0x3fc/0x460
[  474.725610][T10055]  ? __fdget_pos+0x2ae/0x360
[  474.730260][T10055]  ? ksys_write+0x70/0x260
[  474.734713][T10055]  ksys_write+0x14d/0x260
[  474.739114][T10055]  ? __ia32_sys_read+0x80/0x80
[  474.743917][T10055]  ? lockdep_hardirqs_on+0x94/0x140
[  474.749277][T10055]  do_syscall_64+0x4c/0xa0
[  474.753733][T10055]  ? clear_bhb_loop+0x60/0xb0
[  474.758563][T10055]  ? clear_bhb_loop+0x60/0xb0
[  474.763269][T10055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  474.769221][T10055] RIP: 0033:0x7f521e79e159
[  474.773664][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.793330][T10055] RSP: 002b:00007f521f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  474.801812][T10055] RAX: ffffffffffffffda RBX: 00007f521ea25fa0 RCX: 00007f521e79e159
[  474.809869][T10055] RDX: 00000000fffffcf0 RSI: 0000000000000000 RDI: 0000000000000004
[  474.817857][T10055] RBP: 00007f521e83503b R08: 0000000000000000 R09: 0000000000000000
[  474.825908][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.833943][T10055] R13: 00007f521ea26038 R14: 00007f521ea25fa0 R15: 00007ffd76fbbb68
[  474.842006][T10055]  </TASK>
[  474.845061][T10055] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  474.852351][T10055] CPU: 1 PID: 10055 Comm: syz.0.1318 Not tainted syzkaller #0
[  474.859808][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  474.869868][T10055] Call Trace:
[  474.873146][T10055]  <TASK>
[  474.876073][T10055]  dump_stack_lvl+0x188/0x24e
[  474.880759][T10055]  ? memcpy+0x3c/0x60
[  474.884843][T10055]  ? show_regs_print_info+0x12/0x12
[  474.890062][T10055]  ? load_image+0x410/0x410
[  474.894669][T10055]  panic+0x2d3/0x710
[  474.898597][T10055]  ? bpf_jit_dump+0xd0/0xd0
[  474.903124][T10055]  __warn+0x2f8/0x4f0
[  474.907106][T10055]  ? __alloc_pages+0x2fe/0x4f0
[  474.911887][T10055]  ? __alloc_pages+0x2fe/0x4f0
[  474.916658][T10055]  report_bug+0x2ba/0x4f0
[  474.921094][T10055]  ? __alloc_pages+0x2fe/0x4f0
[  474.925866][T10055]  handle_bug+0x3a/0x70
[  474.930027][T10055]  exc_invalid_op+0x16/0x40
[  474.934534][T10055]  asm_exc_invalid_op+0x16/0x20
[  474.939383][T10055] RIP: 0010:__alloc_pages+0x2fe/0x4f0
[  474.944761][T10055] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 9f 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 9f 8f 44 0c 01 <0f> 0b eb a4 a9 00 00 08 00 8b 74 24 04 75 3e 44 89 f1 81 e1 7f ff
[  474.964400][T10055] RSP: 0018:ffffc90003f17a20 EFLAGS: 00010246
[  474.970474][T10055] RAX: ffffc90003f17a00 RBX: 1ffff920007e2f48 RCX: 0000000000000000
[  474.978447][T10055] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003f17a88
[  474.986421][T10055] RBP: ffffc90003f17b10 R08: ffffc90003f17a87 R09: ffffc90003f17a60
[  474.994397][T10055] R10: dffffc0000000000 R11: fffff520007e2f51 R12: 0000000000000013
[  475.002366][T10055] R13: 0000000000000000 R14: 0000000000040cc0 R15: dffffc0000000000
[  475.010346][T10055]  ? aa_file_perm+0x112/0xf00
[  475.015031][T10055]  ? zone_statistics+0x170/0x170
[  475.019979][T10055]  __kmalloc_large_node+0x8c/0x1f0
[  475.025089][T10055]  ? bitmap_parse_user+0x1f/0x60
[  475.030022][T10055]  __kmalloc_node_track_caller+0x10f/0x240
[  475.035838][T10055]  memdup_user_nul+0x28/0xf0
[  475.040435][T10055]  bitmap_parse_user+0x1f/0x60
[  475.045195][T10055]  write_irq_affinity+0x1bc/0x310
[  475.050214][T10055]  ? irq_affinity_proc_show+0x100/0x100
[  475.055756][T10055]  ? rcu_read_lock_any_held+0xb0/0x130
[  475.061223][T10055]  ? rcu_read_lock_bh_held+0xf0/0xf0
[  475.066513][T10055]  ? end_current_label_crit_section+0x14b/0x170
[  475.072762][T10055]  ? irq_affinity_proc_open+0x50/0x50
[  475.078130][T10055]  proc_reg_write+0x1dd/0x2c0
[  475.082821][T10055]  ? proc_reg_llseek+0x280/0x280
[  475.087791][T10055]  vfs_write+0x2dc/0x9a0
[  475.092041][T10055]  ? file_end_write+0x250/0x250
[  475.096896][T10055]  ? __fget_files+0x28/0x460
[  475.101485][T10055]  ? __fget_files+0x3fc/0x460
[  475.106172][T10055]  ? __fdget_pos+0x2ae/0x360
[  475.110760][T10055]  ? ksys_write+0x70/0x260
[  475.115191][T10055]  ksys_write+0x14d/0x260
[  475.119524][T10055]  ? __ia32_sys_read+0x80/0x80
[  475.124292][T10055]  ? lockdep_hardirqs_on+0x94/0x140
[  475.129487][T10055]  do_syscall_64+0x4c/0xa0
[  475.133906][T10055]  ? clear_bhb_loop+0x60/0xb0
[  475.138585][T10055]  ? clear_bhb_loop+0x60/0xb0
[  475.143265][T10055]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  475.149156][T10055] RIP: 0033:0x7f521e79e159
[  475.153571][T10055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.173188][T10055] RSP: 002b:00007f521f5dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  475.181599][T10055] RAX: ffffffffffffffda RBX: 00007f521ea25fa0 RCX: 00007f521e79e159
[  475.189563][T10055] RDX: 00000000fffffcf0 RSI: 0000000000000000 RDI: 0000000000000004
[  475.197526][T10055] RBP: 00007f521e83503b R08: 0000000000000000 R09: 0000000000000000
[  475.205486][T10055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.213452][T10055] R13: 00007f521ea26038 R14: 00007f521ea25fa0 R15: 00007ffd76fbbb68
[  475.221429][T10055]  </TASK>
[  475.224565][T10055] Kernel Offset: disabled
[  475.228941][T10055] Rebooting in 86400 seconds..