last executing test programs:

3m7.202313737s ago: executing program 2 (id=1497):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x6, 0xca1, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2)
close(r3)
socket(0x40000000015, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r5, 0x10042}, 0x80, &(0x7f0000004600)=[{&(0x7f00000003c0)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f0000000580)="84db0b9ef1cafdab", 0x8}, {&(0x7f00000005c0)="f8dbb89bfc5f187cca436e143b54aedd2c3332", 0x13}], 0x3}, 0x24004085)

3m6.378912367s ago: executing program 2 (id=1502):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}}, 0x0)

3m5.948403606s ago: executing program 2 (id=1504):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x43)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x121003, 0x1ac)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3m5.635201508s ago: executing program 2 (id=1506):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

3m5.151722512s ago: executing program 2 (id=1508):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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")
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x86000, 0x0)
mkdir(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c757466383d302c757365667265652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c636865636b3d6e6f726d616c2c636f6465706167653d3836342c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c696f636861727365743d6370313235302c757466383d302c726f6469722c0066e5db53ca7135705ccaf228ef5b554bdb65bdf78d42ab429d2d5f0b0b702d92b31566f4ac5b25a182db85e145fb8072f10e80bf4441841a5f9eaa1a6a0bd0bf34a0028215eed362e1bc866c35b2642a035a64cfd447528ca171c9af825519baf54eab"], 0x3, 0x27b, &(0x7f0000000640)="$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")
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140))
mkdir(0x0, 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(0x0, 0x0)
pwrite64(r0, 0x0, 0x0, 0xe7c)
truncate(&(0x7f0000000940)='./file1\x00', 0x4001)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@snapshot={'cp', 0x3d, 0x8000000000}}, {@order_relaxed}, {}, {@order_relaxed}, {}, {@norecovery}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xeec, &(0x7f0000000f40)="$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")

3m4.272695934s ago: executing program 2 (id=1513):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r0, &(0x7f0000000200), 0x0)

3m3.805590107s ago: executing program 32 (id=1513):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r0, &(0x7f0000000200), 0x0)

2m8.831852744s ago: executing program 0 (id=1724):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r5, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2m7.797411132s ago: executing program 0 (id=1727):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
sendto$inet6(r0, &(0x7f0000000000)="f4", 0x1, 0x14, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @private0, 0x10000}, 0x1c)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, 0x0, 0x8050)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4, <r7=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x3ff, r7}, 0x38)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2m4.381392511s ago: executing program 0 (id=1746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2], 0x28}}, 0x0)

1m59.035669217s ago: executing program 0 (id=1753):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

1m59.032027668s ago: executing program 3 (id=1754):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0x3b93, &(0x7f00000000c0)='(')

1m58.711900423s ago: executing program 0 (id=1758):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x200}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)

1m58.691954019s ago: executing program 3 (id=1759):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed122889fffe80000000"], 0xfdef)

1m58.287397976s ago: executing program 0 (id=1762):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0)

1m57.63283717s ago: executing program 33 (id=1762):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0)

1m57.624540532s ago: executing program 3 (id=1765):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000108)=<r3=>0x0, &(0x7f0000000110)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0)

1m57.272541856s ago: executing program 3 (id=1768):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

1m56.82873758s ago: executing program 3 (id=1771):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

1m56.237335s ago: executing program 3 (id=1776):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m55.841523722s ago: executing program 34 (id=1776):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

9.323118219s ago: executing program 1 (id=2339):
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x8, 0x4, 0x4}, 0x9}}, 0x18)
write$P9_RWRITE(r0, &(0x7f0000000180)={0xb, 0x77, 0x1, 0x4}, 0xb)

8.096941603s ago: executing program 5 (id=2348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3404c045}, 0x10)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
ioctl(r0, 0xc138fd02, &(0x7f0000000000)="04000000000000")

7.368405205s ago: executing program 4 (id=2349):
r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000540)={[&(0x7f0000000280)='/dev/iommu\x00']}, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

7.201000629s ago: executing program 5 (id=2352):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', 0x0})

6.267939863s ago: executing program 4 (id=2354):
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004)

6.041367002s ago: executing program 5 (id=2355):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
ioctl(r0, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.194169512s ago: executing program 5 (id=2357):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@bsdgroups}, {@noquota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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")
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

5.169003791s ago: executing program 4 (id=2358):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x5b0f, &(0x7f0000000280)={0x0, 0xa211, 0x80, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1})
sendmsg(0xffffffffffffffff, 0x0, 0x0)

5.084846355s ago: executing program 6 (id=2359):
fsopen(0x0, 0x0)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r3, 0x0, 0x8)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r4=>0x0, <r5=>0x0}, 0x0)
write(r5, &(0x7f00000001c0)='functionfs', 0xa)
read(r4, &(0x7f0000000100), 0xb)
mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0)

3.983163458s ago: executing program 6 (id=2361):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xa00, 0x1e, 0x2, 0x8, 0x6e})

3.90676873s ago: executing program 4 (id=2362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3404c045}, 0x10)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
ioctl(r0, 0xc138fd02, &(0x7f0000000000)="04000000000000")

3.735136647s ago: executing program 7 (id=2363):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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")
mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0)

3.643764361s ago: executing program 4 (id=2364):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ftruncate(r0, 0x80000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r6)
sendmsg$NFC_CMD_DEV_DOWN(r6, 0x0, 0x4004c044)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c, 0x0}}], 0x1, 0x24000000)
syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0)
ioctl$VT_DISALLOCATE(r2, 0x5608)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000026c0)=[{0x0, 0x0, 0x0, 0xfffffffffffffd3f, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}], 0x18, 0x40000}], 0x1, 0x8000)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfaffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.515421454s ago: executing program 1 (id=2365):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)

2.876353036s ago: executing program 5 (id=2366):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read(r0, &(0x7f0000000500)=""/100, 0x7ffe)

2.766332961s ago: executing program 7 (id=2367):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

2.65712762s ago: executing program 4 (id=2368):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xf9, 0x5532, &(0x7f0000000540)="$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")
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x0, 0xf, 0x1c, "3be8aaab78fc179fd116ba5853f1aca783dda1af1ea89de2b7000000001f000000ffe71100", "2809e8dbe108598948224ad54afab420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x9]}})
ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1)

2.497458656s ago: executing program 6 (id=2369):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20040092)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048114}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.296368698s ago: executing program 1 (id=2370):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)

2.1516769s ago: executing program 6 (id=2371):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0xc, 0x0, 0x0, &(0x7f0000002000)=""/4105, 0x100e}, 0x7ffffffc}], 0x1, 0x40002000, 0x0)

2.151389942s ago: executing program 7 (id=2372):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000ac0)="102b8d116da22f2a3ad409909ddedcc515373dbeeddb4df17575015dd3c819ee7ddd930557aaf76dd6c938bff0c224b47eee7e8b4e68fe53bafa2265d9e1bb9f95a9ed234f466f4d214ed04059decbc4be5d7f1046653bae3b7cf1a4f6ee96fc18127960627178bef38f6e1c5fa64546a5ec581f68ebf27077d986d6956133f0e5f1129b1a299cef8c15d78b4f76438286d86a84f947f559fdd84918b3d79184413126640c983b47bbb7f025b35e18f720506cb1f42a1fece610b19b8ba60d5029cc311633d37ffc197ce54a5d907495ed29e9694f5fde58c42d415907455ca37b965989fcaa17a965a65538a8dcee38d64a1536cf163a87b62320181c77fd13b56bcc83116bbbeca13dc2a8ba3b26d46dcf74e500d3c727dad36a2a6831a95f17ed2e92403886f74f82a1bcd0e799583d65cc6f1776c8d4a5ab7d565fa9d7426e12a1bb5a79e5bca5e5dd5453ae675be87fa364526ba1f425691badcde4bf2285bbb2f1598db66ec0d8610607bdb74a97d94853425aaf58039fe62becccd0f9847fa2a0517d04333c25caa753dbfbdaaa98fb96d5739897e74263b1683823e4e2459d3f30778aa8a612d5441b3fcc3bcdf7beb4477b23c1b2039b151066ed43885f0100a33457f324781af7442cff1a9c1dc9a3273d1271f8d5d6e267f9e3558f845dcea4a10839453d81aa0798cf3207f691ba2e7b9858a19e5fb88e534b2d78289f2e6b613109c8d94497c756d4c288cd2befba66d8a146470b941ffa74689876debe51ad2d34f40a5989a15fbda9a487086df05da802ac06720a5893dc07b3a5ce1aa12a3bd1c0c92f4a2accfdd1225bdc0d82eeb65c68dbb086656e677886759111078195dbc92ff9b98baaa9d559c37a9fcca77f2ce4c13534cf21ac35282adea0fd3ac886223c5fd6ed10804fe8020af00850d1be2e5e8ba4880f7a918497bc4bdc45c1b9e5b783bc8f33fce2426255e3a56c25c62598b6cb32b23ce44e46572026bf391751211ffabb56ad922fe07f6aeb96a5ceccab4fb059771de50baeb8e3ccc42d9f87cf602558ab7b692ef90956169afb06118e563482981d10642d5a9d5369c2531092c41317a74a6c7de4d993588a4e181a7974d03dd5a7fe8eb9e35ec33963f11d2b9168249490629181e02e1d2f06f161356460cefe02383ffe11041707060da8023f1be647cbb351c8db9e31dcb2f1f4e1e14cc227e0b33defdfee793dda57992b836bc28c43d447fb5b91e4cea870ae345962ea350ac0c28856bad8539eceaf867d051c6879ea9bf49af616c50f6d329f93be80c553ef618abe6569ee0c76a30bb2de52f06a621128fc0eb67d39e722016451a04f56829df553af715bdae59e869ebe89eafcd4bd9699997bd6183db7374c0bc68c503112d180d0e7efcae1f39752a38b5552c77d07458e57645b14e2ea81c95e7c905eaecb393acda043a218e7d371744ed3ea0723e2a219772b7456aba7d57a04ead2cb7fe47dc8b07d73903471b9fc3def441c585d0a9bd5ab5bc7f30ef96107e91fe7ef5084d026694b2fe3df6bf89d310a2fd0b83f7faf5fa7ac07bbce6e327443dbf0f747ff62e67aca3978a8a296ea698068df995551df219ea5bfa36537f5dc4b26b9ac3f12039c7b08bdfbc1a8deae47caf6461781564bd52191d699f9702c8f690f3c205196cf3662e9bd8b7d96754b3e974053204a75525492184dba68f1d8a23903904c5802161bbaf0fb4a24b04617942057f188bea7d4bb6edf361f24ff9c3697d3435c3a7a170e391c47db38341dc18921b8aef9407e3bdbb206e6d65f3a5221d3191d41cc65a710fc5b5ed3c004afdea6f366683aceb30523b13322315f430862528e7c9576a5632b279719b34ae9d0146e7e4a1fe0e5ca311a22faf3d53b2acec874322b281966a5dc711719f045661fcc2c7bda8517610416ae9638896e0ca941036f3a711bd275b99ef228b5844fd14e7b00f43f09b67e4a94792364c6a2d3b843fd4d300de338f599865d2b55d7dc450364d2df688bfac4e01dad58cf0e4e1d8ffe4d153d771d64acc2f46b074018d2428bb018aeabe56c31d4652a2c117e2e77e4a0d6bf54a5918fafed33341ed238bc0737707ea425050ae7389dd26d74f5c0374524dad8d65821ba1999934d5de2b18fda0dd68efe6f363dc3f2822b772e2f5205f25d8ecb1d68f7fe5c49099f0c00404230b6475f53ddfcc814b4203981d905efd98c3df02085f1b9cbf8bfde7a9046b4e2826cef7b59a9eb331bd0c0df4f71e17283702083e1a0023863938e2adc561dacf178e3353a1fe2522b1307626e4463adf78cb0d700b6b91a2c8783d5b65a1be14695d7608c6a710c324cff4fc20c3565f806f36d8eb0d1806e62787e140af05c2a6feb21158076aeb025fe46913247b24b61282bcf0fee66984ebeaec53b0608e3abaa92a887b3ebb207a3ff4d0dc429c15142cfd5b23c44c381635d5016896079258b9a6ddad6a7e07330d5d5370ff46b3f4c03b452b22fe3e9eeca419558d6fb73d24785b02428d5b49ef4b2e7f1c3cb610c95e5827b5b32d64bc2a381a6970bab48330f419a385fd955f80f175bfd21b191840324145d340b11c14081d9aa476c740f45848eef62cc023bb40a5ec21b9fb3cbb48dc7adbd3d896ed890f01d4d3676065a41da555a36acac6ca8bcc4bcedd34209fb249130d2076ecba81317b31b3de3fa3115fc228eda12514cd1c04471bc6e7a3fb55adc46ba7e99e1ec1a302920156781860caa3d2aecb13f320ac2cf4b5c392e71bb14d0f12ac26bb85f144f78d7c107995d724290c11effad21db59654985d13d373b84551eff414dcedf3f9bd748f81603e7963aa65a9e469744b11a2521cb062b7fbcb9343aa817788066042d2161ab813d32077ec98eab964d19d87e09791c2b69ee87e17f63ffa06fb1ce3e694aaca86cb005c2a7445765ecb03cd7e3fc74ce57311211ff4687d9a146b79c6b3cc1e6cba800d1f985a6b3831ec595ca5e1d213dbfafb3ca8f1834511a0eea08788049d8356bb8c0dd834eab1953dffe599d235ef943adecafd9730c1c40b13ed20fd8b26a53e173ba81a054a33bc3d5b3fd0ebb01086a59062e542c34ed15186572d12b9c250af07b53708b50ad02b56ab9e99f39680743ceec2482a505867c1c819ccf1c32606f2519afecc527788d7b21c5e4f617461c39e1f3b7b2b9f1b3f6dd6f843bd3182b34a646d4d2ac29881a7985655f154eb14bfa70062fd330a59779b6517d034a67825b62daa992d33d10c744cffbe0cdb9d0978e41f8ab8106bc65ce330dedd4ee448cc1f1b280a3f0a68f702acf0e55d931a5d08a784ba9b2baa355418707e8490f3bf319ee4a6bee1d6ba5d0ba734267525ba12655654a46ee87f3d5dbb4629bbc52e3965eb0f36c84d3b32024f70f3a67758ef9f44d62209891fcfdb4f253c448acfb259da044d5533044e3c42c93624c65c90cc8b3804763a35fdbbe3cbd75b7c84af3dfffa2a3df13300eb40bfe9be098a0a70257084390bf13204ce6d4b00093a91255e80e82a0aeb16ed78bfd08833dcdca29a921aaa2774453be096993eef92665732133306951bab63fb96df9184fd770f4e814ab0e2624c3904cc68ee455bd3f528c0c5f16538e8643a8c5b61fe26fb2528054dbd76d3a8660bdffcc66f273e7a641315243f4a152882ced153c126b008c89c99c07aa7706647668f41fc8e982a59d6c75b8e52211fabc41906087bb591e1c6bcc9a9fa9d7d7383cd012e8a9bafed46fc46219f0e25cbc33c59b5dc294649c1a3e192c3f6425e79e5391cc613f35cc305f9566e92e0fc6f29a4c224e41dc390c809639fbede49625180800e8e7d15d7ddf6585e01f8a71074c8deb1a6502ca071a2329ec65796dcbdb1e2f43bafbe15561e1b41d0d63f9d3838a739fc5520627e19279601bc1b8ffb88a23917006ec7ed4a7b133455c29626fc242265a53893999a33a7d57dc4aa9e94c88da271df79e7e64f7c65d2b988f957a08d86345d90928e0b322aab9a318ebcfcece34d9ca0dcffc9d52319ea7da38ae5aa926a198f52830b378dc26a05722bb82e73eacb611e3158c10d71bb327b4ee90cf1955d54203ee6f37a0154523c4ebc26164ebf25a7c94de6fa4b8a4f20c68a129a1667fda2c29304cfdd031ab78515c4e7415088dc1ce89560f727bc0cff86257d98adf7eea02eaa87036f70f01d5403c3d8b47282aeb3b0ab56026fe7774aa263e4d1ba46b66595bbbd3ed0dc49f71817815f5378cedd749105c88a73250ac2838075d02eef3ddb1d200b6be1c3085983d6697dc7a11d75d2548551a4c1d53305a248634e177078cf182199e1a380c360659f52d19acd3493262dae58a81ed30dc7e253a2e3d7817134400489029241a2e4b545baad69121f936b7ab9b289d99f7ddfb75b04640f1113a073ac832d4bf1d47d5c85e79ea69b896949a6f7193f2dc26c161200a394fa123e2420b09acd021a5613559567cf57a49dafc42a65b74b4e43fcd31e9cf64cf62b77159fedc89d0e397d21e20ca83d529be46e78bbc5cdbfddfa4946b4590bb85db6fdf98e2e4fc76f65436d025fca32d77886f8991995a59f714c2c99513e2ed9cf7115f1d652512bcdf0685573bb87807b2a8216106e615303450b82d3b6ef7fbdc39ffb2ec5e0438bd9854dc0cc098f2510b3e7ec77576731772b40cc442bb6d6e234c063b01b8a16699675827166389662c05527238d0610f51429838c29f2eb603b9c5a72bbed4871be25b867b0c1884d303c8e96d347235ee2337ade3b2356f36beb90d9fe45cd01d617a864d3a9d76fc0b582e13a7816e6b99f7424602407de6f84bba10d3c43fc617d1977b39b377bd14e20f15fbaf8a150c7926af1d61c5cb1074904e7ef20fc9ce3c0003763cef1fb3a7022a68d8c002d199a7a97681e0026a73fb09920fc3ba217c1cab6fac8f5e6f67fb3ad2b9fa43a508c611e8503b7432ebf5854db474a8a03839cb86dfa960b289bfcba5ede90936d2540ce92380030470d61ceea2f102d90f3dadeab8cbd59b568b763e8223c083fc4d42b8a8f4264b7bbb52bd9f9d03aebec12468b9e5e2cd7244891d5c0dccf2c213fb04714e059e87cb882e07edfd288ca9944b476107b0e1fdaf89c1c27af9932d8632cb34b4589c05500411ec46c5805cf539cd818c8aee143226183e4725ee6c0867d9b7af09415e8808d49a1b3ee229a420e8caffd4282839360df27d3f2fe4dc7c8243a1e12e105a69575961a72e735c66c9fcee69a96b6e49f4a3560ac04d3a0ab10522f373c54900313739ed3b513e3e11f051955d4f21caf42fcef3701d408eb2b8990a4089a19c071351bf9b820fece492e2d0a79fdac51ae65e7705079c83f839a73c3b5aa263770b09d4baa87eca2f0b0cc0614bd4fc92365d4869cbc2885a9763b78053026d93b9f4e580a07aba41187eb7e5d6154ad1616798c2a0afc160ca44ff32985645fd6292232e7a8b03b6197067a46ee1b86258a62a", 0xf40}, {&(0x7f0000001ac0)}], 0x2, 0x0, 0x0, 0x4000}], 0x1, 0x44840)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6)
connect$inet6(r1, &(0x7f0000000800)={0xa, 0x5000, 0x0, @private0}, 0x1c)

1.899745732s ago: executing program 1 (id=2373):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @loopback}, 0x1, 0x0, 0x1}}, 0x26)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./proc/net/pppol2tp\x00', 0x0, 0x0)
read(r2, &(0x7f0000003000), 0x100)
read$FUSE(r2, &(0x7f0000002040)={0x2020}, 0x2020)
read(r2, &(0x7f0000004000), 0x100)
read(r2, &(0x7f0000005000), 0x100)

1.847096639s ago: executing program 6 (id=2374):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3404c045}, 0x10)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
ioctl(r0, 0xc138fd02, &(0x7f0000000000)="04000000000000")

1.682264227s ago: executing program 7 (id=2375):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x5, 0x6364, 0x1, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0xffff, 0xffe9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004850)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r5, &(0x7f0000000180)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.650535111s ago: executing program 1 (id=2376):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x182)
close(r0)
r1 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.602848145s ago: executing program 6 (id=2377):
r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94238000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000141, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002a000000850000002a0000009500000000000000c6716cbde55f79594dec8881a4fc64ae128eb989df3a10205371784013f446bd23187959a0c6840480c4b76b55b17764bba4"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x470bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

552.163207ms ago: executing program 7 (id=2378):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
write$snapshot(r0, &(0x7f00000003c0)="1e8f194d159d122deda87e732f5230186340f285c3bc819ae828b3a3e683e1271659246bb75cec9618213a820802b2c6666d9ff2b6e361e2d167bb814e76ba24ccfb7c93be2adaab2b210259d38c86825b67fb4a3167519ad8326318d37d154f8846", 0x62)

448.096158ms ago: executing program 1 (id=2379):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000004, 0x200000005c832, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xa00, 0x1e, 0x2, 0x8, 0x6e})

172.936094ms ago: executing program 7 (id=2380):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x10)
r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[]}, 0x78)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)

0s ago: executing program 5 (id=2381):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x8, 0xfa04, 0x1f8, 0x6c02, 0x310, 0x194, 0x194, 0x310, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x1c8, 0x1f8, 0x0, {0x0, 0x74020000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xff, 0xff000000, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xff000000], 0x4d3, 0x3504, 0x6c, 0x1, 0x4, 0x19}, {@ipv4=@broadcast, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv4=@multicast1, [0xff, 0xff, 0xffffffff, 0xffffff00], 0x4d3, 0x3503, 0x89, 0x1, 0x3, 0x6}, {@ipv4=@private=0xa010101, [0x0, 0x0, 0x0, 0xff], @ipv6=@private0, [0xff, 0x0, 0xffffffff], 0x4d3, 0x3502, 0x2f, 0x0, 0x1}, {@ipv6=@private2, [0xff, 0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, [0xff, 0x0, 0xff], 0x4d5, 0x0, 0x5e, 0x1, 0x18, 0x2}], 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x4, 0x2}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

kernel console output (not intermixed with test programs):

.314052][ T5716] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  269.464030][ T5716] usb 3-1: Using ep0 maxpacket: 8
[  269.470555][ T5716] usb 3-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  269.482481][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.492793][ T5716] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.502735][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0
[  269.509630][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.523347][ T5716] usb 3-1: config 0 descriptor??
[  269.544211][ T5716] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  269.644053][ T5743] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  269.753189][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.755491][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.756535][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  269.756565][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  269.795077][ T5743] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  269.797847][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.797935][ T5743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.798010][ T5743] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  269.798134][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.851981][ T5743] usb 5-1: config 0 descriptor??
[  269.963675][ T9092] v: renamed from dummy0 (while UP)
[  270.106769][ T5716] usb 4-1: USB disconnect, device number 52
[  270.202571][ T9098] netlink: 'syz.3.910': attribute type 13 has an invalid length.
[  270.349466][ T9100] tipc: Started in network mode
[  270.349546][ T9100] tipc: Node identity ac14140f, cluster identity 4711
[  270.350497][ T9100] tipc: New replicast peer: 255.255.255.255
[  270.383819][ T9100] tipc: Enabled bearer <udp:syz2>, priority 10
[  270.471826][ T5743] usbhid 5-1:0.0: can't add hid device: -71
[  270.471956][ T5743] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  270.479955][ T9106] veth1_to_bond: entered promiscuous mode
[  270.480583][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'.
[  270.510704][ T5743] usb 5-1: USB disconnect, device number 36
[  270.565463][ T9106] veth1_to_bond (unregistering): left promiscuous mode
[  270.618368][ T9106] bond0: (slave bond_slave_1): Releasing backup interface
[  271.345912][ T9136] netlink: 'syz.1.922': attribute type 13 has an invalid length.
[  271.444601][ T5722] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  271.605314][ T5722] usb 5-1: Using ep0 maxpacket: 8
[  271.607473][ T5722] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  271.610698][ T5722] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.611018][ T5722] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  271.611094][ T5722] usb 5-1: config 0 interface 0 has no altsetting 0
[  271.611189][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.647942][ T5722] usb 5-1: config 0 descriptor??
[  271.694260][ T5722] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  271.845417][ T5786] tipc: Node number set to 2886997007
[  271.870180][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.878536][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.156332][ T5716] usb 3-1: USB disconnect, device number 31
[  272.299941][ T9164] netlink: 52 bytes leftover after parsing attributes in process `syz.3.932'.
[  272.317898][ T9162] ip_tables: iptables: counters copy to user failed while replacing table
[  273.081650][ T9171] loop3: detected capacity change from 0 to 32768
[  273.095888][ T9171] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.935 (9171)
[  273.124935][ T9171] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  273.136658][ T9171] BTRFS info (device loop3): using crc32c checksum algorithm
[  273.217167][ T9171] BTRFS info (device loop3): enabling ssd optimizations
[  273.217308][ T9171] BTRFS info (device loop3): turning on async discard
[  273.217351][ T9171] BTRFS info (device loop3): enabling free space tree
[  273.226183][ T5716] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  273.374179][ T5716] usb 2-1: Using ep0 maxpacket: 8
[  273.380344][ T5716] usb 2-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  273.391422][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.391493][ T5716] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.391537][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0
[  273.391579][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.432565][ T5716] usb 2-1: config 0 descriptor??
[  273.446327][ T5716] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  273.609266][ T9213] netlink: 52 bytes leftover after parsing attributes in process `syz.0.944'.
[  273.653373][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.666837][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.774539][ T9215] syzkaller0: entered promiscuous mode
[  273.780423][ T9215] syzkaller0: entered allmulticast mode
[  273.830864][ T5615] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  273.887072][ T9217] ip_tables: iptables: counters copy to user failed while replacing table
[  274.281444][ T5716] usb 5-1: USB disconnect, device number 37
[  274.302731][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'.
[  275.071748][ T9247] syzkaller0: entered promiscuous mode
[  275.071802][ T9247] syzkaller0: entered allmulticast mode
[  275.078082][ T5707] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  275.095790][ T9247] TC_ACT_REPEAT abuse ?
[  275.200757][ T9238] netlink: 'syz.2.954': attribute type 10 has an invalid length.
[  275.236082][ T5707] usb 4-1: Using ep0 maxpacket: 32
[  275.242836][ T5707] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  275.254431][ T5707] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  275.254550][ T5707] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  275.254594][ T5707] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  275.254651][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  275.254678][ T5707] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  275.254708][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  275.254758][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.328224][ T5707] usb 4-1: config 0 descriptor??
[  275.413725][ T9250] ip_tables: iptables: counters copy to user failed while replacing table
[  275.576504][ T5707] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  275.595753][ T5707] usb 4-1: USB disconnect, device number 53
[  275.608127][ T5707] usblp0: removed
[  275.874108][   T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  276.033138][ T5743] usb 2-1: USB disconnect, device number 29
[  276.044070][   T10] usb 3-1: Using ep0 maxpacket: 8
[  276.044825][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  276.057790][   T10] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  276.057870][   T10] usb 3-1: config 250 has an invalid descriptor of length 222, skipping remainder of the config
[  276.057925][   T10] usb 3-1: config 250 has no interfaces?
[  276.071631][   T10] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  276.071722][   T10] usb 3-1: Product: syz
[  276.071772][   T10] usb 3-1: SerialNumber: syz
[  276.414663][ T9269] veth1_to_bond: entered allmulticast mode
[  276.449356][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'.
[  276.484475][ T9269] veth1_to_bond (unregistering): left allmulticast mode
[  276.501735][ T9269] bond0: (slave bond_slave_1): Releasing backup interface
[  276.772384][ T9276] syzkaller0: entered promiscuous mode
[  276.772430][ T9276] syzkaller0: entered allmulticast mode
[  277.335509][ T5707] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  277.425077][ T9301] netlink: 'syz.3.978': attribute type 13 has an invalid length.
[  277.425134][ T9301] netlink: 'syz.3.978': attribute type 27 has an invalid length.
[  277.458252][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'.
[  277.466415][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'.
[  277.506272][ T5707] usb 2-1: Using ep0 maxpacket: 8
[  277.510559][ T5707] usb 2-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  277.520675][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.520726][ T5707] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.520779][ T5707] usb 2-1: config 0 interface 0 has no altsetting 0
[  277.520884][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.566109][ T5707] usb 2-1: config 0 descriptor??
[  277.583744][ T5707] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  277.788861][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.799392][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.917822][ T9314] syzkaller0: entered promiscuous mode
[  277.917952][ T9314] syzkaller0: entered allmulticast mode
[  277.943981][ T5743] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  278.233980][ T5743] usb 4-1: Using ep0 maxpacket: 32
[  278.243772][ T5743] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  278.260099][ T5743] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  278.401178][ T9321] veth5: entered promiscuous mode
[  278.401251][ T9321] veth5: entered allmulticast mode
[  278.455600][ T5743] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  278.455676][ T5743] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  278.455985][ T5743] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  278.456032][ T5743] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  278.456100][ T5743] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  278.456246][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.502173][ T5743] usb 4-1: config 0 descriptor??
[  278.874463][   T10] usb 3-1: USB disconnect, device number 32
[  278.967080][ T9323] v: renamed from dummy0 (while UP)
[  279.078077][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.089845][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.212727][ T9331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.440337][ T9336] netlink: 'syz.0.994': attribute type 13 has an invalid length.
[  279.531462][ T5743] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  279.570904][ T5743] usb 4-1: USB disconnect, device number 54
[  279.591550][ T5743] usblp0: removed
[  279.636802][ T9333] loop2: detected capacity change from 0 to 32768
[  279.703625][ T9333] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  280.032316][ T5624] ocfs2: Unmounting device (7,2) on (node local)
[  280.167096][ T5743] usb 2-1: USB disconnect, device number 30
[  280.676989][ T9362] veth7: entered promiscuous mode
[  280.677102][ T9362] veth7: entered allmulticast mode
[  281.501895][ T9375] netlink: 'syz.4.1005': attribute type 13 has an invalid length.
[  281.691374][ T9379] syzkaller0: entered promiscuous mode
[  281.691427][ T9379] syzkaller0: entered allmulticast mode
[  281.870740][ T9384] syzkaller0: entered promiscuous mode
[  281.870790][ T9384] syzkaller0: entered allmulticast mode
[  281.914001][ T5743] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  282.063983][ T5743] usb 4-1: Using ep0 maxpacket: 32
[  282.066250][ T5743] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  282.070307][ T5743] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.070377][ T5743] usb 4-1: config 0 has no interfaces?
[  282.087244][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.087338][ T5743] usb 4-1: Product: syz
[  282.087381][ T5743] usb 4-1: Manufacturer: syz
[  282.087438][ T5743] usb 4-1: SerialNumber: syz
[  282.138424][ T5743] usb 4-1: config 0 descriptor??
[  282.168870][ T9402] netlink: 'syz.2.1016': attribute type 4 has an invalid length.
[  282.189836][ T9402] netlink: 'syz.2.1016': attribute type 4 has an invalid length.
[  282.498910][ T9416] lo: Caught tx_queue_len zero misconfig
[  282.622633][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1024'.
[  282.691390][ T9424] netlink: 'syz.2.1025': attribute type 13 has an invalid length.
[  283.236653][ T9440] netlink: 'syz.2.1030': attribute type 10 has an invalid length.
[  283.266691][ T9446] lo: Caught tx_queue_len zero misconfig
[  283.580915][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'.
[  284.253317][ T9476] veth1_to_bond: entered allmulticast mode
[  284.260554][ T9476] veth1_to_bond: entered promiscuous mode
[  284.262196][ T9475] veth1_to_bond: left promiscuous mode
[  284.319099][ T9475] veth1_to_bond: left allmulticast mode
[  284.576126][ T9490] syzkaller0: entered promiscuous mode
[  284.576178][ T9490] syzkaller0: entered allmulticast mode
[  284.745543][ T5722] usb 4-1: USB disconnect, device number 55
[  284.851641][ T9480] netlink: 'syz.2.1049': attribute type 10 has an invalid length.
[  285.092673][ T9500] syzkaller0: entered promiscuous mode
[  285.092968][ T9500] syzkaller0: entered allmulticast mode
[  285.325663][ T9506] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  285.717234][ T9516] loop0: detected capacity change from 0 to 512
[  285.721513][ T9516] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  285.756301][ T9516] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  285.869319][ T9520] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1063'.
[  286.035462][ T9523] Bluetooth: MGMT ver 1.23
[  286.359666][ T9539] syzkaller0: entered promiscuous mode
[  286.367280][ T9539] syzkaller0: entered allmulticast mode
[  286.414149][ T9535] netlink: 'syz.3.1069': attribute type 10 has an invalid length.
[  286.930383][ T9554] lo: Caught tx_queue_len zero misconfig
[  287.286029][ T9563] veth3: entered promiscuous mode
[  287.286081][ T9563] veth3: entered allmulticast mode
[  287.801275][ T9573] syzkaller0: entered promiscuous mode
[  287.806950][ T9573] syzkaller0: entered allmulticast mode
[  287.985999][ T9584] lo: Caught tx_queue_len zero misconfig
[  288.525219][ T9592] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1093'.
[  288.571497][ T9594] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  289.497181][ T9627] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1108'.
[  289.884968][ T5716] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  290.033948][ T5716] usb 1-1: Using ep0 maxpacket: 32
[  290.039982][ T5716] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  290.050568][ T5716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.050617][ T5716] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  290.073200][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.073249][ T5716] usb 1-1: Product: syz
[  290.073293][ T5716] usb 1-1: Manufacturer: syz
[  290.073314][ T5716] usb 1-1: SerialNumber: syz
[  290.102835][ T5716] usb 1-1: config 0 descriptor??
[  290.194009][ T5707] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  290.345324][ T5707] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  290.355786][ T5707] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.355857][ T5707] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  290.355911][ T5707] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  290.355941][ T5707] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.355993][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.651049][ T9646] netlink: 'syz.4.1116': attribute type 10 has an invalid length.
[  290.820876][ T9658] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1120'.
[  290.849236][ T5722] usb 4-1: USB disconnect, device number 56
[  291.682027][ T9679] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1129'.
[  292.515652][ T9685] netlink: 'syz.2.1131': attribute type 10 has an invalid length.
[  292.688305][ T5716] usb 1-1: USB disconnect, device number 20
[  293.326642][ T9707] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1140'.
[  293.448636][ T9708] loop4: detected capacity change from 0 to 512
[  293.450405][ T9708] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  293.486573][ T9708] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  293.642234][ T9712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1142'.
[  293.894006][ T5707] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  294.108552][ T5707] usb 4-1: device descriptor read/64, error -71
[  294.354014][ T5707] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  294.484632][ T5707] usb 4-1: device descriptor read/64, error -71
[  294.594315][ T5707] usb usb4-port1: attempt power cycle
[  294.672354][ T9744] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  294.764158][ T9747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1155'.
[  294.810971][ T9735] netlink: 'syz.0.1152': attribute type 10 has an invalid length.
[  294.945499][ T5707] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  294.975616][ T5707] usb 4-1: device descriptor read/8, error -71
[  295.028481][ T9739] syz.1.1150 (9739) used greatest stack depth: 18088 bytes left
[  295.214234][ T5707] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  295.235425][ T5707] usb 4-1: device descriptor read/8, error -71
[  295.354464][ T5707] usb usb4-port1: unable to enumerate USB device
[  295.521667][ T9762] syzkaller0: left promiscuous mode
[  295.527575][ T9762] syzkaller0: left allmulticast mode
[  295.539163][ T9763] loop2: detected capacity change from 0 to 512
[  295.543148][ T9763] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  295.572249][ T9763] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  295.729102][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1166'.
[  295.851457][ T9776] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  296.043244][ T9783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  296.426896][ T9796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1179'.
[  296.641213][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'.
[  296.642613][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'.
[  296.798789][ T9808] netlink: 'syz.3.1185': attribute type 3 has an invalid length.
[  296.809623][ T9808] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1185'.
[  297.372003][ T9824] loop4: detected capacity change from 0 to 512
[  297.381366][ T9824] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  298.151402][ T9832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1193'.
[  298.356385][ T9839] netlink: 'syz.0.1200': attribute type 3 has an invalid length.
[  298.407699][ T9839] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1200'.
[  298.675148][ T9849] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1203'.
[  299.147790][ T9865] loop1: detected capacity change from 0 to 512
[  299.157324][ T9865] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  299.970128][ T9877] netlink: 'syz.1.1214': attribute type 3 has an invalid length.
[  299.997367][ T9877] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1214'.
[  300.094473][ T9881] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1217'.
[  300.895913][ T9905] loop1: detected capacity change from 0 to 512
[  300.905311][ T9905] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  301.237801][   T25] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  301.464974][   T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  301.476952][   T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  301.485189][   T25] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  301.496992][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  301.508591][   T25] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  301.521209][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  301.533743][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  301.545783][   T25] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  301.560105][   T25] usb 5-1: config 168 interface 0 has no altsetting 0
[  301.582551][   T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  301.582614][   T25] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  301.582676][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  301.582709][   T25] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  301.582741][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  301.582774][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  301.582807][   T25] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  301.582840][   T25] usb 5-1: config 168 interface 0 has no altsetting 0
[  301.685129][   T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  301.685230][   T25] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  301.685286][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  301.685319][   T25] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  301.685350][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  301.685382][   T25] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  301.685413][   T25] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  301.685445][   T25] usb 5-1: config 168 interface 0 has no altsetting 0
[  301.821903][ T9909] syzkaller0: Caught tx_queue_len zero misconfig
[  302.060975][ T9916] netlink: 'syz.1.1230': attribute type 3 has an invalid length.
[  302.071499][ T9916] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1230'.
[  302.144053][ T5722] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  302.296344][ T5722] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40
[  302.309099][ T5722] usb 4-1: config 1 interface 0 has no altsetting 0
[  302.324874][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.324951][ T5722] usb 4-1: Product: syz
[  302.324985][ T5722] usb 4-1: Manufacturer: syz
[  302.325005][ T5722] usb 4-1: SerialNumber: syz
[  302.444028][   T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  302.584040][ T5722] usbhid 4-1:1.0: can't add hid device: -71
[  302.591293][ T5722] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  302.599435][   T31] usb 1-1: Using ep0 maxpacket: 8
[  302.605687][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  302.617368][   T31] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  302.617439][   T31] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  302.617467][   T31] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  302.617493][   T31] usb 1-1: config 250 has no interface number 0
[  302.617544][   T31] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  302.617604][   T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  302.617633][   T31] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  302.617666][   T31] usb 1-1: config 250 interface 228 has no altsetting 0
[  302.664634][   T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  302.664684][   T31] usb 1-1: Product: syz
[  302.664726][   T31] usb 1-1: SerialNumber: syz
[  302.722108][   T31] hub 1-1:250.228: bad descriptor, ignoring hub
[  302.730159][   T31] hub 1-1:250.228: probe with driver hub failed with error -5
[  302.744577][ T5722] usb 4-1: USB disconnect, device number 61
[  303.035498][   T31] usb 1-1: USB disconnect, device number 21
[  303.819601][ T9953] lo: entered allmulticast mode
[  303.893152][ T9952] lo: left allmulticast mode
[  304.034061][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.066434][   T25] usb 5-1: can't set config #168, error -71
[  304.074233][   T25] usb 5-1: USB disconnect, device number 38
[  304.282013][ T9972] netlink: 'syz.0.1252': attribute type 3 has an invalid length.
[  304.297073][ T9972] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1252'.
[  304.373790][ T9974] syzkaller0: entered promiscuous mode
[  304.379745][ T9974] syzkaller0: entered allmulticast mode
[  304.414249][ T5716] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  304.500958][ T9976] geneve2: entered promiscuous mode
[  304.546635][ T5716] usb 4-1: device descriptor read/64, error -71
[  304.635689][ T9983] syzkaller0: left promiscuous mode
[  304.635883][ T9983] syzkaller0: left allmulticast mode
[  304.804164][ T5716] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  305.008720][ T9993] loop4: detected capacity change from 0 to 512
[  305.018006][ T9993] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.209217][ T9993] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  305.690103][ T5716] usb 4-1: device descriptor read/64, error -71
[  305.799010][ T5716] usb usb4-port1: attempt power cycle
[  305.853602][ T9999] netlink: 'syz.4.1264': attribute type 3 has an invalid length.
[  305.869070][ T9999] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1264'.
[  305.879003][   T31] usb 1-1: new low-speed USB device number 22 using dummy_hcd
[  306.034794][   T31] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  306.045561][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  306.045630][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.045678][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  306.045711][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.045741][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  306.045771][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  306.045801][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.045833][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[  306.135756][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  306.135817][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.135878][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  306.135911][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.135942][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  306.135975][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  306.136006][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.136038][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[  306.144600][ T5716] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  306.157249][   T31] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  306.157291][   T31] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  306.157330][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  306.157359][   T31] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  306.157387][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  306.157413][   T31] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  306.157440][   T31] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  306.157468][   T31] usb 1-1: config 168 interface 0 has no altsetting 0
[  306.175987][ T5716] usb 4-1: device descriptor read/8, error -71
[  306.406282][ T5716] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  306.424889][ T5716] usb 4-1: device descriptor read/8, error -71
[  306.534676][ T5716] usb usb4-port1: unable to enumerate USB device
[  306.757558][T10017] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1272'.
[  306.769952][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1272'.
[  306.780122][T10017] netlink: 'syz.2.1272': attribute type 5 has an invalid length.
[  306.790473][T10017] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1272'.
[  307.284402][T10029] loop2: detected capacity change from 0 to 512
[  307.304235][T10029] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  307.612296][T10029] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  307.859030][T10032] netlink: 'syz.1.1278': attribute type 3 has an invalid length.
[  307.861351][T10032] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1278'.
[  308.246949][T10044] netlink: 'syz.1.1283': attribute type 4 has an invalid length.
[  308.281008][T10044] netlink: 'syz.1.1283': attribute type 4 has an invalid length.
[  308.723735][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.742604][   T31] usb 1-1: can't set config #168, error -71
[  308.752416][   T31] usb 1-1: USB disconnect, device number 22
[  309.138136][T10067] Bluetooth: MGMT ver 1.23
[  309.513092][T10080] syzkaller0: entered promiscuous mode
[  309.520592][T10080] syzkaller0: entered allmulticast mode
[  309.657250][   T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  309.702103][T10088] netlink: 'syz.4.1302': attribute type 3 has an invalid length.
[  309.709935][T10088] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1302'.
[  309.815509][   T31] usb 1-1: Using ep0 maxpacket: 32
[  309.821779][   T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  309.833728][   T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  309.833819][   T31] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.833932][   T31] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.833960][   T31] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  309.833991][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[  309.834029][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.899854][   T31] usb 1-1: config 0 descriptor??
[  310.371544][   T31] wacom 0003:056A:0000.0009: ignoring exceeding usage max
[  310.387335][   T31] hid_parser_main: 4007 callbacks suppressed
[  310.396918][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.404764][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.412426][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.420324][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.429038][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.436432][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.436470][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.436500][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.436538][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.436567][   T31] wacom 0003:056A:0000.0009: unknown main item tag 0x0
[  310.569010][ T5716] usb 1-1: USB disconnect, device number 23
[  311.054440][ T5716] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  311.111594][T10118] netlink: 'syz.1.1313': attribute type 3 has an invalid length.
[  311.122528][T10118] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1313'.
[  311.142133][T10116] netlink: 'syz.2.1312': attribute type 10 has an invalid length.
[  311.194004][ T5716] usb 5-1: device descriptor read/64, error -71
[  311.340260][T10122] syzkaller0: entered promiscuous mode
[  311.346546][T10122] syzkaller0: entered allmulticast mode
[  311.454000][ T5716] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  311.585428][ T5716] usb 5-1: device descriptor read/64, error -71
[  311.695852][ T5716] usb usb5-port1: attempt power cycle
[  311.805187][T10136] sch_tbf: burst 0 is lower than device erspan0 mtu (1464) !
[  312.034845][ T5716] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  312.055704][ T5716] usb 5-1: device descriptor read/8, error -71
[  312.244535][   T31] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  312.297863][ T5716] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  312.316296][ T5716] usb 5-1: device descriptor read/8, error -71
[  312.407333][   T31] usb 4-1: Using ep0 maxpacket: 32
[  312.417493][   T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  312.428515][   T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  312.437159][ T5716] usb usb5-port1: unable to enumerate USB device
[  312.446484][   T31] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.457958][   T31] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.468577][   T31] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  312.482131][   T31] usb 4-1: config 0 interface 0 has no altsetting 0
[  312.488962][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.505958][   T31] usb 4-1: config 0 descriptor??
[  312.952778][   T31] wacom 0003:056A:0000.000A: ignoring exceeding usage max
[  313.106691][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'.
[  313.150256][ T5716] usb 4-1: USB disconnect, device number 66
[  313.347333][T10177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1339'.
[  313.348824][T10177] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1339'.
[  313.357111][T10177] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.357498][T10177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.366541][T10177] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.366874][T10177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.380125][T10177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1339'.
[  313.382068][T10177] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.382638][T10177] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.343732][T10211] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1357'.
[  314.445238][ T5716] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  314.620683][ T5716] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  314.624328][ T5716] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  314.624385][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.624419][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.624448][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  314.629673][ T5716] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  314.629710][ T5716] usb 4-1: Manufacturer: syz
[  314.723990][ T5716] usb 4-1: config 0 descriptor??
[  314.786224][T10221] veth5: entered promiscuous mode
[  314.786273][T10221] veth5: entered allmulticast mode
[  315.148687][ T5716] usbhid 4-1:0.0: can't add hid device: -71
[  315.148819][ T5716] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  315.172189][ T5716] usb 4-1: USB disconnect, device number 67
[  316.874044][   T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  316.965366][   T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  317.024205][   T25] usb 5-1: Using ep0 maxpacket: 8
[  317.026420][   T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00
[  317.032279][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.032432][   T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.032517][   T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.032580][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  317.032687][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.077546][   T25] usb 5-1: config 0 descriptor??
[  317.114741][   T31] usb 1-1: Using ep0 maxpacket: 8
[  317.117512][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  317.132841][   T31] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  317.132900][   T31] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  317.132923][   T31] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  317.133057][   T31] usb 1-1: config 250 has no interface number 0
[  317.133219][   T31] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  317.133410][   T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  317.133490][   T31] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  317.133617][   T31] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  317.133711][   T31] usb 1-1: config 250 interface 228 has no altsetting 0
[  317.151085][   T31] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  317.151170][   T31] usb 1-1: Product: syz
[  317.151256][   T31] usb 1-1: SerialNumber: syz
[  317.278276][   T31] hub 1-1:250.228: bad descriptor, ignoring hub
[  317.278349][   T31] hub 1-1:250.228: probe with driver hub failed with error -5
[  317.332690][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.349828][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.496554][   T31] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  317.555821][   T31] usb 1-1: USB disconnect, device number 24
[  317.576701][   T31] usblp0: removed
[  317.591205][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  317.591482][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  317.628331][   T25] usb 5-1: USB disconnect, device number 43
[  317.647379][T10298] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1389'.
[  317.915027][ T5716] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  318.065872][ T5716] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40
[  318.077111][ T5716] usb 4-1: config 1 interface 0 has no altsetting 0
[  318.088355][ T5716] usb 4-1: string descriptor 0 read error: -22
[  318.088508][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.472741][T10331] loop0: detected capacity change from 0 to 256
[  318.488440][T10331] vfat: Unknown parameter 'smackfsf'
[  318.532395][ T5716] usbhid 4-1:1.0: can't add hid device: -32
[  318.532527][ T5716] usbhid 4-1:1.0: probe with driver usbhid failed with error -32
[  318.556482][ T5716] usb 4-1: USB disconnect, device number 68
[  319.253223][T10353] syzkaller0: entered promiscuous mode
[  319.253287][T10353] syzkaller0: entered allmulticast mode
[  320.283003][T10373] veth7: entered promiscuous mode
[  320.283051][T10373] veth7: entered allmulticast mode
[  320.693957][   T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  320.849789][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  320.863356][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.863414][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.863457][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  320.863506][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.981142][   T25] usb 3-1: config 0 descriptor??
[  321.298459][T10384] syzkaller0: entered promiscuous mode
[  321.298518][T10384] syzkaller0: entered allmulticast mode
[  321.631765][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  321.639243][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  321.652267][   T25] usb 3-1: USB disconnect, device number 33
[  321.889115][T10391] loop1: detected capacity change from 0 to 32768
[  321.958106][T10391] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  322.215661][ T5626] ocfs2: Unmounting device (7,1) on (node local)
[  322.532013][T10416] ipvlan0: Caught tx_queue_len zero misconfig
[  322.634150][   T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  322.815844][   T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  322.839171][T10425] netlink: 'syz.4.1438': attribute type 13 has an invalid length.
[  322.844352][   T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  322.844451][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.844519][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.844586][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  322.870375][   T25] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  322.870440][   T25] usb 2-1: Manufacturer: syz
[  322.940534][   T25] usb 2-1: config 0 descriptor??
[  323.595875][   T25] usbhid 2-1:0.0: can't add hid device: -71
[  323.603157][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  323.658698][   T25] usb 2-1: USB disconnect, device number 31
[  325.425464][T10479] tipc: Started in network mode
[  325.425530][T10479] tipc: Node identity ac14140f, cluster identity 4711
[  325.426114][T10479] tipc: New replicast peer: 255.255.255.255
[  325.447960][T10479] tipc: Enabled bearer <udp:syz2>, priority 10
[  325.661349][T10483] loop3: detected capacity change from 0 to 512
[  325.716424][T10483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  325.756769][T10483] EXT4-fs (loop3): 1 truncate cleaned up
[  325.788525][T10483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.828077][T10489] netlink: 'syz.2.1453': attribute type 13 has an invalid length.
[  326.281540][T10458] loop0: detected capacity change from 0 to 32768
[  326.384070][ T1062] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  326.472277][T10458] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  326.548635][ T1062] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  326.560722][ T5716] tipc: Node number set to 2886997007
[  326.569128][ T1062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  326.580478][ T1062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.592805][ T1062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.603249][ T1062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  326.622297][ T1062] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  326.622360][ T1062] usb 2-1: Manufacturer: syz
[  326.665163][ T1062] usb 2-1: config 0 descriptor??
[  327.346349][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1451'.
[  327.363532][ T1062] usbhid 2-1:0.0: can't add hid device: -71
[  327.363680][ T1062] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  327.396034][ T1062] usb 2-1: USB disconnect, device number 32
[  327.840063][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  329.484033][ T5716] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  329.589240][T10530] loop0: detected capacity change from 0 to 32768
[  329.604474][T10530] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1458 (10530)
[  329.623988][ T5716] usb 2-1: device descriptor read/64, error -71
[  329.640704][T10530] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  329.640810][T10530] BTRFS info (device loop0): using crc32c checksum algorithm
[  329.733029][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.803151][T10530] BTRFS info (device loop0): enabling ssd optimizations
[  329.803266][T10530] BTRFS info (device loop0): turning on async discard
[  329.804078][T10530] BTRFS info (device loop0): enabling free space tree
[  329.877791][ T5716] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  330.014084][ T5716] usb 2-1: device descriptor read/64, error -71
[  330.139180][ T5716] usb usb2-port1: attempt power cycle
[  330.374518][ T5614] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  330.496879][ T5716] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  330.526131][ T1062] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  330.537310][ T5716] usb 2-1: device descriptor read/8, error -71
[  330.684028][ T1062] usb 5-1: Using ep0 maxpacket: 8
[  330.690072][ T1062] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  330.701271][ T1062] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  330.710152][ T1062] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  330.718975][ T1062] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  330.728624][ T1062] usb 5-1: config 250 has no interface number 0
[  330.737580][ T1062] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  330.749537][ T1062] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  330.760326][ T1062] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 11
[  330.771297][ T1062] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  330.785240][ T1062] usb 5-1: config 250 interface 228 has no altsetting 0
[  330.806946][ T5716] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  330.820080][ T1062] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  330.820129][ T1062] usb 5-1: Product: syz
[  330.820165][ T1062] usb 5-1: SerialNumber: syz
[  330.840041][ T5716] usb 2-1: device descriptor read/8, error -71
[  330.866704][ T1062] hub 5-1:250.228: bad descriptor, ignoring hub
[  330.866781][ T1062] hub 5-1:250.228: probe with driver hub failed with error -5
[  330.954224][ T5716] usb usb2-port1: unable to enumerate USB device
[  331.102282][ T1062] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 44 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  331.136442][ T1062] usb 5-1: USB disconnect, device number 44
[  331.162438][ T1062] usblp0: removed
[  331.336940][T10572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'.
[  331.933607][T10586] loop2: detected capacity change from 0 to 512
[  331.957373][T10586] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  332.003420][T10586] EXT4-fs (loop2): 1 truncate cleaned up
[  332.054107][T10586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.853961][ T5716] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  333.004123][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  333.010376][ T5716] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  333.027209][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.036237][ T5716] usb 5-1: Product: syz
[  333.040899][ T5716] usb 5-1: Manufacturer: syz
[  333.051786][ T5716] usb 5-1: SerialNumber: syz
[  333.071863][ T5716] usb 5-1: config 0 descriptor??
[  333.329034][ T5716] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[  333.329091][ T5716] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -32)
[  334.325934][ T5716] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32
[  334.835068][T10614] nvme_fabrics: missing parameter 'transport=%s'
[  334.856476][T10614] nvme_fabrics: missing parameter 'nqn=%s'
[  335.593984][   T10] usb 5-1: USB disconnect, device number 45
[  335.787841][ T5707] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  335.924928][ T5707] usb 4-1: device descriptor read/64, error -71
[  335.948246][T10627] null_blk: nullb1: using native zone append
[  335.955395][   T32] audit: type=1800 audit(1786065228.431:29): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="zoned" dev="configfs" ino=22006 res=0 errno=0
[  335.955455][   T32] audit: type=1800 audit(1786065228.441:30): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="size" dev="configfs" ino=22008 res=0 errno=0
[  335.955505][   T32] audit: type=1800 audit(1786065228.461:31): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1495" name="power" dev="configfs" ino=22009 res=0 errno=0
[  336.023437][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'.
[  336.042848][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.174528][ T5707] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  336.304674][ T5707] usb 4-1: device descriptor read/64, error -71
[  336.414723][ T5707] usb usb4-port1: attempt power cycle
[  336.624596][T10627] null_blk: disk nullb1 created
[  336.753953][ T5707] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  336.774681][ T5707] usb 4-1: device descriptor read/8, error -71
[  337.024992][ T5707] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  337.044893][ T5707] usb 4-1: device descriptor read/8, error -71
[  337.154354][ T5707] usb usb4-port1: unable to enumerate USB device
[  337.373671][T10655] nvme_fabrics: missing parameter 'transport=%s'
[  337.381104][T10655] nvme_fabrics: missing parameter 'nqn=%s'
[  338.012294][T10668] syzkaller0: entered promiscuous mode
[  338.020736][T10668] syzkaller0: entered allmulticast mode
[  338.040741][T10670] loop2: detected capacity change from 0 to 512
[  338.056151][T10670] EXT4-fs: Ignoring removed oldalloc option
[  338.074806][ T5707] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  338.119821][T10670] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  338.185554][T10670] EXT4-fs (loop2): 1 truncate cleaned up
[  338.201109][T10670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.234140][ T5707] usb 2-1: Using ep0 maxpacket: 32
[  338.235610][ T5707] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  338.241483][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.241570][ T5707] usb 2-1: Product: syz
[  338.241644][ T5707] usb 2-1: Manufacturer: syz
[  338.241673][ T5707] usb 2-1: SerialNumber: syz
[  338.255570][ T5707] usb 2-1: config 0 descriptor??
[  338.477483][ T5707] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[  338.477554][ T5707] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -32)
[  338.790602][ T5707] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32
[  339.034640][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.107368][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.678815][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.867523][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.159049][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.348424][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.361237][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.370701][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.382973][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.395475][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.459130][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.477555][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.490046][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.512176][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.523248][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.988533][ T5743] usb 2-1: USB disconnect, device number 37
[  341.504737][   T12] bridge_slave_1: left allmulticast mode
[  341.504811][   T12] bridge_slave_1: left promiscuous mode
[  341.511950][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.672789][   T12] bridge_slave_0: left allmulticast mode
[  341.672848][   T12] bridge_slave_0: left promiscuous mode
[  341.734336][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  342.479306][T10727] loop1: detected capacity change from 0 to 32768
[  342.488428][T10727] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1523 (10727)
[  342.512440][T10727] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  342.512496][T10727] BTRFS info (device loop1): using crc32c checksum algorithm
[  342.655293][   T52] Bluetooth: hci2: command tx timeout
[  342.730388][T10727] BTRFS info (device loop1): enabling ssd optimizations
[  342.734963][T10727] BTRFS info (device loop1): turning on async discard
[  342.735049][T10727] BTRFS info (device loop1): enabling free space tree
[  343.261023][ T5626] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  344.314230][T10765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1527'.
[  344.724100][   T52] Bluetooth: hci2: command tx timeout
[  345.510185][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  345.539300][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.551058][   T12] bond0 (unregistering): Released all slaves
[  345.561857][   T12] bond1 (unregistering): Released all slaves
[  345.754441][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1
[  345.872698][   T12] tipc: Disabling bearer <udp:syz2>
[  345.891114][   T12] tipc: Left network mode
[  346.105156][T10775] netlink: 'syz.3.1529': attribute type 13 has an invalid length.
[  346.804083][   T52] Bluetooth: hci2: command tx timeout
[  346.813681][T10791] loop1: detected capacity change from 0 to 128
[  346.872388][T10791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  346.916750][T10791] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  347.289342][ T5626] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  347.554340][T10807] syzkaller0: left promiscuous mode
[  347.554435][T10807] syzkaller0: left allmulticast mode
[  348.128428][   T12] hsr_slave_0: left promiscuous mode
[  348.142847][   T12] hsr_slave_1: left promiscuous mode
[  348.167573][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.175329][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  348.200258][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.208394][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  348.239185][   T12] veth1_macvtap: left promiscuous mode
[  348.245016][   T12] veth0_macvtap: left promiscuous mode
[  348.251004][   T12] veth1_vlan: left promiscuous mode
[  348.257004][   T12] veth0_vlan: left promiscuous mode
[  348.887541][   T52] Bluetooth: hci2: command tx timeout
[  349.191278][   T12] team0 (unregistering): Port device team_slave_1 removed
[  349.329826][   T12] team0 (unregistering): Port device team_slave_0 removed
[  349.580301][T10823] syzkaller0: entered promiscuous mode
[  349.580402][T10823] syzkaller0: entered allmulticast mode
[  349.587096][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2
[  349.991136][T10842] loop1: detected capacity change from 0 to 512
[  350.078921][T10842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.119763][T10842] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.155168][T10842] overlayfs: failed to resolve './bus': -2
[  350.297738][T10847] netlink: 'syz.4.1544': attribute type 13 has an invalid length.
[  350.440923][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.460786][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'.
[  350.646806][T10857] syzkaller0: Caught tx_queue_len zero misconfig
[  351.267681][T10698] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.276105][T10698] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.284396][T10698] bridge_slave_0: entered allmulticast mode
[  351.302439][T10698] bridge_slave_0: entered promiscuous mode
[  351.362054][T10698] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.370616][T10698] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.381787][T10698] bridge_slave_1: entered allmulticast mode
[  351.428514][T10698] bridge_slave_1: entered promiscuous mode
[  351.929013][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.958187][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.352118][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3
[  352.392747][T10698] team0: Port device team_slave_0 added
[  352.451817][T10698] team0: Port device team_slave_1 added
[  352.554684][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.561985][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.589014][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.602677][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.610088][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.636359][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.731988][T10913] netlink: 'syz.4.1558': attribute type 13 has an invalid length.
[  353.852355][T10698] hsr_slave_0: entered promiscuous mode
[  353.866564][T10698] hsr_slave_1: entered promiscuous mode
[  353.874825][T10698] debugfs: 'hsr0' already exists in 'hsr'
[  353.877539][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'.
[  353.889971][T10698] Cannot create hsr debugfs directory
[  355.883379][T10698] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  355.902400][T10698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.941699][T10698] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  355.993242][T10698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.004647][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4
[  356.036898][T10698] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  356.052957][T10698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.063250][T10698] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  356.086917][T10698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.927276][T10698] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.093685][T10698] 8021q: adding VLAN 0 to HW filter on device team0
[  357.689959][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.690100][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.716136][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.716272][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.169518][T10994] netlink: 'syz.4.1574': attribute type 13 has an invalid length.
[  358.266421][T10994] gretap0: refused to change device tx_queue_len
[  358.283710][T10994] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  360.590327][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.673666][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'.
[  360.729214][T11046] loop3: detected capacity change from 0 to 1024
[  360.739906][T11046] EXT4-fs: Ignoring removed oldalloc option
[  360.746488][T11046] EXT4-fs: Ignoring removed orlov option
[  360.865374][T11046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  360.879206][T11046] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.921306][T11046] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.1587: lblock 0 mapped to illegal pblock 0 (length 6)
[  360.947557][T11046] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  360.970755][T11046] EXT4-fs (loop3): This should not happen!! Data will be lost
[  360.970755][T11046] 
[  361.005894][T11046] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1587: bg 0: block 112: padding at end of block bitmap is not set
[  361.028502][T11046] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 5 with error 28
[  361.051982][T11046] EXT4-fs (loop3): This should not happen!! Data will be lost
[  361.051982][T11046] 
[  361.052044][T11046] EXT4-fs (loop3): Total free blocks count 0
[  361.052066][T11046] EXT4-fs (loop3): Free/Dirty block details
[  361.052102][T11046] EXT4-fs (loop3): free_blocks=0
[  361.052132][T11046] EXT4-fs (loop3): dirty_blocks=64
[  361.052151][T11046] EXT4-fs (loop3): Block reservation details
[  361.650431][T11068] SET target dimension over the limit!
[  362.409274][T10698] veth0_vlan: entered promiscuous mode
[  362.475812][T10698] veth1_vlan: entered promiscuous mode
[  362.601204][T10698] veth0_macvtap: entered promiscuous mode
[  362.630820][T10698] veth1_macvtap: entered promiscuous mode
[  362.655317][T11098] dlm: no locking on control device
[  362.709610][T10698] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.756518][T10698] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.988521][ T1125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.265418][ T1125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.314169][ T1125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.470872][ T1125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.846073][  T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.846118][  T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.338496][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.349316][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.518635][T11131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.934946][ T1116] IPVS: starting estimator thread 0...
[  369.044660][T11172] IPVS: using max 25 ests per chain, 60000 per kthread
[  369.574355][T11183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.258524][T11194] usb usb9: usbfs: process 11194 (syz.0.1621) did not claim interface 0 before use
[  372.553977][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  372.875922][   T10] usb 6-1: Using ep0 maxpacket: 32
[  372.885221][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  372.897666][   T10] usb 6-1: config 255 has too many interfaces: 253, using maximum allowed: 32
[  372.897750][   T10] usb 6-1: config 255 has an invalid interface descriptor of length 8, skipping
[  372.897790][   T10] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  372.897816][   T10] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 253
[  372.897910][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.290680][   T10] usb 6-1: string descriptor 0 read error: -71
[  373.305874][   T10] usb 6-1: USB disconnect, device number 2
[  373.648392][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.961380][T11226] loop1: detected capacity change from 0 to 512
[  374.048666][T11226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  374.197940][T11226] EXT4-fs (loop1): 1 truncate cleaned up
[  374.218847][T11226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.083034][T11304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.283267][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.594102][T11335] loop3: detected capacity change from 0 to 1024
[  379.603993][T11335] EXT4-fs: Ignoring removed orlov option
[  379.622152][T11335] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  379.653432][T11335] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  379.675408][T11335] EXT4-fs (loop3): invalid journal inode
[  379.681332][T11335] EXT4-fs (loop3): can't get journal size
[  379.706055][T11335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.752608][T11342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.895786][T11335] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  379.895786][T11335] 
[  380.113152][T11347] netlink: 'syz.4.1658': attribute type 13 has an invalid length.
[  380.140362][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.394104][T11351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1650'.
[  381.208322][T11374] loop1: detected capacity change from 0 to 512
[  381.266528][T11374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.280657][T11374] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  381.744837][T11390] loop0: detected capacity change from 0 to 128
[  381.792967][T11390] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  381.818128][T11390] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  381.900950][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.153109][ T5614] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  382.634732][T11381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  384.797593][T11427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  386.610682][T11463] loop0: detected capacity change from 0 to 512
[  386.676716][T11463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  386.697916][T11463] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.950877][T11463] overlayfs: missing 'lowerdir'
[  387.128847][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.137708][T11470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.755788][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1694'.
[  389.366930][T11502] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1700'.
[  389.908864][T11509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.501537][T11516] loop1: detected capacity change from 0 to 256
[  393.318974][T11538] netlink: 'syz.0.1713': attribute type 10 has an invalid length.
[  393.386377][T11550] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.448181][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'.
[  397.374825][T11606] dvmrp0: entered allmulticast mode
[  398.924274][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  399.213169][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'.
[  399.213219][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'.
[  399.297528][T11628] syzkaller0: entered promiscuous mode
[  399.303310][T11628] syzkaller0: entered allmulticast mode
[  399.373370][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'.
[  405.119918][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[  405.119971][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[  405.146975][T11688] loop5: detected capacity change from 0 to 1024
[  405.349353][T11688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  405.354897][T11688] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.567585][   T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  405.585665][   T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  405.673431][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  406.052810][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'.
[  406.300478][   T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.300554][   T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.550265][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.573448][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.596272][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.609802][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.621193][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.977884][   T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.977952][   T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.331758][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  407.331816][   T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.523272][T11730] loop1: detected capacity change from 0 to 512
[  408.011966][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  408.029484][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  408.038390][T11730] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  408.043918][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  408.045120][    C1] EXT4-fs (loop1): initial error at time 1786065300: ext4_mb_generate_buddy:1317
[  408.045159][    C1] EXT4-fs (loop1): last error at time 1786065300: ext4_mb_generate_buddy:1317
[  408.089851][T11730] EXT4-fs (loop1): Remounting filesystem read-only
[  408.097147][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  408.111781][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  408.123978][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  408.210477][T11730] EXT4-fs (loop1): 1 truncate cleaned up
[  408.235130][T11730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.244348][T11730] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.284676][   T59] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  408.339923][   T62] bridge_slave_1: left allmulticast mode
[  408.346635][   T62] bridge_slave_1: left promiscuous mode
[  408.356460][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.372045][   T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  408.383870][   T59] Quota error (device loop1): write_blk: dquota write failed
[  408.391453][   T59] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[  408.401784][   T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  408.412686][   T59] Quota error (device loop1): write_blk: dquota write failed
[  408.421275][   T59] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list
[  408.432131][   T59] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[  408.461430][   T62] bridge_slave_0: left allmulticast mode
[  408.461485][   T62] bridge_slave_0: left promiscuous mode
[  408.461806][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.495553][   T59] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  408.505401][   T59] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  408.519527][   T59] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  408.708374][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  408.725191][ T5623] Bluetooth: hci0: command tx timeout
[  408.959299][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1780'.
[  409.334915][   T62] bond0 (unregistering): Released all slaves
[  409.617014][   T62] tipc: Disabling bearer <udp:syz2>
[  409.617154][   T62] tipc: Left network mode
[  410.165448][ T5623] Bluetooth: hci1: command tx timeout
[  410.824138][ T5623] Bluetooth: hci0: command tx timeout
[  411.708487][T11804] loop5: detected capacity change from 0 to 1024
[  411.827921][T11804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  411.862115][T11804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.254028][ T5623] Bluetooth: hci1: command tx timeout
[  412.304892][   T62] hsr_slave_0: left promiscuous mode
[  412.329285][   T62] hsr_slave_1: left promiscuous mode
[  412.332303][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.332417][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.378510][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.378575][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.420572][   T62] veth1_macvtap: left promiscuous mode
[  412.420642][   T62] veth0_macvtap: left promiscuous mode
[  412.420955][   T62] veth1_vlan: left promiscuous mode
[  412.421188][   T62] veth0_vlan: left promiscuous mode
[  412.884207][ T5623] Bluetooth: hci0: command tx timeout
[  413.493760][   T62] team0 (unregistering): Port device team_slave_1 removed
[  413.522931][   T62] team0 (unregistering): Port device team_slave_0 removed
[  413.740219][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.933396][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7
[  414.327209][ T5623] Bluetooth: hci1: command tx timeout
[  414.587241][   T62] IPVS: stop unused estimator thread 0...
[  414.976100][ T5623] Bluetooth: hci0: command tx timeout
[  415.668342][   T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.703492][T11710] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.703767][T11710] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.704420][T11710] bridge_slave_0: entered allmulticast mode
[  415.719000][T11710] bridge_slave_0: entered promiscuous mode
[  415.817105][T11710] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.817391][T11710] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.817924][T11710] bridge_slave_1: entered allmulticast mode
[  415.841103][T11710] bridge_slave_1: entered promiscuous mode
[  416.227639][   T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.290686][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.411013][ T5623] Bluetooth: hci1: command tx timeout
[  416.422820][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.741285][T11710] team0: Port device team_slave_0 added
[  416.848507][   T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.874278][T11901] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1810'.
[  416.903732][T11740] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.906949][T11740] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.907576][T11740] bridge_slave_0: entered allmulticast mode
[  416.946868][T11740] bridge_slave_0: entered promiscuous mode
[  416.968670][T11740] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.968795][T11740] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.969343][T11740] bridge_slave_1: entered allmulticast mode
[  416.975501][T11740] bridge_slave_1: entered promiscuous mode
[  417.065702][T11710] team0: Port device team_slave_1 added
[  417.150013][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6
[  417.252660][T11898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.297423][   T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.391268][T11900] syzkaller0: mtu less than device minimum
[  417.409845][T11740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  417.435149][T11740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  417.564437][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.564485][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.564563][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.601325][T11740] team0: Port device team_slave_0 added
[  417.603853][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.603876][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.603912][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  417.620260][T11740] team0: Port device team_slave_1 added
[  417.974206][T11916] loop4: detected capacity change from 0 to 128
[  418.084941][T11916] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  418.102217][T11916] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  418.632436][T11740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.645713][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.645780][T11740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.851650][T11740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.851743][T11740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.851842][T11740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.978331][ T5628] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  419.392617][T11931] nvme_fabrics: missing parameter 'host_traddr=%s'
[  419.407685][T11710] hsr_slave_0: entered promiscuous mode
[  419.415800][T11710] hsr_slave_1: entered promiscuous mode
[  419.592105][T11740] hsr_slave_0: entered promiscuous mode
[  419.601666][T11740] hsr_slave_1: entered promiscuous mode
[  419.603792][T11740] debugfs: 'hsr0' already exists in 'hsr'
[  419.607446][T11740] Cannot create hsr debugfs directory
[  419.662425][T11928] syzkaller0: entered promiscuous mode
[  419.662473][T11928] syzkaller0: entered allmulticast mode
[  421.625700][T11956] loop5: detected capacity change from 0 to 256
[  421.636223][T11956] vfat: Unknown parameter 'nnonumtail'
[  424.952440][T11968] loop4: detected capacity change from 0 to 256
[  425.903422][   T62] bridge_slave_1: left allmulticast mode
[  425.903472][   T62] bridge_slave_1: left promiscuous mode
[  425.903718][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.948660][   T62] bridge_slave_0: left allmulticast mode
[  425.956402][   T62] bridge_slave_0: left promiscuous mode
[  425.960284][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.017262][   T62] dvmrp0: left allmulticast mode
[  427.736491][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.749333][   T62] bond0 (unregistering): Released all slaves
[  427.791628][   T62] bond1 (unregistering): Released all slaves
[  427.895525][   T62] bond2 (unregistering): Released all slaves
[  428.297454][   T62] tipc: Disabling bearer <udp:syz2>
[  428.297663][   T62] tipc: Left network mode
[  429.018837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8
[  429.262284][   T62] hsr_slave_0: left promiscuous mode
[  429.268253][   T62] hsr_slave_1: left promiscuous mode
[  429.273266][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  429.273379][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  429.276855][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.276911][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.362841][   T62] veth1_macvtap: left promiscuous mode
[  429.362906][   T62] veth0_macvtap: left promiscuous mode
[  429.363246][   T62] veth1_vlan: left promiscuous mode
[  429.363440][   T62] veth0_vlan: left promiscuous mode
[  430.165706][   T62] team0 (unregistering): Port device team_slave_1 removed
[  430.210095][   T62] team0 (unregistering): Port device team_slave_0 removed
[  430.631955][T12059] syzkaller0: entered promiscuous mode
[  430.645817][T12059] syzkaller0: entered allmulticast mode
[  438.140005][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5
[  438.209392][T12103] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  438.214741][T11710] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  438.387936][  T139] IPVS: starting estimator thread 0...
[  438.419528][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  438.439238][T11710] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  438.507597][T12113] IPVS: using max 26 ests per chain, 62400 per kthread
[  438.516837][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  438.526144][T11710] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  438.544680][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  438.554722][T11710] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  438.567802][T11710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  438.853006][T11740] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  438.871747][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  438.888811][T11740] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  438.903771][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  438.915472][T11740] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  438.930071][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  438.937483][   T31] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  438.951739][T11740] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  438.962876][T11740] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  439.037413][T11710] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.093990][   T31] usb 5-1: Using ep0 maxpacket: 32
[  439.100128][   T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  439.108465][T11710] 8021q: adding VLAN 0 to HW filter on device team0
[  439.122634][   T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  439.131258][   T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  439.140188][   T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  439.149620][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  439.159764][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  439.169656][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  439.179715][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  439.189660][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  439.203034][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.215346][   T31] usb 5-1: config 0 descriptor??
[  439.230054][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.236909][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.323040][T11036] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.323246][T11036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.451915][   T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  439.469685][   T31] usb 5-1: USB disconnect, device number 46
[  439.480279][   T31] usblp0: removed
[  439.538307][T11740] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.767148][T11740] 8021q: adding VLAN 0 to HW filter on device team0
[  439.806349][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.806593][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.862592][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.862837][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.903496][ T5277] 8021q: adding VLAN 0 to HW filter on device eth9
[  439.994277][   T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  440.036771][T12154] nvme_fabrics: missing parameter 'transport=%s'
[  440.043358][T12154] nvme_fabrics: missing parameter 'nqn=%s'
[  440.154063][   T31] usb 5-1: Using ep0 maxpacket: 32
[  440.161152][   T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  440.176798][   T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  440.185878][   T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  440.185942][   T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  440.185997][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  440.186025][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  440.186054][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  440.186081][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  440.186109][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  440.186157][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.269390][   T31] usb 5-1: config 0 descriptor??
[  440.480886][T12173] loop1: detected capacity change from 0 to 256
[  440.516942][   T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  440.786125][ T1062] usb 5-1: USB disconnect, device number 47
[  440.877485][ T1062] usblp0: removed
[  441.057987][T12185] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  441.342518][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.582786][T11740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  442.691177][T12219] loop5: detected capacity change from 0 to 2048
[  442.749762][T12219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.749987][T12219] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.794367][ T5277] 8021q: adding VLAN 0 to HW filter on device eth10
[  443.059625][T12234] capability: warning: `syz.4.1881' uses 32-bit capabilities (legacy support in use)
[  443.468262][T12242] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  443.524405][T11710] veth0_vlan: entered promiscuous mode
[  443.569963][T12242] syzkaller0: left promiscuous mode
[  443.570017][T12242] syzkaller0: left allmulticast mode
[  443.595118][T11710] veth1_vlan: entered promiscuous mode
[  443.795877][T11710] veth0_macvtap: entered promiscuous mode
[  443.807879][T11740] veth0_vlan: entered promiscuous mode
[  443.840551][T12215] only policy match revision 0 supported
[  443.840601][T12215] unable to load match
[  443.852183][T11710] veth1_macvtap: entered promiscuous mode
[  443.889196][T12252] loop1: detected capacity change from 0 to 256
[  443.897079][T11740] veth1_vlan: entered promiscuous mode
[  443.953674][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.258835][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.444140][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.444223][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.444309][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.444444][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.544390][T11740] veth0_macvtap: entered promiscuous mode
[  444.598393][T11740] veth1_macvtap: entered promiscuous mode
[  444.629956][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.733452][ T5277] 8021q: adding VLAN 0 to HW filter on device eth11
[  444.762445][T11036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.762501][T11036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.897257][T11740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.914021][ T1062] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  444.931533][T11740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.946359][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.946409][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.004784][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.005937][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.042591][T12271] loop1: detected capacity change from 0 to 8192
[  445.055504][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.062734][ T1116] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.064579][ T1062] usb 5-1: Using ep0 maxpacket: 32
[  445.079593][ T1062] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  445.091375][ T1062] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  445.091424][ T1062] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  445.091451][ T1062] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  445.091541][ T1062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  445.091569][ T1062] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  445.091599][ T1062] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  445.091648][ T1062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.163597][ T1062] usb 5-1: config 0 descriptor??
[  445.399930][ T1062] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  445.427359][ T1062] usb 5-1: USB disconnect, device number 48
[  445.477376][ T1062] usblp0: removed
[  445.717899][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  445.717947][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.948048][T12292] loop5: detected capacity change from 0 to 256
[  446.057442][  T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.070361][  T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.003225][ T5277] 8021q: adding VLAN 0 to HW filter on device eth12
[  449.313966][   T25] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  449.438957][T12355] capability: warning: `syz.7.1912' uses deprecated v2 capabilities in a way that may be insecure
[  449.475165][   T25] usb 2-1: Using ep0 maxpacket: 32
[  449.484709][   T25] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  449.509261][   T25] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  449.509313][   T25] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  449.509357][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  449.509414][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  449.509443][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  449.509474][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  449.509523][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.584580][   T25] usb 2-1: config 0 descriptor??
[  449.611804][T12361] loop6: detected capacity change from 0 to 256
[  449.843336][   T25] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  449.913975][   T25] usb 2-1: USB disconnect, device number 38
[  449.987264][   T25] usblp0: removed
[  450.055346][T12367] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  451.228107][T12407] loop7: detected capacity change from 0 to 256
[  451.444274][T12418] syzkaller0: entered promiscuous mode
[  451.444318][T12418] syzkaller0: entered allmulticast mode
[  451.592114][T12410] gadgetfs: bound to dummy_udc driver
[  451.866040][ T5786] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  451.876003][    C1] gadgetfs: connected
[  451.884799][ T5786] gadgetfs: disconnected
[  451.958643][  T139] Bluetooth: hci5: Frame reassembly failed (-84)
[  451.988868][  T139] Bluetooth: hci5: Frame reassembly failed (-84)
[  452.752250][ T1116] IPVS: starting estimator thread 0...
[  452.935037][T12453] IPVS: using max 24 ests per chain, 57600 per kthread
[  453.681780][T12458] loop5: detected capacity change from 0 to 1024
[  453.685586][T12458] EXT4-fs: Ignoring removed oldalloc option
[  453.685661][T12458] EXT4-fs: Ignoring removed orlov option
[  453.779512][T12458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.779874][T12458] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  453.822815][T12458] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.1943: lblock 0 mapped to illegal pblock 0 (length 6)
[  453.842426][T12458] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  453.857081][T12458] EXT4-fs (loop5): This should not happen!! Data will be lost
[  453.857081][T12458] 
[  453.919307][   T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set
[  453.980815][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  453.980868][   T12] EXT4-fs (loop5): This should not happen!! Data will be lost
[  453.980868][   T12] 
[  453.980915][   T12] EXT4-fs (loop5): Total free blocks count 0
[  453.980935][   T12] EXT4-fs (loop5): Free/Dirty block details
[  453.980953][   T12] EXT4-fs (loop5): free_blocks=0
[  453.980971][   T12] EXT4-fs (loop5): dirty_blocks=48
[  453.980990][   T12] EXT4-fs (loop5): Block reservation details
[  454.022745][ T5623] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  455.317630][T12499] fuse: Bad value for 'fd'
[  455.322829][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1950'.
[  455.362701][T12502] loop1: detected capacity change from 0 to 256
[  455.387085][T12502] vfat: Unknown parameter 'nnonumtail'
[  455.855167][   T13] Bluetooth: hci5: Frame reassembly failed (-84)
[  456.651691][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.063867][  T139] IPVS: starting estimator thread 0...
[  457.163944][T12568] IPVS: using max 27 ests per chain, 64800 per kthread
[  457.653601][T12584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.780759][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1980'.
[  457.926323][ T5623] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  457.930758][   T52] Bluetooth: hci5: command 0x1003 tx timeout
[  459.588452][T12625] loop1: detected capacity change from 0 to 256
[  460.337030][ T1125] Bluetooth: hci5: Frame reassembly failed (-84)
[  461.237126][T12660] loop4: detected capacity change from 0 to 256
[  462.407293][   T52] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  462.659886][T12687] loop1: detected capacity change from 0 to 512
[  462.723939][T12641] Bluetooth: hci2: command 0x0406 tx timeout
[  462.752079][T12687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.752313][T12687] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.767495][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.125658][T12724] loop5: detected capacity change from 0 to 256
[  464.140895][T12721] loop4: detected capacity change from 0 to 512
[  464.204585][T12721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  464.478832][T12721] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.2032: bg 0: bad block bitmap checksum
[  464.557106][T12733] loop5: detected capacity change from 0 to 1024
[  464.615131][T12733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.639296][ T5628] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.958167][T12739] EXT4-fs error (device loop5): ext4_generic_delete_entry:2675: inode #12: block 7: comm syz.5.2035: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  464.981865][T12739] EXT4-fs error (device loop5) in ext4_delete_inline_entry:1723: Corrupt filesystem
[  466.247623][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2030'.
[  466.287860][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.469032][T12764] ip_tables: iptables: counters copy to user failed while replacing table
[  467.119398][T12769] infiniband syz0: set active
[  467.119454][T12769] infiniband syz0: added team0
[  467.235215][T12769] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  467.235290][T12769] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  467.235353][T12769] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  467.322943][T12769] RDS/IB: syz0: added
[  467.323552][T12769] smc: adding ib device syz0 with port count 1
[  467.323736][T12769] smc:    ib device syz0 port 1 has no pnetid
[  468.913300][T12796] nvme_fabrics: missing parameter 'nqn=%s'
[  470.905753][T12814] infiniband syz2: set active
[  470.905804][T12814] infiniband syz2: added bond_slave_0
[  470.908395][T12814] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  470.914317][T12814] infiniband syz2: Couldn't open port 1
[  470.914582][T12814] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  470.914623][T12814] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  470.914672][T12814] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  471.022991][T12814] RDS/IB: syz2: added
[  471.023065][T12814] smc: adding ib device syz2 with port count 1
[  471.023089][T12814] smc:    ib device syz2 port 1 has no pnetid
[  473.273091][T12838] file system registered
[  476.021109][T12905] process 'syz.1.2083' launched './file1' with NULL argv: empty string added
[  476.894223][T12949] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request
[  477.181274][T12959] fuse: Bad value for 'user_id'
[  477.181320][T12959] fuse: Bad value for 'user_id'
[  477.369861][T12964] nvmet: adding nsid 1 to subsystem testnqn
[  477.385200][   T32] audit: type=1800 audit(1786065369.961:32): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2105" name="device_path" dev="configfs" ino=30200 res=0 errno=0
[  477.420243][   T32] audit: type=1800 audit(1786065369.991:33): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2105" name="buffered_io" dev="configfs" ino=30201 res=0 errno=0
[  477.473268][   T32] audit: type=1800 audit(1786065370.041:34): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2105" name="addr_trtype" dev="configfs" ino=30210 res=0 errno=0
[  477.903542][ T1125] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:668f3e18-d908-4ef2-86e1-d9fd43c8b0d6 for subsystem testnqn not allowed
[  477.915090][T12964] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:668f3e18-d908-4ef2-86e1-d9fd43c8b0d6
[  478.722936][T12990] nvme_fabrics: unknown parameter or missing value 'nq' in ctrl creation request
[  480.042428][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2125'.
[  480.067233][T13024] vlan2: entered allmulticast mode
[  480.072772][T13024] macsec0: entered allmulticast mode
[  480.115287][T13024] veth1_macvtap: entered allmulticast mode
[  480.457207][T13031] loop1: detected capacity change from 0 to 4096
[  480.488547][T13031] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  480.488591][T13031] EXT4-fs (loop1): Test dummy encryption mode enabled
[  480.550253][T13033] loop5: detected capacity change from 0 to 512
[  480.741409][T13031] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  480.752470][T13031] System zones: 0-5
[  480.772560][T13031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.787100][T13033] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2126: bad orphan inode 15
[  480.797583][T13033] loop5: lost filesystem error report for type 5 error -117
[  480.797915][T13033] ext4_test_bit(bit=14, block=5) = 0
[  480.803372][T13033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.836329][T13031] nfs: Unknown parameter 'debug'
[  480.931980][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.942944][T10698] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.255753][T13048] loop5: detected capacity change from 0 to 256
[  483.675623][T13069] nfs: Unknown parameter 'debug'
[  486.335718][T13111] loop5: detected capacity change from 0 to 40427
[  486.352346][T13111] F2FS-fs (loop5): build fault injection rate: 174
[  486.352395][T13111] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  486.371642][T13111] F2FS-fs (loop5): invalid crc value
[  486.385577][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'.
[  486.603477][T13111] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  487.439986][T13111] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  487.618096][   T32] audit: type=1800 audit(1786065380.191:35): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2154" name="file1" dev="loop5" ino=10 res=0 errno=0
[  487.811722][T10698] syz-executor: attempt to access beyond end of device
[  487.811722][T10698] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  487.833524][T10698] CPU: 1 UID: 0 PID: 10698 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  487.833583][T10698] Tainted: [L]=SOFTLOCKUP
[  487.833598][T10698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  487.833628][T10698] Call Trace:
[  487.833703][T10698]  <TASK>
[  487.833768][T10698]  dump_stack_lvl+0xe8/0x150
[  487.833932][T10698]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  487.834049][T10698]  f2fs_write_end_io+0x1215/0x16f0
[  487.834128][T10698]  ? blkg_put+0x22/0x240
[  487.834243][T10698]  __submit_merged_bio+0x258/0x6a0
[  487.834269][T10698]  ? rcu_is_watching+0x15/0xb0
[  487.834322][T10698]  __submit_merged_write_cond+0x3c9/0x4e0
[  487.834360][T10698]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  487.834413][T10698]  f2fs_write_data_pages+0x2a27/0x36f0
[  487.834444][T10698]  ? __lock_acquire+0x6df/0x2e50
[  487.834527][T10698]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  487.834556][T10698]  ? is_bpf_text_address+0x26/0x2b0
[  487.834608][T10698]  ? arch_stack_walk+0xfb/0x150
[  487.834676][T10698]  ? add_lock_to_list+0xc7/0x100
[  487.834703][T10698]  ? lockdep_unlock+0x5d/0xd0
[  487.834731][T10698]  ? __lock_acquire+0x14b9/0x2e50
[  487.834792][T10698]  ? do_raw_spin_lock+0x12b/0x2f0
[  487.834832][T10698]  ? do_raw_spin_unlock+0xf5/0x210
[  487.834860][T10698]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  487.834892][T10698]  do_writepages+0x338/0x560
[  487.834952][T10698]  ? do_raw_spin_unlock+0xf5/0x210
[  487.834985][T10698]  filemap_fdatawrite+0x1e9/0x2f0
[  487.835015][T10698]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  487.835090][T10698]  ? do_raw_spin_unlock+0xf5/0x210
[  487.835125][T10698]  f2fs_sync_dirty_inodes+0x30e/0x830
[  487.835175][T10698]  f2fs_write_checkpoint+0xa3d/0x2710
[  487.835208][T10698]  ? __lock_acquire+0x6df/0x2e50
[  487.835274][T10698]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  487.835366][T10698]  kill_f2fs_super+0x2dd/0x700
[  487.835409][T10698]  ? __pfx_kill_f2fs_super+0x10/0x10
[  487.835455][T10698]  ? call_rcu+0x64b/0x8b0
[  487.835480][T10698]  ? lockdep_hardirqs_on+0x7a/0x110
[  487.835596][T10698]  deactivate_locked_super+0xbc/0x110
[  487.835660][T10698]  cleanup_mnt+0x3d3/0x460
[  487.835696][T10698]  task_work_run+0x1d9/0x270
[  487.835734][T10698]  ? __pfx_task_work_run+0x10/0x10
[  487.835775][T10698]  exit_to_user_mode_loop+0x1fa/0x730
[  487.835809][T10698]  ? rcu_is_watching+0x15/0xb0
[  487.835838][T10698]  do_syscall_64+0x328/0x510
[  487.835892][T10698]  ? trace_irq_disable+0x3b/0x140
[  487.835949][T10698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.836021][T10698]  ? clear_bhb_loop+0x40/0x90
[  487.836048][T10698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  487.836070][T10698] RIP: 0033:0x7fae8899f317
[  487.836118][T10698] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  487.836138][T10698] RSP: 002b:00007ffcf09c46e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  487.836200][T10698] RAX: 0000000000000000 RBX: 00007fae88a34474 RCX: 00007fae8899f317
[  487.836216][T10698] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf09c47a0
[  487.836229][T10698] RBP: 00007ffcf09c47a0 R08: 00007ffcf09c57a0 R09: 00000000ffffffff
[  487.836244][T10698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf09c5830
[  487.836258][T10698] R13: 00007fae88a34474 R14: 00000000000770a3 R15: 00007ffcf09c5870
[  487.836293][T10698]  </TASK>
[  487.845800][T10698] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  488.463215][T13169] loop1: detected capacity change from 0 to 4096
[  488.504584][T13169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  488.504638][T13169] EXT4-fs (loop1): Test dummy encryption mode enabled
[  488.527280][T13169] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  488.527463][T13169] System zones: 0-5
[  488.554888][T13169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  488.612312][T13169] nfs: Unknown parameter 'ÿÿÿÿ'
[  488.675214][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.870582][T13191] syzkaller0: entered promiscuous mode
[  489.870643][T13191] syzkaller0: entered allmulticast mode
[  491.909223][T12641] Bluetooth: hci1: command 0x0406 tx timeout
[  493.216086][T13217] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO)
[  493.216141][T13217] device-mapper: ioctl: error adding target to table
[  495.303752][T13277] IPv6: sit1: Disabled Multicast RS
[  495.312712][T13277] sit1: entered allmulticast mode
[  495.965628][T13283] loop5: detected capacity change from 0 to 256
[  495.981402][T13283] vfat: Bad value for 'fmask'
[  496.328009][T13293] loop1: detected capacity change from 0 to 512
[  496.337811][T13293] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  497.050694][T13295] futex_wake_op: syz.4.2213 tries to shift op by 144; fix this program
[  498.414252][T13301] ip_tables: iptables: counters copy to user failed while replacing table
[  500.772668][T13333] loop1: detected capacity change from 0 to 4096
[  500.791475][T13333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  500.791529][T13333] EXT4-fs (loop1): Test dummy encryption mode enabled
[  500.801229][T13333] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  500.801371][T13333] System zones: 0-5
[  501.169951][T13340] sit1: left allmulticast mode
[  501.621572][T13333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.769381][T13333] nfs: Unknown parameter 'ÿÿÿÿ'
[  501.917282][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.364763][T13373] loop1: detected capacity change from 0 to 256
[  503.502377][T13373] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  504.263844][T13379] loop1: detected capacity change from 0 to 4096
[  504.281220][T13379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  504.281263][T13379] EXT4-fs (loop1): Test dummy encryption mode enabled
[  504.301441][T13379] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  504.301604][T13379] System zones: 0-5
[  504.450685][T13379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.507134][T13379] nfs: Unknown parameter 'ÿÿÿÿ'
[  504.651319][ T5626] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.781962][T13417] nfs: Unknown parameter 'ÿÿÿÿ'
[  507.006587][T13445] loop1: detected capacity change from 0 to 16
[  507.261901][T13445] erofs (device loop1): mounted with root inode @ nid 36.
[  507.537092][T13455] loop5: detected capacity change from 0 to 2048
[  507.668889][T13454] nfs: Unknown parameter 'ÿÿÿÿ'
[  507.749436][T13462] loop1: detected capacity change from 0 to 16
[  507.793431][   T32] audit: type=1326 audit(1786065400.361:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.5.2270" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae8899e0d9 code=0x0
[  507.856623][T13462] erofs (device loop1): mounted with root inode @ nid 36.
[  508.020040][T13455]  loop5: p3 < > p4 < >
[  508.020087][T13455] loop5: partition table partially beyond EOD, truncated
[  508.020309][T13455] loop5: p3 start 4284289 is beyond EOD, truncated
[  508.270622][T13470] overlayfs: failed to clone lowerpath
[  508.335999][T13473] loop1: detected capacity change from 0 to 256
[  508.380034][T13472] overlayfs: failed to clone lowerpath
[  509.142842][T13499] bridge_slave_0: left allmulticast mode
[  509.151055][T13499] bridge_slave_0: left promiscuous mode
[  509.157328][T13499] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.185422][T13499] bridge_slave_1: left allmulticast mode
[  509.192155][T13499] bridge_slave_1: left promiscuous mode
[  509.199067][T13499] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.230166][T13499] bond0: (slave bond_slave_0): Releasing backup interface
[  509.259536][T13499] bond0: (slave bond_slave_1): Releasing backup interface
[  509.341533][T13499] team0: Port device team_slave_0 removed
[  509.374939][T13499] team0: Port device team_slave_1 removed
[  509.382710][T13499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.385256][T13499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.409176][T13499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.409228][T13499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.442883][T13499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  509.560414][   T25] syz2: Port: 1 Link DOWN
[  510.155822][T13535] loop4: detected capacity change from 0 to 256
[  510.157604][T13535] exfat: Deprecated parameter 'namecase'
[  510.157806][T13535] exfat: Deprecated parameter 'utf8'
[  510.249352][T13535] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  511.053377][T13558] rdma_rxe: rxe_newlink: failed to add team0
[  511.077469][T13563] device-mapper: ioctl: Invalid data size in the ioctl structure: 56
[  511.469391][T13578] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2)
[  511.559473][T13585] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2885327846/2885327848
[  511.961296][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2319'.
[  511.976519][T13602] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  511.984646][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  512.012170][T13603] bridge_slave_0: left allmulticast mode
[  512.020383][T13603] bridge_slave_0: left promiscuous mode
[  512.028981][T13603] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.050183][T13603] bridge_slave_1: left allmulticast mode
[  512.060662][T13603] bridge_slave_1: left promiscuous mode
[  512.074918][T13603] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.242501][T13603] bond0: (slave bond_slave_0): Releasing backup interface
[  512.396385][T13603] team0: Port device team_slave_0 removed
[  512.449820][T13603] team0: Port device team_slave_1 removed
[  512.460581][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.460637][T13603] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.489804][T13603] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.489858][T13603] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.536819][T13603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  512.605778][T13612] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2)
[  512.729447][ T1062] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  513.778153][T13644] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2)
[  513.901650][T13643] bridge_slave_0: left allmulticast mode
[  513.907110][T13643] bridge_slave_0: left promiscuous mode
[  513.908056][T13643] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.928179][T13646] loop1: detected capacity change from 0 to 256
[  513.940798][T13646] exfat: Deprecated parameter 'utf8'
[  513.941204][T13646] exfat: Deprecated parameter 'namecase'
[  513.941290][T13646] exfat: Deprecated parameter 'utf8'
[  513.984937][T13646] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  514.389100][T13643] bridge_slave_1: left allmulticast mode
[  514.389150][T13643] bridge_slave_1: left promiscuous mode
[  514.389602][T13643] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.488641][T13643] bond0: (slave bond_slave_0): Releasing backup interface
[  514.567769][T13643] bond0: (slave bond_slave_1): Releasing backup interface
[  514.616709][T13643] team0: Port device team_slave_0 removed
[  514.685429][T13643] team0: Port device team_slave_1 removed
[  514.694813][T13643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.694864][T13643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.717433][T13643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.717494][T13643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.737449][T13643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  516.164642][T13677] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  516.194607][ T5628] ffs_data_put(): freeing
[  517.127083][T13651] loop1: detected capacity change from 0 to 40427
[  517.193200][T13651] F2FS-fs (loop1): invalid crc value
[  518.127500][T13698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  518.329056][T13651] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  518.404817][T13651] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  518.417543][T13651] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  518.429377][T13651] F2FS-fs (loop1): Start checkpoint disabled!
[  518.466387][T13651] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  518.718768][T13705] rdma_rxe: rxe_newlink: failed to add team0
[  518.842530][T13708] loop5: detected capacity change from 0 to 512
[  518.916524][T13713] ffs_data_put(): freeing
[  519.536199][T13708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.558757][T13708] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  519.796152][T13723] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  521.064609][T10698] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  521.090175][T13736] overlayfs: failed to clone lowerpath
[  521.093206][T10698] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  521.162338][T13738] netlink: 'syz.6.2369': attribute type 1 has an invalid length.
[  521.480059][T13743] rdma_rxe: rxe_newlink: failed to add team0
[  522.086157][T13734] loop4: detected capacity change from 0 to 40427
[  522.088351][T13734] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  522.088811][T13734] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  522.091435][T13734] F2FS-fs (loop4): Image doesn't support compression
[  522.092819][T13734] F2FS-fs (loop4): invalid crc value
[  522.966352][T13720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.286505][T13734] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  523.419472][T13734] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  523.428264][T13734] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  523.439844][T13734] F2FS-fs (loop4): Start checkpoint disabled!
[  523.825140][T13734] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  523.838943][T13734] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  523.850664][T13734] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  524.033111][T13734] ------------[ cut here ]------------
[  524.033155][T13734] lim->dma_alignment > PAGE_SIZE
[  524.033193][T13734] WARNING: block/blk-settings.c:497 at blk_validate_limits+0x1676/0x2270, CPU#1: syz.4.2368/13734
[  524.056145][T13734] Modules linked in:
[  524.062376][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.4.2368 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  524.074052][T13734] Tainted: [L]=SOFTLOCKUP
[  524.080644][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  524.091211][T13734] RIP: 0010:blk_validate_limits+0x1676/0x2270
[  524.098639][T13734] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00
[  524.118657][T13734] RSP: 0018:ffffc900036c6e60 EFLAGS: 00010283
[  524.124976][T13734] RAX: ffffffff84b5fdd5 RBX: ffffc900036c70f0 RCX: 0000000000080000
[  524.132987][T13734] RDX: ffffc900064a1000 RSI: 0000000000000985 RDI: 0000000000000986
[  524.141624][T13734] RBP: 00000000ffffffff R08: ffff888076adb0bf R09: 1ffff1100ed5b617
[  524.150379][T13734] R10: dffffc0000000000 R11: ffffed100ed5b618 R12: ffffc900036c7040
[  524.158538][T13734] R13: dffffc0000000000 R14: 1ffff920006d8e1e R15: dffffc0000000000
[  524.166603][T13734] FS:  00007fc451f1c6c0(0000) GS:ffff888125018000(0000) knlGS:0000000000000000
[  524.175626][T13734] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  524.182282][T13734] CR2: 00007ffe053fdff0 CR3: 0000000077efe000 CR4: 00000000003526f0
[  524.191645][T13734] Call Trace:
[  524.195028][T13734]  <TASK>
[  524.198035][T13734]  queue_limits_commit_update+0x87/0x390
[  524.203736][T13734]  loop_configure+0x7f1/0xdc0
[  524.208736][T13734]  ? __pfx_loop_configure+0x10/0x10
[  524.214413][T13734]  lo_ioctl+0xad5/0x2150
[  524.218735][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.224236][T13734]  ? __pfx_lo_ioctl+0x10/0x10
[  524.228973][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.234281][T13734]  ? kernel_text_address+0xa5/0xe0
[  524.240062][T13734]  ? __kernel_text_address+0xd/0x30
[  524.246125][T13734]  ? unwind_get_return_address+0x4d/0x90
[  524.252001][T13734]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  524.258436][T13734]  ? arch_stack_walk+0xfb/0x150
[  524.263358][T13734]  ? stack_trace_save+0xa9/0x100
[  524.268429][T13734]  ? __pfx_stack_trace_save+0x10/0x10
[  524.273934][T13734]  ? __kmalloc_cache_noprof+0x14b/0x600
[  524.279575][T13734]  ? stack_depot_save_flags+0x33/0x800
[  524.285202][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.290217][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.295292][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.300299][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.305379][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.310389][T13734]  ? lock_acquire+0x115/0x350
[  524.315197][T13734]  ? lock_acquire+0x115/0x350
[  524.320028][T13734]  ? lock_acquire+0x115/0x350
[  524.324907][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.330160][T13734]  ? is_bpf_text_address+0x292/0x2b0
[  524.335823][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.341112][T13734]  ? kernel_text_address+0xa5/0xe0
[  524.346902][T13734]  ? __kernel_text_address+0xd/0x30
[  524.352209][T13734]  ? unwind_get_return_address+0x4d/0x90
[  524.358381][T13734]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  524.364791][T13734]  ? arch_stack_walk+0xfb/0x150
[  524.369752][T13734]  ? stack_trace_save+0xa9/0x100
[  524.374785][T13734]  ? __pfx_stack_trace_save+0x10/0x10
[  524.380254][T13734]  ? kasan_save_track+0x4f/0x80
[  524.385249][T13734]  ? stack_depot_save_flags+0x33/0x800
[  524.390773][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.395835][T13734]  ? kasan_save_track+0x4f/0x80
[  524.400919][T13734]  ? kasan_save_track+0x3e/0x80
[  524.405942][T13734]  ? kasan_save_free_info+0x40/0x50
[  524.411182][T13734]  ? __kasan_slab_free+0x5c/0x80
[  524.416224][T13734]  ? kfree+0x1c5/0x650
[  524.420351][T13734]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  524.426192][T13734]  ? security_file_ioctl+0xc3/0x2a0
[  524.431540][T13734]  ? __se_sys_ioctl+0x47/0x170
[  524.436434][T13734]  ? do_syscall_64+0x166/0x510
[  524.441254][T13734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.448076][T13734]  ? __asan_memset+0x22/0x50
[  524.453202][T13734]  ? blk_get_meta_cap+0x19d/0x780
[  524.458457][T13734]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  524.463958][T13734]  ? blkdev_common_ioctl+0x14b7/0x3250
[  524.469555][T13734]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  524.475320][T13734]  ? kasan_quarantine_put+0xbb/0x1f0
[  524.480672][T13734]  ? tomoyo_path_number_perm+0x219/0x5f0
[  524.486673][T13734]  ? tomoyo_path_number_perm+0x219/0x5f0
[  524.492388][T13734]  ? do_vfs_ioctl+0x116f/0x1530
[  524.497413][T13734]  ? __pfx_lo_ioctl+0x10/0x10
[  524.502173][T13734]  blkdev_ioctl+0x5e3/0x740
[  524.506784][T13734]  ? __pfx_blkdev_ioctl+0x10/0x10
[  524.511889][T13734]  ? __fget_files+0x2a/0x420
[  524.516619][T13734]  ? bpf_lsm_file_ioctl+0x9/0x20
[  524.521629][T13734]  ? __pfx_blkdev_ioctl+0x10/0x10
[  524.526807][T13734]  __se_sys_ioctl+0xfc/0x170
[  524.531453][T13734]  do_syscall_64+0x166/0x510
[  524.536160][T13734]  ? trace_irq_disable+0x3b/0x140
[  524.541232][T13734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.547927][T13734]  ? clear_bhb_loop+0x40/0x90
[  524.552664][T13734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.559109][T13734] RIP: 0033:0x7fc450f9e0d9
[  524.563588][T13734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.583381][T13734] RSP: 002b:00007fc451f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  524.591928][T13734] RAX: ffffffffffffffda RBX: 00007fc451225fa0 RCX: 00007fc450f9e0d9
[  524.599994][T13734] RDX: 0000200000000180 RSI: 0000000000004c0a RDI: 0000000000000004
[  524.608053][T13734] RBP: 00007fc451035024 R08: 0000000000000000 R09: 0000000000000000
[  524.616215][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  524.624284][T13734] R13: 00007fc451226038 R14: 00007fc451225fa0 R15: 00007ffdbc4a1378
[  524.632333][T13734]  </TASK>
[  524.635481][T13734] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  524.642903][T13734] CPU: 1 UID: 0 PID: 13734 Comm: syz.4.2368 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  524.653980][T13734] Tainted: [L]=SOFTLOCKUP
[  524.658341][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  524.668447][T13734] Call Trace:
[  524.671768][T13734]  <TASK>
[  524.674741][T13734]  vpanic+0x56c/0xa60
[  524.678819][T13734]  ? __pfx__printk+0x10/0x10
[  524.683452][T13734]  ? __pfx_vpanic+0x10/0x10
[  524.688012][T13734]  ? is_bpf_text_address+0x292/0x2b0
[  524.693343][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.698599][T13734]  panic+0xc5/0xd0
[  524.702385][T13734]  ? __pfx_panic+0x10/0x10
[  524.706907][T13734]  __warn+0x315/0x4c0
[  524.710942][T13734]  ? blk_validate_limits+0x1676/0x2270
[  524.716462][T13734]  ? blk_validate_limits+0x1676/0x2270
[  524.721981][T13734]  __report_bug+0x276/0x570
[  524.726734][T13734]  ? __pfx___schedule+0x10/0x10
[  524.731637][T13734]  ? blk_validate_limits+0x1676/0x2270
[  524.737169][T13734]  ? __pfx___report_bug+0x10/0x10
[  524.742276][T13734]  ? preempt_schedule_thunk+0x16/0x40
[  524.747708][T13734]  ? preempt_schedule_common+0x82/0xd0
[  524.753220][T13734]  ? preempt_schedule_thunk+0x16/0x40
[  524.758650][T13734]  ? blk_validate_limits+0x1676/0x2270
[  524.764184][T13734]  report_bug+0x16a/0x220
[  524.768567][T13734]  ? blk_validate_limits+0x1676/0x2270
[  524.774111][T13734]  ? blk_validate_limits+0x1678/0x2270
[  524.779624][T13734]  handle_bug+0x9c/0x200
[  524.784018][T13734]  exc_invalid_op+0x1a/0x50
[  524.788566][T13734]  asm_exc_invalid_op+0x1a/0x20
[  524.793449][T13734] RIP: 0010:blk_validate_limits+0x1676/0x2270
[  524.799689][T13734] Code: e8 3f 86 11 fd 90 0f 0b 90 eb 8f e8 34 86 11 fd 90 0f 0b 90 eb 84 e8 29 86 11 fd 90 0f 0b 90 e9 76 ff ff ff e8 1b 86 11 fd 90 <0f> 0b 90 e9 68 ff ff ff e8 0d 86 11 fd 90 0f 0b 90 e9 81 00 00 00
[  524.819772][T13734] RSP: 0018:ffffc900036c6e60 EFLAGS: 00010283
[  524.825877][T13734] RAX: ffffffff84b5fdd5 RBX: ffffc900036c70f0 RCX: 0000000000080000
[  524.833874][T13734] RDX: ffffc900064a1000 RSI: 0000000000000985 RDI: 0000000000000986
[  524.841872][T13734] RBP: 00000000ffffffff R08: ffff888076adb0bf R09: 1ffff1100ed5b617
[  524.849871][T13734] R10: dffffc0000000000 R11: ffffed100ed5b618 R12: ffffc900036c7040
[  524.857872][T13734] R13: dffffc0000000000 R14: 1ffff920006d8e1e R15: dffffc0000000000
[  524.865887][T13734]  ? blk_validate_limits+0x1675/0x2270
[  524.871416][T13734]  queue_limits_commit_update+0x87/0x390
[  524.877113][T13734]  loop_configure+0x7f1/0xdc0
[  524.881836][T13734]  ? __pfx_loop_configure+0x10/0x10
[  524.887091][T13734]  lo_ioctl+0xad5/0x2150
[  524.891384][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.896708][T13734]  ? __pfx_lo_ioctl+0x10/0x10
[  524.901410][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.906657][T13734]  ? kernel_text_address+0xa5/0xe0
[  524.911810][T13734]  ? __kernel_text_address+0xd/0x30
[  524.917031][T13734]  ? unwind_get_return_address+0x4d/0x90
[  524.922948][T13734]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  524.929134][T13734]  ? arch_stack_walk+0xfb/0x150
[  524.934020][T13734]  ? stack_trace_save+0xa9/0x100
[  524.938992][T13734]  ? __pfx_stack_trace_save+0x10/0x10
[  524.944391][T13734]  ? __kmalloc_cache_noprof+0x14b/0x600
[  524.950052][T13734]  ? stack_depot_save_flags+0x33/0x800
[  524.955535][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.960510][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.965492][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.970470][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.975447][T13734]  ? __lock_acquire+0x6df/0x2e50
[  524.980419][T13734]  ? lock_acquire+0x115/0x350
[  524.985138][T13734]  ? lock_acquire+0x115/0x350
[  524.989874][T13734]  ? lock_acquire+0x115/0x350
[  524.994594][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  524.999847][T13734]  ? is_bpf_text_address+0x292/0x2b0
[  525.005159][T13734]  ? is_bpf_text_address+0x26/0x2b0
[  525.010383][T13734]  ? kernel_text_address+0xa5/0xe0
[  525.015518][T13734]  ? __kernel_text_address+0xd/0x30
[  525.020736][T13734]  ? unwind_get_return_address+0x4d/0x90
[  525.026397][T13734]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  525.032578][T13734]  ? arch_stack_walk+0xfb/0x150
[  525.037462][T13734]  ? stack_trace_save+0xa9/0x100
[  525.042435][T13734]  ? __pfx_stack_trace_save+0x10/0x10
[  525.047837][T13734]  ? kasan_save_track+0x4f/0x80
[  525.052749][T13734]  ? stack_depot_save_flags+0x33/0x800
[  525.058228][T13734]  ? __lock_acquire+0x6df/0x2e50
[  525.063203][T13734]  ? kasan_save_track+0x4f/0x80
[  525.068081][T13734]  ? kasan_save_track+0x3e/0x80
[  525.072965][T13734]  ? kasan_save_free_info+0x40/0x50
[  525.078183][T13734]  ? __kasan_slab_free+0x5c/0x80
[  525.083142][T13734]  ? kfree+0x1c5/0x650
[  525.087244][T13734]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  525.092907][T13734]  ? security_file_ioctl+0xc3/0x2a0
[  525.098128][T13734]  ? __se_sys_ioctl+0x47/0x170
[  525.102918][T13734]  ? do_syscall_64+0x166/0x510
[  525.107701][T13734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.113796][T13734]  ? __asan_memset+0x22/0x50
[  525.118421][T13734]  ? blk_get_meta_cap+0x19d/0x780
[  525.123473][T13734]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  525.128899][T13734]  ? blkdev_common_ioctl+0x14b7/0x3250
[  525.134393][T13734]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  525.140049][T13734]  ? kasan_quarantine_put+0xbb/0x1f0
[  525.145368][T13734]  ? tomoyo_path_number_perm+0x219/0x5f0
[  525.151030][T13734]  ? tomoyo_path_number_perm+0x219/0x5f0
[  525.156737][T13734]  ? do_vfs_ioctl+0x116f/0x1530
[  525.161661][T13734]  ? __pfx_lo_ioctl+0x10/0x10
[  525.166383][T13734]  blkdev_ioctl+0x5e3/0x740
[  525.170919][T13734]  ? __pfx_blkdev_ioctl+0x10/0x10
[  525.175967][T13734]  ? __fget_files+0x2a/0x420
[  525.180596][T13734]  ? bpf_lsm_file_ioctl+0x9/0x20
[  525.185553][T13734]  ? __pfx_blkdev_ioctl+0x10/0x10
[  525.190625][T13734]  __se_sys_ioctl+0xfc/0x170
[  525.195248][T13734]  do_syscall_64+0x166/0x510
[  525.200051][T13734]  ? trace_irq_disable+0x3b/0x140
[  525.205112][T13734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.211220][T13734]  ? clear_bhb_loop+0x40/0x90
[  525.215927][T13734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.221844][T13734] RIP: 0033:0x7fc450f9e0d9
[  525.226282][T13734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.245918][T13734] RSP: 002b:00007fc451f1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  525.254448][T13734] RAX: ffffffffffffffda RBX: 00007fc451225fa0 RCX: 00007fc450f9e0d9
[  525.262448][T13734] RDX: 0000200000000180 RSI: 0000000000004c0a RDI: 0000000000000004
[  525.270470][T13734] RBP: 00007fc451035024 R08: 0000000000000000 R09: 0000000000000000
[  525.278477][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  525.286654][T13734] R13: 00007fc451226038 R14: 00007fc451225fa0 R15: 00007ffdbc4a1378
[  525.294677][T13734]  </TASK>
[  525.298323][T13734] Kernel Offset: disabled
[  525.302692][T13734] Rebooting in 86400 seconds..