last executing test programs:

6m52.440669934s ago: executing program 1 (id=341):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3c)

6m51.99723191s ago: executing program 1 (id=345):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8170081"], 0x27)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0xe4340000}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0xffffffffffffffff)

6m50.651573776s ago: executing program 1 (id=350):
r0 = gettid()
ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x1, 0x2002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r6, 0x540b, 0x0)

6m48.939075809s ago: executing program 1 (id=360):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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")
open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2)
r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]})
write$binfmt_misc(r0, &(0x7f0000000340)="be4f", 0x2)

6m46.437306565s ago: executing program 1 (id=369):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000040), 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x13)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x5, 0x0, 0x5, 0x1, 0x6, "d9d1ea7f3c4b3b3c1b6ef637937590538b6229", 0xfffffffd, 0xffffffff})

6m44.164981617s ago: executing program 1 (id=377):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x600, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ca, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0)

6m43.474270499s ago: executing program 32 (id=377):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x600, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x5ca, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0)

4m46.562644271s ago: executing program 5 (id=841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

4m45.6311507s ago: executing program 5 (id=843):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)

4m45.283846767s ago: executing program 5 (id=845):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x1}], 0x2, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)

4m45.021696542s ago: executing program 5 (id=847):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x35, 0x39, 0x32, 0x6b, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
sched_setscheduler(0x0, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x400c010)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_usb_connect(0x3, 0x9d3, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0xc400941b, &(0x7f0000000000)={0x1, 0x50fffe})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b, 0x0, 0x56, 0x0, 0x40}})

4m40.440750442s ago: executing program 5 (id=870):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

4m39.164961088s ago: executing program 5 (id=878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000640)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe80000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

4m38.418316376s ago: executing program 33 (id=878):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000640)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe80000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)

16.063265053s ago: executing program 2 (id=2021):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0xff7f3000)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101)
close_range(r0, 0xffffffffffffffff, 0x0)

14.408459823s ago: executing program 2 (id=2030):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000"], 0x40c4}}, 0x0)

14.046791317s ago: executing program 2 (id=2034):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x500000}}, 0x50)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r2}, 0x10)

13.246260852s ago: executing program 2 (id=2036):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mlockall(0x2)
r7 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmctl$SHM_LOCK(r7, 0xb)
shmat(r7, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(r7, 0xc)
io_uring_enter(r3, 0x4e14, 0x912a, 0x41, 0x0, 0x0)

9.377129479s ago: executing program 6 (id=2054):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x16a}, &(0x7f0000002000), &(0x7f0000000440))
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0)
r6 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, 0x0)
syz_emit_vhci(0x0, 0x0)

8.480987211s ago: executing program 6 (id=2057):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000002540)=ANY=[@ANYBLOB='b'])
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0x0, 0xffff, {0x7, 0x29, 0x7, 0x21021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.158429388s ago: executing program 6 (id=2058):
syz_emit_vhci(&(0x7f0000000b80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xb}, @hci_rp_read_buffer_size={{0x1}, {0xfe, 0x2, 0x7, 0x7, 0x1a4}}}}, 0xe)

6.912385087s ago: executing program 6 (id=2060):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002000)={0xffffffffffffffff}, 0x4)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r2, 0x0, 0x36, 0x1000, &(0x7f0000000180)="aa97ad865be8ff1640b268d178d74255d926587f2cccf65f2375acc48a8a5a632e3e9ace3a9f016f28edcff18f36d1b04a70088b4d1f", &(0x7f0000000440)=""/4096, 0x3, 0x0, 0x8, 0x7e, &(0x7f0000000240)="2a9c5a802cd1c109", &(0x7f0000001440)="f161f6250827d37a785307ca3e7a28e3a5b22de096d3d94f93090ca21d56820174ecdee3c1363c919a05c519f2a3731d106cdc599b9f4529576af67e3f9960dadb742ecbc7eac2c80a0592770de55d91ecdb81846e1fcd62338ee7667f8d8a1a546b16dd163cfa3ad230f481a7af76c7aaf94a0edb6bf73431c4d9d22302", 0x9}, 0x50)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

4.986013491s ago: executing program 6 (id=2062):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10)

4.879098728s ago: executing program 0 (id=2064):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{}, &(0x7f0000002480), &(0x7f00000024c0)}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000040)=@udp=r0, 0x1}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000240), &(0x7f00000002c0)='%ps    \x00'}, 0x20)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37daeed337490ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581100000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@loopback, 0x1d, 0x30, 0x14}]}, 0x38}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
socket$kcm(0x2, 0x2, 0x73)

4.705433681s ago: executing program 3 (id=2065):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

4.538837047s ago: executing program 0 (id=2066):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
syz_io_uring_setup(0xc8f, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)

3.330949454s ago: executing program 3 (id=2069):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

3.254107376s ago: executing program 4 (id=2071):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
open_tree(0xffffffffffffffff, 0x0, 0x8801)

3.145648659s ago: executing program 4 (id=2072):
r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @adapter={0xffe, 0x3ff, 0x8001, 0xbd7f, 0x1}}]})
ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3})
r2 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4})
write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8)

2.647358605s ago: executing program 4 (id=2073):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a400000000009000200"], 0x40c4}}, 0x0)

2.099706992s ago: executing program 6 (id=2074):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendfile(r2, r2, 0x0, 0x200000)

2.083595406s ago: executing program 0 (id=2075):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34)
recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)

2.020022024s ago: executing program 4 (id=2076):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2128, r0}, 0x0)
landlock_restrict_self(r1, 0x0)

1.981849625s ago: executing program 3 (id=2077):
syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a3100000000080041007278650014"], 0x38}}, 0x810)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local})
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, &(0x7f0000000340), 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r4, 0x9, 0x30, 0x6, 0x6}, &(0x7f00000000c0)=0x18)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)

1.760262567s ago: executing program 4 (id=2078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
lseek(0xffffffffffffffff, 0xfffd, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)

778.421684ms ago: executing program 4 (id=2079):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

668.555618ms ago: executing program 0 (id=2080):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x0)

575.003011ms ago: executing program 3 (id=2081):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x4c084, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c)

573.801012ms ago: executing program 2 (id=2082):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x4b, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f00608001b00f30"}}], 0x63})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x6000, 0xfffffffffffffffd, 0xfff, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}], 0x80})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f00000002c0))

484.307083ms ago: executing program 0 (id=2083):
r0 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0})
io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

348.411235ms ago: executing program 3 (id=2084):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10)

334.314949ms ago: executing program 0 (id=2085):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
syz_io_uring_setup(0xc8f, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)

80.958598ms ago: executing program 3 (id=2086):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756})
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x4d, {0x0, "48b800800000000000000f23c80f21f8350c0020000f23f86d3266b864000f00d03500010000b8050002000f006080000f01b00f30"}}, @nested_vmlaunch={0x12f, 0x18}], 0x95})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x4)
ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040))

0s ago: executing program 2 (id=2087):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

kernel console output (not intermixed with test programs):

,9484,0):ocfs2_fill_super:1177 ERROR: status = -30
[  371.409947][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1020'.
[  371.468943][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  371.478904][    T9] usbtmc 4-1:16.0: can't read capabilities
[  371.953064][ T6240] usb 4-1: USB disconnect, device number 19
[  371.997740][    T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  372.152988][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  372.164060][ T9508] tipc: Started in network mode
[  372.172936][ T9508] tipc: Node identity 829c2c7b8539, cluster identity 4711
[  372.181202][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  372.189941][ T9508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.196748][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.209136][ T9508] syzkaller0: entered promiscuous mode
[  372.214664][ T9508] syzkaller0: entered allmulticast mode
[  372.220738][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  372.233590][    T9] usb 1-1: string descriptor 0 read error: -22
[  372.240971][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  372.253061][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.272793][ T9508] tipc: Resetting bearer <eth:syzkaller0>
[  372.291650][ T9507] tipc: Resetting bearer <eth:syzkaller0>
[  372.312157][    T9] usb 1-1: 0:2 : does not exist
[  372.332986][ T9507] tipc: Disabling bearer <eth:syzkaller0>
[  372.351391][ T5940] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  372.491506][ T9519] loop4: detected capacity change from 0 to 8
[  372.510383][ T5940] usb 3-1: device descriptor read/64, error -71
[  372.680118][ T9522] loop6: detected capacity change from 0 to 1024
[  372.720928][ T9522] EXT4-fs: inline encryption not supported
[  372.753557][ T9528] netlink: 'syz.4.1029': attribute type 4 has an invalid length.
[  372.761646][ T9522] EXT4-fs: Ignoring removed orlov option
[  372.771379][ T9522] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  372.789687][ T5940] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  372.831905][ T9522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  372.842662][ T9522] System zones: 0-1, 3-12
[  372.868695][ T9522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.927822][ T5940] usb 3-1: device descriptor read/64, error -71
[  373.038138][ T5940] usb usb3-port1: attempt power cycle
[  373.507932][ T5940] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  373.539907][ T5940] usb 3-1: device descriptor read/8, error -71
[  373.560234][    T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  373.590713][    T9] usb 1-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong.
[  373.618175][    T9] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/-8016
[  373.663990][    T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  373.705714][    T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  373.868459][    T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  373.882126][    T9] usb 1-1: USB disconnect, device number 11
[  373.902738][ T5940] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  373.951533][ T5940] usb 3-1: device descriptor read/8, error -71
[  374.117593][ T5940] usb usb3-port1: unable to enumerate USB device
[  374.609775][ T8872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.709238][ T9562] netlink: 'syz.3.1035': attribute type 1 has an invalid length.
[  374.729841][ T9562] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  374.958894][ T9566] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1037'.
[  375.113464][ T9563] loop0: detected capacity change from 0 to 32768
[  375.160875][ T9563] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  375.181142][ T9563] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  375.200611][ T9563] OCFS2: File system is now read-only.
[  375.209603][ T9563] (syz.0.1036,9563,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  375.222843][ T9563] (syz.0.1036,9563,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  375.235708][ T9563] (syz.0.1036,9563,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  375.247814][ T9563] (syz.0.1036,9563,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  375.256613][ T9563] (syz.0.1036,9563,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  375.327896][ T9563] (syz.0.1036,9563,0):ocfs2_fill_super:1177 ERROR: status = -30
[  375.355494][ T9574] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  375.408584][ T9574] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000
[  375.530927][ T9574] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20002
[  375.727918][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  376.335252][ T5897] usb 7-1: Using ep0 maxpacket: 8
[  376.348916][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  376.355612][ T9592] syzkaller0: entered promiscuous mode
[  376.386409][ T9592] syzkaller0: entered allmulticast mode
[  376.412994][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  376.537568][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  376.567576][ T9598] loop3: detected capacity change from 0 to 1024
[  376.574187][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.574282][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  376.574310][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.621557][ T9598] EXT4-fs: inline encryption not supported
[  376.627442][ T9598] EXT4-fs: Ignoring removed orlov option
[  376.637447][ T9598] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  376.714021][ T9598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  376.728866][ T9598] System zones: 0-1, 3-12
[  376.736026][ T9598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.029589][ T5897] usb 7-1: GET_CAPABILITIES returned 0
[  377.035170][ T5897] usbtmc 7-1:16.0: can't read capabilities
[  377.177757][ T6240] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  377.252388][ T5897] usb 7-1: USB disconnect, device number 2
[  377.337757][ T6240] usb 3-1: device descriptor read/64, error -71
[  377.578320][ T6240] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  377.730692][ T6240] usb 3-1: device descriptor read/64, error -71
[  377.838165][ T6240] usb usb3-port1: attempt power cycle
[  377.982862][ T9638] ªªªªªª speed is unknown, defaulting to 1000
[  378.190246][ T6240] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  378.220042][ T9646] syzkaller0: entered promiscuous mode
[  378.234724][ T9646] syzkaller0: entered allmulticast mode
[  378.234880][ T6240] usb 3-1: device descriptor read/8, error -71
[  378.500256][ T6240] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  378.528803][ T6240] usb 3-1: device descriptor read/8, error -71
[  378.655524][ T6240] usb usb3-port1: unable to enumerate USB device
[  378.746100][ T9632] loop0: detected capacity change from 0 to 32768
[  378.819665][ T9632] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  378.859442][ T9632] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  378.880832][ T9632] OCFS2: File system is now read-only.
[  378.917454][ T9632] (syz.0.1056,9632,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  378.941233][ T9632] (syz.0.1056,9632,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  378.991864][ T9632] (syz.0.1056,9632,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  379.010299][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.038192][ T9632] (syz.0.1056,9632,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  379.060943][ T9632] (syz.0.1056,9632,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  379.095564][ T9632] (syz.0.1056,9632,0):ocfs2_fill_super:1177 ERROR: status = -30
[  379.288072][ T9667] loop3: detected capacity change from 0 to 8
[  379.521541][ T9673] netlink: 'syz.3.1063': attribute type 4 has an invalid length.
[  380.529113][ T9686] syzkaller0: entered promiscuous mode
[  380.557767][ T9686] syzkaller0: entered allmulticast mode
[  380.572830][ T9688] loop2: detected capacity change from 0 to 1024
[  380.581091][ T9688] EXT4-fs: inline encryption not supported
[  380.586949][ T9688] EXT4-fs: Ignoring removed orlov option
[  380.627454][ T9688] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  380.647733][ T5940] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  380.674672][ T9688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  380.707367][ T9688] System zones: 0-1, 3-12
[  380.728027][ T9688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.078038][ T5940] usb 7-1: Using ep0 maxpacket: 8
[  381.087857][ T5940] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  381.099322][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  381.197774][ T5881] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  381.338976][   T30] audit: type=1326 audit(1764171953.273:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9687 comm="syz.2.1073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f076e98f749 code=0x0
[  381.575170][ T5881] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  381.647026][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.821278][ T5881] usb 1-1: config 0 descriptor??
[  381.832134][ T5881] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  381.897718][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  381.925814][ T5940] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  381.959652][ T5940] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  381.994679][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.118149][ T5881] gspca_sn9c2028: read1 error -32
[  382.127884][ T5881] gspca_sn9c2028: read1 error -32
[  382.137831][ T5881] gspca_sn9c2028: read1 error -32
[  382.143095][ T5881] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32
[  382.156024][ T5881] usb 1-1: USB disconnect, device number 12
[  382.304884][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.331682][ T5940] usb 7-1: usb_control_msg returned -71
[  382.354533][ T5940] usbtmc 7-1:16.0: can't read capabilities
[  382.379265][ T5940] usb 7-1: USB disconnect, device number 3
[  382.428333][ T9723] loop2: detected capacity change from 0 to 8
[  382.477900][ T5941] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  382.610125][ T9727] netlink: 'syz.2.1081': attribute type 4 has an invalid length.
[  382.658075][ T5941] usb 5-1: device descriptor read/64, error -71
[  382.958257][ T5941] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  383.158071][ T5941] usb 5-1: device descriptor read/64, error -71
[  383.277394][ T5941] usb usb5-port1: attempt power cycle
[  383.637791][ T5941] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  383.723994][ T5941] usb 5-1: device descriptor read/8, error -71
[  383.900881][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  384.018455][ T5941] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  384.048461][ T5941] usb 5-1: device descriptor read/8, error -71
[  384.168143][ T5941] usb usb5-port1: unable to enumerate USB device
[  385.335229][ T9732] loop0: detected capacity change from 0 to 32768
[  385.455951][ T9732] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  385.482323][ T9732] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  385.495919][ T9758] loop2: detected capacity change from 0 to 1024
[  385.505262][ T9732] OCFS2: File system is now read-only.
[  385.513106][ T9758] EXT4-fs: inline encryption not supported
[  385.517745][ T9732] (syz.0.1082,9732,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  385.519073][ T9758] EXT4-fs: Ignoring removed orlov option
[  385.538576][ T9758] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  385.566503][ T9732] (syz.0.1082,9732,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  385.591466][ T9758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  385.593028][ T9732] (syz.0.1082,9732,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  385.611234][ T9758] System zones: 0-1, 3-12
[  385.623295][ T9758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.668077][ T9732] (syz.0.1082,9732,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  385.694617][ T9732] (syz.0.1082,9732,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  385.880140][ T9732] (syz.0.1082,9732,1):ocfs2_fill_super:1177 ERROR: status = -30
[  385.901199][ T9746] loop6: detected capacity change from 0 to 32768
[  385.917810][ T7286] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  385.930314][ T9746] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1088 (9746)
[  385.969506][ T9746] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  385.996501][ T9746] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  386.068026][ T7286] usb 5-1: Using ep0 maxpacket: 8
[  386.076961][ T7286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  386.096236][ T7286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  386.149462][ T7286] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  386.317931][ T7286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  386.332708][ T7286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  386.456944][ T7286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.484998][ T9746] BTRFS info (device loop6): enabling ssd optimizations
[  386.585287][ T9746] BTRFS info (device loop6): turning on async discard
[  386.592895][ T9746] BTRFS info (device loop6): enabling free space tree
[  386.763308][ T7286] usb 5-1: usb_control_msg returned -71
[  386.769054][ T7286] usbtmc 5-1:16.0: can't read capabilities
[  386.798525][ T7286] usb 5-1: USB disconnect, device number 12
[  386.816819][   T30] audit: type=1800 audit(1764171958.773:8): pid=9746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1088" name="bus" dev="loop6" ino=263 res=0 errno=0
[  386.967056][ T8872] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  387.114089][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.585898][ T9802] syz_tun: entered promiscuous mode
[  387.742198][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'.
[  389.576446][ T9822] ªªªªªª speed is unknown, defaulting to 1000
[  389.892103][ T9830] tipc: Started in network mode
[  389.897049][ T9830] tipc: Node identity ee5c4748d0d3, cluster identity 4711
[  389.947491][ T9830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.994058][ T9832] loop3: detected capacity change from 0 to 1024
[  390.011584][ T9830] tipc: Resetting bearer <eth:syzkaller0>
[  390.067250][ T9832] EXT4-fs: inline encryption not supported
[  390.090868][ T9829] tipc: Disabling bearer <eth:syzkaller0>
[  390.092647][ T9832] EXT4-fs: Ignoring removed orlov option
[  390.113337][ T9832] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  390.251941][ T9832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  390.307365][ T9832] System zones: 0-1, 3-12
[  390.351089][ T9832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.717761][ T5897] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  390.902493][ T5897] usb 1-1: Using ep0 maxpacket: 8
[  390.921300][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  390.957855][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  391.008240][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  391.068005][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.162287][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  391.914350][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.379582][ T5897] usb 1-1: usb_control_msg returned -71
[  393.408556][ T5897] usbtmc 1-1:16.0: can't read capabilities
[  393.593397][ T5897] usb 1-1: USB disconnect, device number 13
[  394.102349][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.135450][ T9881] ªªªªªª speed is unknown, defaulting to 1000
[  395.309510][ T9900] ªªªªªª speed is unknown, defaulting to 1000
[  395.744310][ T9915] loop3: detected capacity change from 0 to 1024
[  395.762959][ T9915] EXT4-fs: inline encryption not supported
[  396.054028][ T9915] EXT4-fs: Ignoring removed orlov option
[  396.440492][ T9915] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  396.501174][ T9915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  396.556780][ T9915] System zones: 0-1, 3-12
[  396.600333][ T9915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.819449][ T9936] tipc: Started in network mode
[  396.838718][ T9936] tipc: Node identity d69bb60ebe41, cluster identity 4711
[  396.883861][ T9936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.973882][ T9936] tipc: Resetting bearer <eth:syzkaller0>
[  397.039348][ T9935] tipc: Disabling bearer <eth:syzkaller0>
[  397.117928][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  398.063453][ T9945] openvswitch: netlink: Duplicate or invalid key (type 0).
[  398.110113][ T9945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.445539][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.807698][ T5897] usb 7-1: Using ep0 maxpacket: 8
[  398.814546][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  398.825978][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  398.837691][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  398.847789][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  399.017081][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  399.027234][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.247515][ T5897] usb 7-1: GET_CAPABILITIES returned 0
[  399.266832][ T5897] usbtmc 7-1:16.0: can't read capabilities
[  399.378823][ T9962] wlan1 speed is unknown, defaulting to 1000
[  399.389496][ T9962] wlan1 speed is unknown, defaulting to 1000
[  399.410413][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.118022][ T6850] usb 7-1: USB disconnect, device number 4
[  400.132638][ T9962] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  400.198943][ T9962] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  400.249893][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.260068][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.270916][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.282810][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.293708][ T9962] wlan1 speed is unknown, defaulting to 1000
[  400.328656][ T9957] binder: 9956:9957 ioctl c0306201 200000000680 returned -14
[  400.763091][ T9979] loop3: detected capacity change from 0 to 1024
[  400.788892][ T9979] EXT4-fs: inline encryption not supported
[  400.795228][ T9979] EXT4-fs: Ignoring removed orlov option
[  400.802509][ T9979] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  400.835103][ T9979] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  400.863886][ T9979] System zones: 0-1, 3-12
[  400.883064][ T9979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  403.884183][T10018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  404.203139][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.358052][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  404.402661][T10032] rdma_rxe: rxe_newlink: failed to add lo
[  404.435109][T10032] ªªªªªª: renamed from lo (while UP)
[  404.557728][    T9] usb 7-1: Using ep0 maxpacket: 8
[  404.571259][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  404.612585][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  404.649904][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  404.687447][    T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  404.734652][    T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  404.769074][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.960298][T10042] loop4: detected capacity change from 0 to 128
[  405.509985][    T9] usb 7-1: GET_CAPABILITIES returned 0
[  405.515579][    T9] usbtmc 7-1:16.0: can't read capabilities
[  405.561098][    T9] usb 7-1: USB disconnect, device number 5
[  405.655672][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  405.743302][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'.
[  405.908093][T10053] openvswitch: netlink: Message has 4 unknown bytes.
[  406.044964][T10056] loop3: detected capacity change from 0 to 1024
[  406.065025][T10056] EXT4-fs: inline encryption not supported
[  406.087703][T10056] EXT4-fs: Ignoring removed orlov option
[  406.110393][T10056] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  406.798330][T10056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  406.819369][T10056] System zones: 0-1, 3-12
[  406.826608][T10056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.988104][T10046] wg1: entered promiscuous mode
[  406.999295][T10046] wg1: entered allmulticast mode
[  407.553943][T10087] openvswitch: netlink: Message has 4 unknown bytes.
[  407.606600][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.708330][T10096] syz_tun: entered allmulticast mode
[  407.717115][T10095] syz_tun: left allmulticast mode
[  407.837778][ T5958] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  408.017715][ T5958] usb 1-1: Using ep0 maxpacket: 8
[  408.050937][ T5958] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  408.076647][ T5958] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  408.107741][ T5958] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  408.126811][ T5958] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.143946][ T5958] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  408.153636][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.222056][T10114] xt_policy: neither incoming nor outgoing policy selected
[  408.266102][T10116] loop3: detected capacity change from 0 to 1024
[  408.300968][T10116] EXT4-fs: inline encryption not supported
[  408.322207][T10116] EXT4-fs: Ignoring removed orlov option
[  408.336868][T10114] input: syz1 as /devices/virtual/input/input15
[  408.347265][T10116] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  408.370256][ T5958] usb 1-1: GET_CAPABILITIES returned 0
[  408.377858][ T5958] usbtmc 1-1:16.0: can't read capabilities
[  408.502968][T10116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  408.523885][T10116] System zones: 0-1, 3-12
[  408.583932][ T5958] usb 1-1: USB disconnect, device number 14
[  408.634587][T10116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  408.947577][T10111] loop4: detected capacity change from 0 to 32768
[  408.957491][T10111] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1198 (10111)
[  408.982239][T10111] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  408.994663][T10111] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  409.013597][   T30] audit: type=1326 audit(1764171980.973:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.1200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d2c38f749 code=0x0
[  409.099690][T10111] BTRFS info (device loop4): enabling ssd optimizations
[  409.125228][T10111] BTRFS info (device loop4): turning on async discard
[  409.164235][T10111] BTRFS info (device loop4): enabling free space tree
[  409.172032][T10145] syz_tun: entered allmulticast mode
[  409.181370][T10144] syz_tun: left allmulticast mode
[  409.250049][   T30] audit: type=1800 audit(1764171981.213:10): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1198" name="bus" dev="loop4" ino=263 res=0 errno=0
[  409.455500][ T5825] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  409.498341][ T5958] IPVS: starting estimator thread 0...
[  409.628313][T10154] IPVS: using max 24 ests per chain, 57600 per kthread
[  409.915072][T10162] siw: device registration error -23
[  410.380878][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.519498][T10185] ªªªªªª speed is unknown, defaulting to 1000
[  410.539481][T10187] xt_policy: neither incoming nor outgoing policy selected
[  410.550125][T10187] input: syz1 as /devices/virtual/input/input16
[  411.185522][T10185] wlan1 speed is unknown, defaulting to 1000
[  411.451847][T10207] netlink: 'syz.6.1231': attribute type 1 has an invalid length.
[  411.600668][T10209] bond1: (slave geneve2): making interface the new active one
[  411.616207][T10209] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  411.625528][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  411.649028][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  411.673849][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  411.685348][T10212] loop2: detected capacity change from 0 to 1024
[  411.705573][T10212] EXT4-fs: inline encryption not supported
[  411.715714][T10212] EXT4-fs: Ignoring removed orlov option
[  411.748039][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  411.772792][T10212] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  411.831989][T10212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  411.853531][T10212] System zones: 0-1, 3-12
[  411.856515][T10219] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1235'.
[  411.877313][T10212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.190493][T10226] openvswitch: netlink: Duplicate or invalid key (type 0).
[  412.214386][T10226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.227381][T10227] binder: 10213:10227 ioctl c0306201 200000000680 returned -14
[  412.291497][   T30] audit: type=1326 audit(1764171984.253:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.2.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f076e98f749 code=0x0
[  413.225230][T10251] xt_policy: neither incoming nor outgoing policy selected
[  413.279528][T10251] input: syz1 as /devices/virtual/input/input17
[  413.402042][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.586560][T10259] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1247'.
[  413.609813][T10261] openvswitch: netlink: Duplicate or invalid key (type 0).
[  413.629467][T10261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.771618][T10268] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  413.788684][T10268] bridge0: entered allmulticast mode
[  413.936545][T10274] binder: 10273:10274 ioctl c0306201 200000000680 returned -14
[  413.960334][T10271] ªªªªªª speed is unknown, defaulting to 1000
[  414.224806][T10271] wlan1 speed is unknown, defaulting to 1000
[  414.225905][T10280] loop3: detected capacity change from 0 to 1024
[  414.241031][T10280] EXT4-fs: inline encryption not supported
[  414.246900][T10280] EXT4-fs: Ignoring removed orlov option
[  414.256213][T10280] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  414.320466][T10280] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  414.329048][T10280] System zones: 0-1, 3-12
[  414.335609][T10280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.501469][T10290] rdma_rxe: rxe_newlink: failed to add lo
[  414.616202][T10290] ªªªªªª: renamed from lo (while UP)
[  414.777584][   T30] audit: type=1326 audit(1764171986.733:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10279 comm="syz.3.1257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d2c38f749 code=0x0
[  416.408407][T10321] binder: 10317:10321 ioctl c0306201 200000000680 returned -14
[  416.707731][  T930] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  416.755545][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.767137][T10330] xt_policy: neither incoming nor outgoing policy selected
[  416.778058][T10330] input: syz1 as /devices/virtual/input/input18
[  416.877843][  T930] usb 5-1: Using ep0 maxpacket: 8
[  416.884637][  T930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  416.895912][  T930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  416.958004][  T930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  416.969101][  T930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  416.997586][  T930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  417.006745][  T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.244243][  T930] usb 5-1: GET_CAPABILITIES returned 0
[  417.250014][  T930] usbtmc 5-1:16.0: can't read capabilities
[  417.458315][ T5881] usb 5-1: USB disconnect, device number 13
[  419.831066][T10386] xt_policy: neither incoming nor outgoing policy selected
[  419.888751][T10372] loop2: detected capacity change from 0 to 32768
[  419.964364][T10372] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  419.988974][T10372] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  419.990682][T10386] input: syz1 as /devices/virtual/input/input19
[  420.027877][T10372] OCFS2: File system is now read-only.
[  420.066760][T10372] (syz.2.1289,10372,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  420.090609][T10372] (syz.2.1289,10372,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  420.124275][T10372] (syz.2.1289,10372,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  420.307977][T10372] (syz.2.1289,10372,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  420.316890][T10372] (syz.2.1289,10372,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  421.052130][T10372] (syz.2.1289,10372,1):ocfs2_fill_super:1177 ERROR: status = -30
[  421.206899][T10403] ip6gre1: entered promiscuous mode
[  421.212326][T10403] ip6gre1: entered allmulticast mode
[  422.201436][T10415] ªªªªªª speed is unknown, defaulting to 1000
[  422.273411][T10416] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1303'.
[  422.708926][T10420] ªªªªªª speed is unknown, defaulting to 1000
[  422.720897][T10415] wlan1 speed is unknown, defaulting to 1000
[  423.474123][T10420] wlan1 speed is unknown, defaulting to 1000
[  423.664103][T10424] ªªªªªª speed is unknown, defaulting to 1000
[  424.690131][T10457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.715163][T10457] tipc: Resetting bearer <eth:syzkaller0>
[  424.755524][T10456] tipc: Disabling bearer <eth:syzkaller0>
[  424.947281][T10424] wlan1 speed is unknown, defaulting to 1000
[  425.088152][T10455] loop0: detected capacity change from 0 to 32768
[  425.186522][T10455] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  425.246139][T10455] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  425.297692][T10455] OCFS2: File system is now read-only.
[  425.304414][T10455] (syz.0.1314,10455,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  425.342800][T10455] (syz.0.1314,10455,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  425.369101][T10455] (syz.0.1314,10455,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  425.396318][T10455] (syz.0.1314,10455,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  425.421470][T10455] (syz.0.1314,10455,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  425.448004][T10455] (syz.0.1314,10455,0):ocfs2_fill_super:1177 ERROR: status = -30
[  425.886207][T10464] xt_policy: neither incoming nor outgoing policy selected
[  426.309841][T10464] input: syz1 as /devices/virtual/input/input20
[  426.731704][T10474] loop2: detected capacity change from 0 to 1024
[  426.746836][T10474] EXT4-fs: inline encryption not supported
[  426.807719][T10474] EXT4-fs: Ignoring removed orlov option
[  426.828984][T10474] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  426.978180][T10474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  426.998143][T10474] System zones: 0-1, 3-12
[  428.132617][T10474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.906997][   T30] audit: type=1326 audit(1764172000.863:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f076e98f749 code=0x0
[  429.070714][T10496] ªªªªªª speed is unknown, defaulting to 1000
[  429.179919][T10504] syzkaller0: entered promiscuous mode
[  429.185481][T10504] syzkaller0: entered allmulticast mode
[  430.045965][T10509] loop0: detected capacity change from 0 to 32768
[  430.084380][T10509] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  430.117916][T10509] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  430.133342][T10509] OCFS2: File system is now read-only.
[  430.148083][T10509] (syz.0.1329,10509,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  430.156649][T10509] (syz.0.1329,10509,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  430.177136][T10509] (syz.0.1329,10509,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  430.206650][T10496] wlan1 speed is unknown, defaulting to 1000
[  430.214559][T10509] (syz.0.1329,10509,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  430.233760][T10509] (syz.0.1329,10509,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  430.247877][T10507] siw: device registration error -23
[  430.263672][T10509] (syz.0.1329,10509,0):ocfs2_fill_super:1177 ERROR: status = -30
[  430.354123][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.527361][T10518] tipc: Can't bind to reserved service type 2
[  431.225025][T10518] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[  431.253387][T10518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1330'.
[  431.324518][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  432.727470][T10550] loop2: detected capacity change from 0 to 1024
[  432.735655][T10550] EXT4-fs: inline encryption not supported
[  432.741730][T10550] EXT4-fs: Ignoring removed orlov option
[  432.755358][T10550] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  433.058687][T10550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002]
[  433.108461][T10550] System zones: 0-1, 3-12
[  433.125346][T10550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  433.193995][T10561] siw: device registration error -23
[  433.461537][T10564] xt_policy: neither incoming nor outgoing policy selected
[  433.546773][T10564] input: syz1 as /devices/virtual/input/input21
[  433.567044][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'.
[  433.596533][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1344'.
[  433.694619][   T30] audit: type=1326 audit(1764172005.653:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10548 comm="syz.2.1340" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f076e98f749 code=0x0
[  433.697844][T10571] syzkaller0: entered promiscuous mode
[  433.776456][T10571] syzkaller0: entered allmulticast mode
[  433.779164][T10574] 0: reclassify loop, rule prio 0, protocol 800
[  435.144191][T10592] openvswitch: netlink: Message has 4 unknown bytes.
[  435.411882][T10602] openvswitch: netlink: Message has 592 unknown bytes.
[  435.437905][T10602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.841065][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.028130][T10630] openvswitch: netlink: Message has 4 unknown bytes.
[  437.076861][T10626] syzkaller0: entered promiscuous mode
[  437.093654][T10626] syzkaller0: entered allmulticast mode
[  437.159666][T10634] openvswitch: netlink: Message has 592 unknown bytes.
[  437.166626][T10634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.210475][T10637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1370'.
[  437.490389][T10655] openvswitch: netlink: Message has 4 unknown bytes.
[  437.497377][T10655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.520020][T10656] openvswitch: netlink: Message has 4 unknown bytes.
[  440.576438][T10681] syzkaller0: entered promiscuous mode
[  440.624881][T10681] syzkaller0: entered allmulticast mode
[  441.608460][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'.
[  442.494924][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'.
[  445.352940][T10754] openvswitch: netlink: Message has 592 unknown bytes.
[  445.363122][T10755] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1410'.
[  445.388283][T10754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.868873][ T5890] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  446.027711][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  446.035005][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  446.047386][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  446.231152][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  446.325017][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  446.336363][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  446.351415][ T5890] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  446.477726][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.503421][T10768] ªªªªªª speed is unknown, defaulting to 1000
[  446.519173][ T5890] usb 3-1: Product: syz
[  446.523405][ T5890] usb 3-1: Manufacturer: syz
[  446.567783][ T5890] usb 3-1: SerialNumber: syz
[  446.599672][ T5890] usb 3-1: config 0 descriptor??
[  446.969989][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -32
[  446.979817][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -32
[  446.997822][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -32
[  447.984551][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.006018][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.058017][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.074927][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.092022][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.108279][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.118193][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.130209][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.137125][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.143639][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.168066][T10768] wlan1 speed is unknown, defaulting to 1000
[  448.188579][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.204013][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.233554][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.271523][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.295307][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.318205][ T5890] iforce 3-1:0.0: usb_submit_urb failed: -71
[  448.352457][ T5890] input input22: Timeout waiting for response from device.
[  448.410848][ T5890] usb 3-1: USB disconnect, device number 24
[  449.297130][T10805] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1425'.
[  449.506495][T10812] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  450.058952][ T6239] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  450.217733][ T6239] usb 1-1: Using ep0 maxpacket: 32
[  450.226544][ T6239] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  450.257838][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  450.276836][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  450.309755][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  450.378403][ T6239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  450.409081][ T6239] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  450.418270][ T6239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.537890][ T6239] usb 1-1: Product: syz
[  450.545684][ T6239] usb 1-1: Manufacturer: syz
[  450.564421][ T6239] usb 1-1: SerialNumber: syz
[  450.737209][ T6239] usb 1-1: config 0 descriptor??
[  451.791270][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -32
[  451.988405][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -32
[  452.787723][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -32
[  452.818086][T10848] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1439'.
[  453.173048][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.222654][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.243616][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.268455][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.293547][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.309689][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.322413][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.340216][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.354160][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.361229][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.368009][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.374960][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.381922][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.393077][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.410929][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.437942][ T6239] iforce 1-1:0.0: usb_submit_urb failed: -71
[  453.444119][ T6239] input input23: Timeout waiting for response from device.
[  453.472535][ T6239] usb 1-1: USB disconnect, device number 15
[  454.567347][T10889] loop3: detected capacity change from 0 to 8
[  455.122046][T10889] netlink: 'syz.3.1453': attribute type 4 has an invalid length.
[  455.174063][T10892] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  456.423272][T10929] loop3: detected capacity change from 0 to 8
[  457.458164][T10929] netlink: 'syz.3.1465': attribute type 4 has an invalid length.
[  457.568924][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1468'.
[  457.710114][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1471'.
[  458.872493][T10959] loop4: detected capacity change from 0 to 32768
[  458.928679][T10959] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  458.947690][T10959] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  458.957529][T10959] OCFS2: File system is now read-only.
[  458.964254][T10959] (syz.4.1475,10959,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  458.972730][T10959] (syz.4.1475,10959,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  458.981716][T10959] (syz.4.1475,10959,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  458.992199][T10959] (syz.4.1475,10959,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  459.001152][T10959] (syz.4.1475,10959,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  459.009878][T10959] (syz.4.1475,10959,1):ocfs2_fill_super:1177 ERROR: status = -30
[  460.131172][T10975] loop6: detected capacity change from 0 to 8
[  460.737901][T10981] netlink: 'syz.6.1480': attribute type 4 has an invalid length.
[  460.837507][T10983] ªªªªªª speed is unknown, defaulting to 1000
[  460.878581][T10984] netlink: 'syz.4.1483': attribute type 8 has an invalid length.
[  461.338293][T10996] xt_policy: neither incoming nor outgoing policy selected
[  462.129485][T10996] input: syz1 as /devices/virtual/input/input24
[  462.464070][T11004] Bluetooth: MGMT ver 1.23
[  462.487703][ T6782] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  462.657844][ T6782] usb 7-1: Using ep0 maxpacket: 32
[  462.673393][ T6782] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  462.703763][ T6782] usb 7-1: config 0 has no interface number 0
[  462.724062][ T6782] usb 7-1: config 0 interface 184 has no altsetting 0
[  462.729387][T10983] wlan1 speed is unknown, defaulting to 1000
[  462.745561][ T6782] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  462.748222][T10986] ªªªªªª speed is unknown, defaulting to 1000
[  462.765262][ T6782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.785537][ T6782] usb 7-1: Product: syz
[  462.795669][ T6782] usb 7-1: Manufacturer: syz
[  462.805846][ T6782] usb 7-1: SerialNumber: syz
[  462.837850][ T6782] usb 7-1: config 0 descriptor??
[  462.868680][ T6782] smsc75xx v1.0.0
[  463.474651][T11017] loop2: detected capacity change from 0 to 32768
[  463.504526][T11017] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  463.519751][T11017] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  463.529648][T11017] OCFS2: File system is now read-only.
[  463.535240][T11017] (syz.2.1491,11017,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  463.543633][T11017] (syz.2.1491,11017,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  463.553081][T11017] (syz.2.1491,11017,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  463.563516][T11017] (syz.2.1491,11017,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  463.572540][T11017] (syz.2.1491,11017,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  463.581814][T11017] (syz.2.1491,11017,0):ocfs2_fill_super:1177 ERROR: status = -30
[  464.082075][ T6782] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  464.099776][T10986] wlan1 speed is unknown, defaulting to 1000
[  464.131579][ T6782] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  464.222801][T11026] loop3: detected capacity change from 0 to 8
[  464.346177][T11028] netlink: 'syz.3.1494': attribute type 4 has an invalid length.
[  464.439842][T11030] netlink: 'syz.2.1495': attribute type 1 has an invalid length.
[  464.712221][ T6782] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  464.729542][ T6782] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  464.739586][ T6782] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  464.759724][ T6782] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32
[  465.634815][T11030] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  465.718587][ T6782] usb 7-1: USB disconnect, device number 6
[  465.994326][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'.
[  466.026228][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'.
[  466.032597][T11051] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002
[  466.568587][T11058] loop6: detected capacity change from 0 to 32768
[  466.649486][T11058] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  466.667457][T11058] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  466.677799][T11058] OCFS2: File system is now read-only.
[  466.683273][T11058] (syz.6.1505,11058,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  466.694476][T11058] (syz.6.1505,11058,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  466.703867][T11058] (syz.6.1505,11058,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  466.714257][T11058] (syz.6.1505,11058,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  466.723372][T11058] (syz.6.1505,11058,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  466.733171][T11058] (syz.6.1505,11058,0):ocfs2_fill_super:1177 ERROR: status = -30
[  469.659655][T11076] loop4: detected capacity change from 0 to 8
[  469.850285][T11080] netlink: 'syz.4.1509': attribute type 4 has an invalid length.
[  470.237780][   T40] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  470.239108][ T5989] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  470.417699][   T40] usb 3-1: Using ep0 maxpacket: 32
[  470.419927][ T5989] usb 4-1: Using ep0 maxpacket: 32
[  470.436190][T11084] netlink: 'syz.6.1511': attribute type 1 has an invalid length.
[  470.445379][   T40] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  470.467693][   T40] usb 3-1: config 0 has no interface number 0
[  470.477388][ T5989] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  470.484111][   T40] usb 3-1: config 0 interface 184 has no altsetting 0
[  470.525646][   T40] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  470.531706][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  470.537735][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.558892][   T40] usb 3-1: Product: syz
[  470.563114][   T40] usb 3-1: Manufacturer: syz
[  470.567965][   T40] usb 3-1: SerialNumber: syz
[  470.581172][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  470.582238][   T40] usb 3-1: config 0 descriptor??
[  470.602100][   T40] smsc75xx v1.0.0
[  470.636395][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  470.682997][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  470.720455][ T5989] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  470.738893][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.747133][ T5989] usb 4-1: Product: syz
[  470.771847][ T5989] usb 4-1: Manufacturer: syz
[  470.776522][ T5989] usb 4-1: SerialNumber: syz
[  470.794977][ T5989] usb 4-1: config 0 descriptor??
[  471.209613][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -32
[  471.216718][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -32
[  471.426224][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.433168][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.440164][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.446784][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.453872][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.468072][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.477798][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.488064][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.498274][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.504788][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.511891][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.518864][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.525472][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.534781][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.541462][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.554141][ T5989] iforce 4-1:0.0: usb_submit_urb failed: -71
[  471.569282][ T5989] input input25: Timeout waiting for response from device.
[  471.586597][ T5989] usb 4-1: USB disconnect, device number 20
[  471.809626][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  471.821188][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  472.007071][T11113] loop0: detected capacity change from 0 to 32768
[  472.048837][T11113] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  472.063825][T11113] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  472.073726][T11113] OCFS2: File system is now read-only.
[  472.079481][T11113] (syz.0.1521,11113,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  472.087874][T11113] (syz.0.1521,11113,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  472.096878][T11113] (syz.0.1521,11113,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  472.107256][T11113] (syz.0.1521,11113,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  472.116544][T11113] (syz.0.1521,11113,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  472.154642][T11113] (syz.0.1521,11113,0):ocfs2_fill_super:1177 ERROR: status = -30
[  472.958332][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  472.985734][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  473.007089][T11120] loop4: detected capacity change from 0 to 8
[  473.015904][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  473.084368][   T40] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  473.117270][   T40] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  473.260806][T11125] netlink: 'syz.4.1522': attribute type 4 has an invalid length.
[  473.262334][   T40] usb 3-1: USB disconnect, device number 25
[  474.423185][T11146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  475.827380][T11165] loop0: detected capacity change from 0 to 32768
[  475.851179][T11165] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  475.866085][T11165] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  475.875950][T11165] OCFS2: File system is now read-only.
[  475.881538][T11165] (syz.0.1535,11165,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  475.889910][T11165] (syz.0.1535,11165,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  475.898861][T11165] (syz.0.1535,11165,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  475.909277][T11165] (syz.0.1535,11165,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  475.918240][T11165] (syz.0.1535,11165,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  475.929968][T11165] (syz.0.1535,11165,1):ocfs2_fill_super:1177 ERROR: status = -30
[  476.608026][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  476.777815][   T10] usb 5-1: Using ep0 maxpacket: 32
[  476.800846][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  476.828229][   T10] usb 5-1: config 0 has no interface number 0
[  476.857893][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  476.872970][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  476.908284][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.943680][   T10] usb 5-1: Product: syz
[  476.953848][   T10] usb 5-1: Manufacturer: syz
[  476.961856][   T10] usb 5-1: SerialNumber: syz
[  476.984745][   T10] usb 5-1: config 0 descriptor??
[  477.018044][   T10] smsc75xx v1.0.0
[  477.399704][T11189] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  478.332530][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  478.358036][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  478.690588][T11205] loop2: detected capacity change from 0 to 32768
[  478.733048][T11205] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  478.748188][T11205] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  478.758050][T11205] OCFS2: File system is now read-only.
[  478.763613][T11205] (syz.2.1547,11205,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  478.772004][T11205] (syz.2.1547,11205,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  478.781257][T11205] (syz.2.1547,11205,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  478.791660][T11205] (syz.2.1547,11205,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  478.800551][T11205] (syz.2.1547,11205,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  478.809650][T11205] (syz.2.1547,11205,0):ocfs2_fill_super:1177 ERROR: status = -30
[  478.927549][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[  478.968008][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[  478.990404][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  479.308393][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  479.886961][T11228] xt_policy: neither incoming nor outgoing policy selected
[  479.931969][T11228] input: syz1 as /devices/virtual/input/input26
[  480.069170][ T6850] usb 5-1: USB disconnect, device number 14
[  480.250203][T11235] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  481.545673][T11252] netlink: 'syz.2.1559': attribute type 13 has an invalid length.
[  481.742287][T11254] loop4: detected capacity change from 0 to 32768
[  481.750194][T11252] netlink: 'syz.2.1559': attribute type 17 has an invalid length.
[  481.801821][T11254] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  481.817081][T11254] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  481.826960][T11254] OCFS2: File system is now read-only.
[  481.832484][T11254] (syz.4.1560,11254,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  481.840844][T11254] (syz.4.1560,11254,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  481.849848][T11254] (syz.4.1560,11254,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  481.860293][T11254] (syz.4.1560,11254,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  481.869267][T11254] (syz.4.1560,11254,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  481.881511][T11254] (syz.4.1560,11254,1):ocfs2_fill_super:1177 ERROR: status = -30
[  482.559684][T11252] syz_tun: left promiscuous mode
[  482.669282][T11252] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.676625][T11252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  482.757866][T11252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  483.179194][   T40] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  483.398034][   T40] usb 5-1: Using ep0 maxpacket: 32
[  483.452786][   T40] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  483.462546][   T40] usb 5-1: config 0 has no interface number 0
[  483.475017][   T40] usb 5-1: config 0 interface 184 has no altsetting 0
[  483.546284][   T40] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  483.565992][   T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.575076][   T40] usb 5-1: Product: syz
[  483.584897][   T40] usb 5-1: Manufacturer: syz
[  483.605601][   T40] usb 5-1: SerialNumber: syz
[  483.626216][   T40] usb 5-1: config 0 descriptor??
[  483.637741][   T40] smsc75xx v1.0.0
[  483.644637][T11277] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  484.105616][T11292] loop6: detected capacity change from 0 to 32768
[  484.125322][T11292] OCFS2: ERROR (device loop6): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  484.140514][T11292] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  484.150399][T11292] OCFS2: File system is now read-only.
[  484.155897][T11292] (syz.6.1573,11292,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  484.164284][T11292] (syz.6.1573,11292,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  484.173672][T11292] (syz.6.1573,11292,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  484.184121][T11292] (syz.6.1573,11292,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  484.193069][T11292] (syz.6.1573,11292,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  484.203557][T11292] (syz.6.1573,11292,0):ocfs2_fill_super:1177 ERROR: status = -30
[  484.287019][   T40] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  484.717769][   T40] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  484.733907][   T40] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  484.754794][   T40] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  485.401392][T11323] xt_policy: neither incoming nor outgoing policy selected
[  485.429414][T11323] input: syz1 as /devices/virtual/input/input27
[  485.746638][T11333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  486.023643][ T5941] usb 5-1: USB disconnect, device number 15
[  486.516539][T11348] loop2: detected capacity change from 0 to 32768
[  486.540656][T11348] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 73: bits per cluster 32
[  486.555657][T11348] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  486.565609][T11348] OCFS2: File system is now read-only.
[  486.571364][T11348] (syz.2.1587,11348,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  486.579725][T11348] (syz.2.1587,11348,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  486.588758][T11348] (syz.2.1587,11348,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  486.599367][T11348] (syz.2.1587,11348,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  486.608256][T11348] (syz.2.1587,11348,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  486.616893][T11348] (syz.2.1587,11348,0):ocfs2_fill_super:1177 ERROR: status = -30
[  487.587368][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'.
[  487.596492][T10847] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  487.782038][T10847] usb 7-1: Using ep0 maxpacket: 8
[  487.801876][T10847] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.834890][T11374] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  487.846456][T10847] usb 7-1: config 0 has no interfaces?
[  487.870391][T10847] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  487.896427][T10847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.908078][T10847] usb 7-1: Product: syz
[  487.912332][T10847] usb 7-1: Manufacturer: syz
[  487.919855][T10847] usb 7-1: SerialNumber: syz
[  487.930337][T10847] usb 7-1: config 0 descriptor??
[  487.958172][   T40] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  488.130394][   T40] usb 1-1: unable to get BOS descriptor or descriptor too short
[  488.162605][   T40] usb 1-1: unable to read config index 0 descriptor/start: -71
[  488.179301][   T40] usb 1-1: can't read configurations, error -71
[  489.431655][T11415] xt_policy: neither incoming nor outgoing policy selected
[  489.481680][T11415] input: syz1 as /devices/virtual/input/input28
[  490.142475][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  490.399272][   T10] usb 5-1: Using ep0 maxpacket: 32
[  490.422561][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  490.447701][   T10] usb 5-1: config 0 has no interface number 0
[  490.459769][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  490.511533][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  490.539365][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.586501][   T10] usb 5-1: Product: syz
[  490.594322][    T9] usb 7-1: USB disconnect, device number 7
[  490.608564][   T10] usb 5-1: Manufacturer: syz
[  490.629869][   T10] usb 5-1: SerialNumber: syz
[  490.650636][   T10] usb 5-1: config 0 descriptor??
[  490.671672][   T10] smsc75xx v1.0.0
[  490.706599][T11431] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  491.018141][    T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  491.096975][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  491.127663][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  491.138261][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  491.158400][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  491.240525][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  491.250548][    T9] usb 3-1: unable to read config index 0 descriptor/start: -71
[  491.258230][    T9] usb 3-1: can't read configurations, error -71
[  491.298567][T11447] syzkaller0: entered promiscuous mode
[  491.305128][T11447] syzkaller0: entered allmulticast mode
[  491.514328][T11458] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1618'.
[  492.573312][T11477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  492.856935][T10847] usb 5-1: USB disconnect, device number 16
[  492.877110][T11475] netlink: 'syz.2.1622': attribute type 2 has an invalid length.
[  493.295756][T11493] syzkaller0: entered promiscuous mode
[  493.306093][T11493] syzkaller0: entered allmulticast mode
[  493.672757][T11505] syz_tun: entered promiscuous mode
[  494.047754][   T40] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  494.134437][   T30] audit: type=1800 audit(2000000005.840:15): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1634" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  494.448577][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  494.669687][   T10] usb 5-1: config 0 has an invalid interface number: 231 but max is 0
[  494.755098][   T10] usb 5-1: config 0 has no interface number 0
[  494.773198][   T40] usb 3-1: unable to get BOS descriptor or descriptor too short
[  494.776404][   T10] usb 5-1: too many endpoints for config 0 interface 231 altsetting 238: 205, using maximum allowed: 30
[  494.781957][   T40] usb 3-1: not running at top speed; connect to a high speed hub
[  494.809321][   T10] usb 5-1: config 0 interface 231 altsetting 238 has 0 endpoint descriptors, different from the interface descriptor's value: 205
[  494.809455][   T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  494.838329][   T10] usb 5-1: config 0 interface 231 has no altsetting 0
[  494.864372][   T10] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  494.874040][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.883593][   T10] usb 5-1: Product: syz
[  494.888138][   T10] usb 5-1: Manufacturer: syz
[  494.892768][   T10] usb 5-1: SerialNumber: syz
[  494.900756][   T10] usb 5-1: config 0 descriptor??
[  495.085706][   T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  495.155242][   T40] usb 3-1: string descriptor 0 read error: -22
[  495.177525][   T40] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  495.187510][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.272374][T11523] vxfs: WRONG superblock magic 00000000 at 1
[  495.279917][T11523] vxfs: WRONG superblock magic 00000000 at 8
[  495.286028][T11523] vxfs: can't find superblock.
[  495.466308][   T40] usb 3-1: 0:2 : does not exist
[  496.024333][T11524] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  498.718443][   T10] hub 5-1:0.231: bad descriptor, ignoring hub
[  498.724601][   T10] hub 5-1:0.231: probe with driver hub failed with error -5
[  498.781188][   T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  498.817859][ T7253] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  498.852732][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  498.868632][   T40] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  498.880306][   T10] dib0700: firmware download failed at 7 with -22
[  498.907384][   T40] usb 3-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong.
[  498.925449][   T10] usb 5-1: USB disconnect, device number 17
[  498.950234][   T40] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/-8016
[  498.979109][   T40] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  498.987864][ T7253] usb 4-1: Using ep0 maxpacket: 8
[  499.005741][ T7253] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  499.021577][   T40] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  499.038366][ T7253] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  499.055036][ T7253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.099271][   T40] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  499.168050][   T40] usb 3-1: USB disconnect, device number 28
[  499.247145][ T5940] usb 4-1: USB disconnect, device number 21
[  500.075011][T11557] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  501.568098][   T40] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  501.630005][T11578] netlink: 'syz.3.1650': attribute type 2 has an invalid length.
[  501.752876][   T40] usb 3-1: unable to get BOS descriptor or descriptor too short
[  501.765921][   T40] usb 3-1: not running at top speed; connect to a high speed hub
[  501.780401][   T40] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.798969][   T40] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  501.811959][   T40] usb 3-1: string descriptor 0 read error: -22
[  501.819852][   T40] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  501.830014][   T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.874950][   T40] usb 3-1: 0:2 : does not exist
[  502.121935][ T5940] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  502.940078][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  502.968935][ T5940] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  502.987817][ T5940] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  503.016767][ T5940] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  503.026052][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.040893][T11601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  503.043065][ T5940] usbtmc 5-1:16.0: bulk endpoints not found
[  503.052942][T11601] tipc: Resetting bearer <eth:syzkaller0>
[  503.059996][T11603] ªªªªªª: renamed from lo (while UP)
[  503.090136][T11600] tipc: Disabling bearer <eth:syzkaller0>
[  503.260185][   T40] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  503.292245][   T40] usb 3-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong.
[  503.304160][   T40] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/-8016
[  503.321856][   T40] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  503.334735][   T40] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  503.435934][   T40] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  503.462411][   T40] usb 3-1: USB disconnect, device number 29
[  503.529376][T11619] ªªªªªª speed is unknown, defaulting to 1000
[  504.836907][   T40] usb 5-1: USB disconnect, device number 18
[  504.925310][T11619] wlan1 speed is unknown, defaulting to 1000
[  505.650934][T11650] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1678'.
[  507.789844][T11680] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  509.152743][T11706] ªªªªªª speed is unknown, defaulting to 1000
[  510.507037][T11706] wlan1 speed is unknown, defaulting to 1000
[  511.297819][T11735] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  511.629469][T11735] syzkaller0: entered promiscuous mode
[  511.648123][T11735] syzkaller0: entered allmulticast mode
[  513.018011][ T7253] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  513.086325][T11765] loop3: detected capacity change from 0 to 512
[  513.097145][T11765] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  513.100473][T11767] siw: device registration error -23
[  513.105779][T11765] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  513.119323][T11765] EXT4-fs (loop3): orphan cleanup on readonly fs
[  513.125823][T11765] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  513.136061][T11765] EXT4-fs warning (device loop3): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  513.151867][T11765] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  513.160346][T11765] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1707: bg 0: block 40: padding at end of block bitmap is not set
[  513.179333][T11765] EXT4-fs (loop3): Remounting filesystem read-only
[  513.186114][T11765] EXT4-fs (loop3): 1 truncate cleaned up
[  513.193853][T11765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  513.211686][T11765] EXT4-fs (loop3): shut down requested (2)
[  513.217716][ T7253] usb 3-1: Using ep0 maxpacket: 8
[  513.229276][ T7253] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  513.255050][ T7253] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  513.274531][ T7253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.311026][ T7253] usb 3-1: Product: syz
[  513.326752][ T7253] usb 3-1: Manufacturer: syz
[  513.341974][ T7253] usb 3-1: SerialNumber: syz
[  513.410178][ T7253] usb 3-1: config 0 descriptor??
[  514.418793][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.832240][ T6239] usb 3-1: USB disconnect, device number 30
[  516.207726][ T6782] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  516.473306][ T6782] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  516.508056][ T6782] usb 5-1: config 5 has no interface number 0
[  516.529441][ T6782] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  516.557780][ T6782] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  516.589673][T11810] siw: device registration error -23
[  516.607868][ T6782] usb 5-1: config 5 interface 123 has no altsetting 0
[  516.630718][ T6782] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  516.657724][ T6782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.677859][ T6782] usb 5-1: Product: syz
[  516.682357][ T6782] usb 5-1: Manufacturer: syz
[  516.687512][ T6782] usb 5-1: SerialNumber: syz
[  516.975669][ T6782] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device.
[  517.010632][ T6782] usb 5-1: USB disconnect, device number 19
[  518.026257][T11834] loop4: detected capacity change from 0 to 512
[  518.332826][T11834] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  518.349631][T11834] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  518.373931][T11834] EXT4-fs (loop4): orphan cleanup on readonly fs
[  518.449495][T11834] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  518.475016][T11839] syz_tun: entered allmulticast mode
[  518.488887][T11838] syz_tun: left allmulticast mode
[  518.495576][T11834] EXT4-fs warning (device loop4): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  518.528045][T11834] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  518.546296][T11834] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1726: bg 0: block 40: padding at end of block bitmap is not set
[  518.605804][T11844] siw: device registration error -23
[  518.615953][T11834] EXT4-fs (loop4): Remounting filesystem read-only
[  518.624212][T11834] EXT4-fs (loop4): 1 truncate cleaned up
[  518.639909][T11834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  518.703458][T11834] EXT4-fs (loop4): shut down requested (2)
[  519.527659][ T5881] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  519.657037][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.815128][T11858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1733'.
[  519.828976][ T5881] usb 7-1: Using ep0 maxpacket: 16
[  519.837370][ T5881] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  519.846139][ T5881] usb 7-1: config 0 has no interface number 0
[  519.852778][ T5881] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.865905][ T5881] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.878504][ T5881] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  519.891694][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.912441][ T5881] usb 7-1: config 0 descriptor??
[  519.954422][T11865] netlink: 'syz.3.1736': attribute type 1 has an invalid length.
[  520.009409][T11869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1736'.
[  520.164653][T11869] bond1: (slave bridge1): making interface the new active one
[  520.196392][T11869] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  520.582966][ T5881] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0003/input/input29
[  520.616487][   T30] audit: type=1326 audit(2000000032.330:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.674148][ T5881] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0003/input/input30
[  520.703348][   T30] audit: type=1326 audit(2000000032.360:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.730583][   T30] audit: type=1326 audit(2000000032.360:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.755994][ T5881] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.6-1/input1
[  520.789454][ T5881] usb 7-1: USB disconnect, device number 8
[  520.806025][   T30] audit: type=1326 audit(2000000032.360:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.834535][   T30] audit: type=1326 audit(2000000032.360:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.857530][   T30] audit: type=1326 audit(2000000032.360:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.884234][   T30] audit: type=1326 audit(2000000032.360:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.907201][   T30] audit: type=1326 audit(2000000032.360:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  520.939784][   T30] audit: type=1326 audit(2000000032.360:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11875 comm="syz.3.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x7ffc0000
[  521.038887][   T40] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  521.176955][T11891] loop4: detected capacity change from 0 to 512
[  521.198485][T11891] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  521.206491][T11891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  521.218638][   T40] usb 3-1: Using ep0 maxpacket: 8
[  521.234609][   T40] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  521.255069][   T40] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  521.264630][T11891] EXT4-fs (loop4): orphan cleanup on readonly fs
[  521.267445][   T40] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  521.283572][   T40] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  521.298016][   T40] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  521.302034][T11891] EXT4-fs warning (device loop4): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  521.322123][   T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.328664][   T40] usbtmc 3-1:16.0: bulk endpoints not found
[  521.349746][T11891] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  521.366657][T11891] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1743: bg 0: block 40: padding at end of block bitmap is not set
[  521.385993][T11891] EXT4-fs (loop4): Remounting filesystem read-only
[  521.409600][T11891] EXT4-fs (loop4): 1 truncate cleaned up
[  521.417226][T11891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  521.454137][T11891] EXT4-fs (loop4): shut down requested (2)
[  523.476348][ T5941] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  525.947811][ T5941] usb 4-1: Using ep0 maxpacket: 32
[  526.050723][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.156037][ T5941] usb 4-1: device descriptor read/all, error -71
[  526.164984][ T7253] usb 3-1: USB disconnect, device number 31
[  527.119729][T11942] loop0: detected capacity change from 0 to 512
[  527.152625][T11942] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  527.182441][T11942] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  527.219436][T11942] EXT4-fs (loop0): orphan cleanup on readonly fs
[  527.226168][T11942] __quota_error: 7 callbacks suppressed
[  527.226201][T11942] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  527.306527][T11942] EXT4-fs warning (device loop0): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  527.367216][T11942] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  527.404554][T11942] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1760: bg 0: block 40: padding at end of block bitmap is not set
[  527.423504][T11942] EXT4-fs (loop0): Remounting filesystem read-only
[  527.455705][T11942] EXT4-fs (loop0): 1 truncate cleaned up
[  527.463392][T11942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  527.483446][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'.
[  527.505499][T11942] EXT4-fs (loop0): shut down requested (2)
[  527.589504][T11958] syzkaller0: entered promiscuous mode
[  527.595134][T11958] syzkaller0: entered allmulticast mode
[  527.647793][ T5941] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  527.755852][T11960] netlink: 'syz.3.1766': attribute type 2 has an invalid length.
[  529.422175][ T5941] usb 7-1: Using ep0 maxpacket: 32
[  529.817069][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.842234][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  529.880876][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  529.930603][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  529.966639][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  530.002661][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  530.032693][ T5941] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  530.046245][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.069662][ T5941] usb 7-1: Product: syz
[  530.077689][ T5941] usb 7-1: Manufacturer: syz
[  530.097735][ T5941] usb 7-1: SerialNumber: syz
[  530.111493][ T5941] usb 7-1: config 0 descriptor??
[  530.664336][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -32
[  530.694269][ T5941] input input31: Device does not respond to id packet M
[  530.754866][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -32
[  530.782766][ T5941] input input31: Device does not respond to id packet P
[  530.833642][ T5941] input input31: Device does not respond to id packet B
[  531.036637][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -71
[  531.045983][ T5941] input input31: Device does not respond to id packet N
[  531.054682][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -71
[  531.062080][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -71
[  531.074837][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -71
[  531.083106][ T5941] iforce 7-1:0.0: usb_submit_urb failed: -71
[  531.114531][ T5941] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input31
[  531.180735][ T5941] usb 7-1: USB disconnect, device number 9
[  532.244032][T12015] netlink: 'syz.6.1781': attribute type 2 has an invalid length.
[  532.358060][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.618943][ T5989] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  536.234962][ T5989] usb 3-1: Using ep0 maxpacket: 32
[  536.255430][ T5989] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  536.290364][ T5989] usb 3-1: config 0 has no interface number 0
[  536.411607][ T5989] usb 3-1: config 0 interface 184 has no altsetting 0
[  536.468202][ T5989] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  536.487630][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.511572][ T5989] usb 3-1: Product: syz
[  536.515809][ T5989] usb 3-1: Manufacturer: syz
[  536.553959][ T5989] usb 3-1: SerialNumber: syz
[  536.573882][ T5989] usb 3-1: config 0 descriptor??
[  536.592757][ T5989] smsc75xx v1.0.0
[  536.626267][ T5989] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  536.856578][ T5989] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  537.961169][T12086] netlink: 'syz.4.1795': attribute type 2 has an invalid length.
[  538.356567][ T5940] usb 3-1: USB disconnect, device number 32
[  543.943435][T12149] loop4: detected capacity change from 0 to 8
[  544.588769][   T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  545.496460][   T10] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  545.598791][T12152] netlink: 'syz.4.1823': attribute type 4 has an invalid length.
[  545.946006][   T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  545.977172][   T10] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  545.996839][   T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  546.021203][   T10] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  546.032313][   T10] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1
[  546.064811][   T10] usb 1-1: string descriptor 0 read error: -22
[  546.071695][   T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  546.085993][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.188573][ T5940] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  546.367767][ T5940] usb 4-1: Using ep0 maxpacket: 8
[  546.421272][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  546.491737][   T10] usb 1-1: USB disconnect, device number 18
[  546.863922][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  546.888291][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  546.979910][T12182] ªªªªªª speed is unknown, defaulting to 1000
[  547.068181][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  547.087971][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  547.104589][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.130141][ T5940] usbtmc 4-1:16.0: bulk endpoints not found
[  547.529216][T12182] wlan1 speed is unknown, defaulting to 1000
[  548.971997][ T5940] usb 4-1: USB disconnect, device number 24
[  549.474874][T12207] loop0: detected capacity change from 0 to 8
[  549.497378][T12203] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[  549.904116][   T30] audit: type=1326 audit(2000000061.620:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c618f749 code=0x7ffc0000
[  549.956127][T12213] netlink: 'syz.0.1839': attribute type 4 has an invalid length.
[  549.986932][   T30] audit: type=1326 audit(2000000061.700:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c618f749 code=0x7ffc0000
[  550.324525][   T30] audit: type=1326 audit(2000000061.720:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f40c618f749 code=0x7ffc0000
[  550.462439][   T30] audit: type=1326 audit(2000000061.720:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c618f749 code=0x7ffc0000
[  550.556323][   T30] audit: type=1326 audit(2000000061.730:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.4.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c618f749 code=0x7ffc0000
[  552.411534][ T5999] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  552.516810][T12252] loop4: detected capacity change from 0 to 8
[  552.567646][ T5999] usb 7-1: Using ep0 maxpacket: 8
[  552.579075][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  552.646037][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  552.817654][ T5999] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  552.829290][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  552.848622][ T5999] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  552.866765][ T5999] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  552.868165][T12257] netlink: 'syz.4.1856': attribute type 4 has an invalid length.
[  553.002743][ T5999] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  553.071110][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.296316][ T5999] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[  555.891526][ T5941] usb 7-1: USB disconnect, device number 10
[  558.260440][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'.
[  558.767692][ T5941] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  559.653553][T12307] binder: 12302:12307 ioctl 0 200000000040 returned -22
[  559.827783][ T5941] usb 4-1: Using ep0 maxpacket: 8
[  560.068051][ T5941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  560.097741][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  560.685010][ T5941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  560.694994][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  560.704937][ T5941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  560.821285][ T5941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  560.871271][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.894183][T12343] syzkaller0: entered promiscuous mode
[  560.913328][T12343] syzkaller0: entered allmulticast mode
[  560.914836][ T5941] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  562.487688][ T5941] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  562.778050][T12370] xt_policy: neither incoming nor outgoing policy selected
[  562.809963][T12370] input: syz1 as /devices/virtual/input/input32
[  562.847638][ T5941] usb 1-1: Using ep0 maxpacket: 8
[  562.857924][ T5941] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  562.867459][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.875746][ T5941] usb 1-1: Product: syz
[  562.880317][ T5941] usb 1-1: Manufacturer: syz
[  562.885811][ T5941] usb 1-1: SerialNumber: syz
[  563.544757][ T5989] usb 4-1: USB disconnect, device number 25
[  563.642985][ T5941] usb 1-1: config 0 descriptor??
[  563.864703][ T5941] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  564.175717][T12389] syzkaller0: entered promiscuous mode
[  564.191694][T12389] syzkaller0: entered allmulticast mode
[  565.347839][ T5989] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  565.377776][ T5940] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  565.497783][ T5989] usb 7-1: Using ep0 maxpacket: 32
[  565.505108][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  565.524216][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  565.535736][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  565.545953][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  565.558957][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  565.573761][ T5989] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  565.583342][ T5989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.592281][ T5989] usb 7-1: Product: syz
[  565.596982][ T5989] usb 7-1: Manufacturer: syz
[  565.602883][ T5989] usb 7-1: SerialNumber: syz
[  565.611095][ T5989] usb 7-1: config 0 descriptor??
[  565.697692][ T5940] usb 3-1: Using ep0 maxpacket: 8
[  565.704601][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  565.718102][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  565.728288][ T5940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  565.738214][ T5940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  565.748891][ T5940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  566.455596][ T5941] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  566.465309][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  566.479668][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.499177][ T5940] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  567.833781][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -32
[  567.842027][ T5989] input input33: Device does not respond to id packet M
[  567.859273][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -32
[  567.865364][ T5989] input input33: Device does not respond to id packet P
[  567.872321][ T6028] usb 1-1: USB disconnect, device number 19
[  567.879525][ T5989] input input33: Device does not respond to id packet B
[  568.165723][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -71
[  568.371620][ T5989] input input33: Device does not respond to id packet N
[  568.380325][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -71
[  568.386874][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -71
[  568.393874][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -71
[  568.400454][ T5989] iforce 7-1:0.0: usb_submit_urb failed: -71
[  568.415043][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1912'.
[  568.424653][ T5989] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input33
[  568.437717][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1912'.
[  568.453609][ T5989] usb 7-1: USB disconnect, device number 11
[  568.479820][T12430] team0: entered promiscuous mode
[  568.484935][T12430] team_slave_0: entered promiscuous mode
[  568.506524][T12430] team_slave_1: entered promiscuous mode
[  568.533986][T12430] bond0: entered promiscuous mode
[  568.552285][T12430] bond_slave_0: entered promiscuous mode
[  568.581233][T12430] bond_slave_1: entered promiscuous mode
[  568.611552][T12430] 8021q: adding VLAN 0 to HW filter on device hsr1
[  568.992615][T12448] xt_policy: neither incoming nor outgoing policy selected
[  569.142969][T12448] input: syz1 as /devices/virtual/input/input34
[  569.320624][ T6028] usb 3-1: USB disconnect, device number 33
[  569.907747][ T6028] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  570.067757][ T6028] usb 4-1: Using ep0 maxpacket: 8
[  570.087101][ T6028] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  570.124522][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.147675][ T5940] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  570.156899][ T6028] usb 4-1: Product: syz
[  570.167018][ T6028] usb 4-1: Manufacturer: syz
[  570.196508][ T6028] usb 4-1: SerialNumber: syz
[  570.210774][ T6028] usb 4-1: config 0 descriptor??
[  571.000335][ T6028] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  571.017984][ T5940] usb 7-1: Using ep0 maxpacket: 32
[  571.025299][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  571.037180][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  571.048252][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  571.058204][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  571.070975][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  571.306601][ T5940] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  571.317182][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.325506][ T5940] usb 7-1: Product: syz
[  571.329786][ T5940] usb 7-1: Manufacturer: syz
[  571.334470][ T5940] usb 7-1: SerialNumber: syz
[  571.342747][T12480] ªªªªªª speed is unknown, defaulting to 1000
[  571.361572][ T5940] usb 7-1: config 0 descriptor??
[  572.615960][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -32
[  572.632232][ T5940] input input35: Device does not respond to id packet M
[  572.650394][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -32
[  572.658392][ T5940] input input35: Device does not respond to id packet P
[  572.713018][ T5940] input input35: Device does not respond to id packet B
[  572.745225][ T6028] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  573.103860][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -71
[  573.124625][ T5940] input input35: Device does not respond to id packet N
[  573.132821][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -71
[  573.137206][   T10] usb 4-1: USB disconnect, device number 26
[  573.414012][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -71
[  574.365528][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -71
[  574.372161][ T5940] iforce 7-1:0.0: usb_submit_urb failed: -71
[  574.380630][ T5940] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input35
[  574.718589][ T5940] usb 7-1: USB disconnect, device number 12
[  574.874706][   T30] audit: type=1326 audit(2000000086.590:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.3.1936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d2c38f749 code=0x0
[  575.562350][T12480] wlan1 speed is unknown, defaulting to 1000
[  576.656443][T12531] netlink: 'syz.0.1943': attribute type 1 has an invalid length.
[  576.686660][T12534] loop6: detected capacity change from 0 to 512
[  576.829434][T12541] xt_policy: neither incoming nor outgoing policy selected
[  576.860891][T12538] bond1: entered promiscuous mode
[  576.866017][T12538] bond1: entered allmulticast mode
[  576.871644][T12534] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  576.908007][T12534] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  576.917050][T12538] 8021q: adding VLAN 0 to HW filter on device bond1
[  576.955646][T12534] EXT4-fs (loop6): orphan cleanup on readonly fs
[  576.965238][T12534] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  577.101157][T12534] EXT4-fs warning (device loop6): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  577.350760][T12534] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  577.641439][T12541] input: syz1 as /devices/virtual/input/input36
[  577.668646][T12534] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1944: bg 0: block 40: padding at end of block bitmap is not set
[  577.719717][T12534] EXT4-fs (loop6): Remounting filesystem read-only
[  577.726442][T12534] EXT4-fs (loop6): 1 truncate cleaned up
[  577.740366][T12534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  577.775050][T12540] veth3: entered promiscuous mode
[  577.786847][T12534] EXT4-fs (loop6): shut down requested (2)
[  577.841991][T12540] veth3: entered allmulticast mode
[  577.869821][T12540] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  579.640578][T12564] syzkaller0: entered promiscuous mode
[  579.678040][T12564] syzkaller0: entered allmulticast mode
[  580.460978][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'.
[  580.492449][ T8872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.718399][T12581] syzkaller0: entered promiscuous mode
[  580.740210][T12581] syzkaller0: entered allmulticast mode
[  580.924142][T12585] ªªªªªª speed is unknown, defaulting to 1000
[  581.547007][T12585] wlan1 speed is unknown, defaulting to 1000
[  581.678138][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  581.907676][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  581.927164][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  581.938173][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  581.948641][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  581.956717][   T10] usb 4-1: SerialNumber: syz
[  582.298537][   T10] usb 4-1: 0:2 : does not exist
[  582.399598][   T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  582.733045][   T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  582.763380][   T10] usb 4-1: USB disconnect, device number 27
[  583.770897][T12614] loop6: detected capacity change from 0 to 512
[  584.850345][T12614] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  584.925623][T12614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  585.069216][T12614] EXT4-fs (loop6): orphan cleanup on readonly fs
[  585.075698][T12614] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  585.168037][T12614] EXT4-fs warning (device loop6): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  585.207979][T12614] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  585.263689][T12614] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1965: bg 0: block 40: padding at end of block bitmap is not set
[  585.318525][T12614] EXT4-fs (loop6): Remounting filesystem read-only
[  585.325244][T12614] EXT4-fs (loop6): 1 truncate cleaned up
[  585.330940][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'.
[  585.418932][T12614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  585.528646][T12614] EXT4-fs (loop6): shut down requested (2)
[  585.848751][T12624] dummy0: entered promiscuous mode
[  586.263405][T12624] macsec1: entered allmulticast mode
[  586.308161][T12624] dummy0: entered allmulticast mode
[  586.553368][T12632] xt_policy: neither incoming nor outgoing policy selected
[  586.656270][T12632] input: syz1 as /devices/virtual/input/input37
[  586.753649][T12624] dummy0: left allmulticast mode
[  586.760852][T12624] dummy0: left promiscuous mode
[  587.492273][T12643] siw: device registration error -23
[  587.649217][ T8872] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.748845][   T30] audit: type=1326 audit(2000000099.470:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.4.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40c618f749 code=0x0
[  589.910846][T12662] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1979'.
[  590.009833][T12661] ªªªªªª speed is unknown, defaulting to 1000
[  590.177853][T12675] loop4: detected capacity change from 0 to 512
[  590.202893][T12675] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  590.219953][T12675] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  590.237913][T12675] EXT4-fs (loop4): orphan cleanup on readonly fs
[  590.248599][ T5940] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  590.254702][T12675] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  590.277980][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1986'.
[  590.287303][T12675] EXT4-fs warning (device loop4): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  590.303912][T12675] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  590.323325][T12675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1985: bg 0: block 40: padding at end of block bitmap is not set
[  590.348898][T12661] wlan1 speed is unknown, defaulting to 1000
[  590.357078][T12673] siw: device registration error -23
[  590.387359][T12675] EXT4-fs (loop4): Remounting filesystem read-only
[  590.408072][ T5940] usb 3-1: Using ep0 maxpacket: 16
[  590.414140][T12675] EXT4-fs (loop4): 1 truncate cleaned up
[  590.419781][T12675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  590.446208][ T5940] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  590.456050][ T5940] usb 3-1: config 0 has no interface number 0
[  590.468075][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  590.479867][ T5940] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  590.493506][ T5940] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  590.503906][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  590.508115][T12675] EXT4-fs (loop4): shut down requested (2)
[  590.512249][ T5940] usb 3-1: Product: syz
[  590.527909][ T5940] usb 3-1: SerialNumber: syz
[  590.710797][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1989'.
[  590.739601][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'.
[  590.743363][ T5940] usb 3-1: config 0 descriptor??
[  590.773684][ T5940] cm109 3-1:0.8: invalid payload size 0, expected 4
[  591.755689][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input38
[  591.768943][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  592.359075][T12705] xt_policy: neither incoming nor outgoing policy selected
[  592.401404][T12705] input: syz1 as /devices/virtual/input/input39
[  592.588387][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.028526][T11537] usb 3-1: USB disconnect, device number 34
[  593.052984][T11537] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  593.088346][T12719] siw: device registration error -23
[  593.286579][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2000'.
[  593.316057][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2000'.
[  594.257610][   T30] audit: type=1326 audit(2000000105.970:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c61865e7 code=0x7ffc0000
[  594.347642][   T30] audit: type=1326 audit(2000000105.970:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c612b829 code=0x7ffc0000
[  594.394356][T12739] loop2: detected capacity change from 0 to 512
[  594.400806][   T30] audit: type=1326 audit(2000000105.970:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c61865e7 code=0x7ffc0000
[  594.400863][   T30] audit: type=1326 audit(2000000105.970:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c612b829 code=0x7ffc0000
[  594.400911][   T30] audit: type=1326 audit(2000000105.970:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c61865e7 code=0x7ffc0000
[  594.400956][   T30] audit: type=1326 audit(2000000105.970:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c612b829 code=0x7ffc0000
[  594.401005][   T30] audit: type=1326 audit(2000000105.970:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c61865e7 code=0x7ffc0000
[  594.401061][   T30] audit: type=1326 audit(2000000105.970:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c612b829 code=0x7ffc0000
[  594.401108][   T30] audit: type=1326 audit(2000000105.970:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12736 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40c61865e7 code=0x7ffc0000
[  594.586727][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2007'.
[  594.596409][T12739] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  594.605694][T12739] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  594.614838][T12739] EXT4-fs (loop2): orphan cleanup on readonly fs
[  594.622141][T12739] EXT4-fs warning (device loop2): ext4_enable_quotas:7183: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  594.637165][T12739] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  594.644884][T12739] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2005: bg 0: block 40: padding at end of block bitmap is not set
[  594.659752][T12739] EXT4-fs (loop2): Remounting filesystem read-only
[  594.667367][T12739] EXT4-fs (loop2): 1 truncate cleaned up
[  594.685728][T12739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  594.704131][T12739] EXT4-fs (loop2): shut down requested (2)
[  595.273971][ T6782] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  595.454356][ T6782] usb 1-1: Using ep0 maxpacket: 16
[  595.473062][ T6782] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  595.513600][ T6782] usb 1-1: config 0 has no interface number 0
[  595.543978][ T6782] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  595.588616][ T6782] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  595.859254][ T6782] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  595.890703][ T6782] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  596.856053][ T6782] usb 1-1: Product: syz
[  596.867283][ T6782] usb 1-1: SerialNumber: syz
[  596.874502][ T6782] usb 1-1: config 0 descriptor??
[  596.887160][ T6782] cm109 1-1:0.8: invalid payload size 0, expected 4
[  596.896041][ T6782] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input40
[  597.109729][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  597.120230][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.206041][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2013'.
[  598.332570][T12783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2020'.
[  598.447631][ T6782] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  598.543455][ T6850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  598.562826][ T6850] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  598.617648][ T6782] usb 7-1: Using ep0 maxpacket: 32
[  598.625222][ T6782] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.637624][ T6782] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  598.646710][ T6782] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.680436][ T6782] usb 7-1: config 0 descriptor??
[  598.712163][ T6782] dvb-usb: found a 'TeVii S662' in warm state.
[  598.720843][ T6782] dw2102: su3000_power_ctrl: 1, initialized 0
[  598.727067][ T6782] dvb-usb: bulk message failed: -22 (2/0)
[  598.750551][ T6782] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  598.768484][ T6782] dvbdev: DVB: registering new adapter (TeVii S662)
[  598.775195][ T6782] usb 7-1: media controller created
[  598.788675][ T7253] usb 1-1: USB disconnect, device number 20
[  598.797665][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.807760][ T6782] dw2102: i2c transfer failed.
[  598.810242][ T7253] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  598.818818][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.833891][ T6782] dw2102: i2c transfer failed.
[  598.847605][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.853408][ T6782] dw2102: i2c transfer failed.
[  598.867674][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.873476][ T6782] dw2102: i2c transfer failed.
[  598.886674][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.897691][ T6782] dw2102: i2c transfer failed.
[  598.903697][T12779] dvb-usb: bulk message failed: -22 (5/0)
[  598.926799][T12779] dw2102: i2c transfer failed.
[  598.955313][ T6782] dvb-usb: bulk message failed: -22 (6/0)
[  598.961320][ T6782] dw2102: i2c transfer failed.
[  598.966232][ T6782] dvb-usb: MAC address: 02:02:02:02:02:02
[  599.021601][ T6782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  599.050287][T12792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'.
[  599.078308][ T6782] dvb-usb: bulk message failed: -22 (3/0)
[  599.085242][ T6782] dw2102: command 0x0e transfer failed.
[  599.095399][ T6782] dvb-usb: bulk message failed: -22 (3/0)
[  599.107837][ T6782] dw2102: command 0x0e transfer failed.
[  599.379514][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2026'.
[  599.418160][ T6782] dvb-usb: bulk message failed: -22 (3/0)
[  599.424052][ T6782] dw2102: command 0x0e transfer failed.
[  599.439923][ T6782] dvb-usb: bulk message failed: -22 (3/0)
[  599.445779][ T6782] dw2102: command 0x0e transfer failed.
[  599.471828][ T6782] dvb-usb: bulk message failed: -22 (1/0)
[  599.494332][ T6782] dw2102: command 0x51 transfer failed.
[  599.547591][ T6782] dvb-usb: bulk message failed: -22 (5/0)
[  599.565575][ T6782] dw2102: i2c probe for address 0x68 failed.
[  599.669475][ T6782] dvb-usb: bulk message failed: -22 (5/0)
[  599.783034][ T6782] dw2102: i2c probe for address 0x69 failed.
[  599.947279][ T6782] dvb-usb: bulk message failed: -22 (5/0)
[  600.143661][ T6782] dw2102: i2c probe for address 0x6a failed.
[  600.149996][ T6782] dw2102: probing for demodulator failed. Is the external power switched on?
[  600.169103][ T6782] dvb-usb: no frontend was attached by 'TeVii S662'
[  600.272930][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2031'.
[  600.293308][ T6782] rc_core: IR keymap rc-tt-1500 not found
[  600.303005][ T6782] Registered IR keymap rc-empty
[  600.312984][ T6782] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  600.324010][ T6782] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input41
[  600.338286][ T6782] dvb-usb: schedule remote query interval to 250 msecs.
[  600.345311][ T6782] dw2102: su3000_power_ctrl: 0, initialized 1
[  600.360418][ T6782] dvb-usb: TeVii S662 successfully initialized and connected.
[  600.432474][ T6782] usb 7-1: USB disconnect, device number 13
[  601.326661][ T6782] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  603.535116][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2047'.
[  605.657675][ T5941] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  606.212339][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.284292][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  607.294149][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  607.307213][ T5941] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  607.316336][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.328654][ T5941] usb 1-1: config 0 descriptor??
[  607.692592][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2059'.
[  607.751933][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  608.638850][T12912] binder: 12911:12912 ioctl c0306201 0 returned -14
[  608.688299][T12912] binder: 12911:12912 ioctl c0306201 0 returned -14
[  609.489185][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.498035][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.505706][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.513923][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.564838][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.588872][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.596452][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.630767][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.663084][ T5941] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  609.699909][ T5941] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  609.756995][ T5941] usb 1-1: USB disconnect, device number 21
[  612.398288][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'.
[  614.687809][T12993] ------------[ cut here ]------------
[  614.693994][T12993] WARNING: arch/x86/kvm/lapic.c:3501 at kvm_apic_accept_events+0x341/0x490, CPU#0: syz.3.2086/12993
[  614.705475][T12993] Modules linked in:
[  614.709821][T12993] CPU: 0 UID: 0 PID: 12993 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) 
[  614.719498][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  614.730031][T12993] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[  614.736239][T12993] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[  614.756107][T12993] RSP: 0018:ffffc9001033fbf0 EFLAGS: 00010287
[  614.762494][T12993] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000
[  614.770690][T12993] RDX: ffffc9000c80b000 RSI: 000000000000039f RDI: 00000000000003a0
[  614.778723][T12993] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888078769838
[  614.786727][T12993] R10: dffffc0000000000 R11: ffffed100b142008 R12: 0000000000000002
[  614.795069][T12993] R13: dffffc0000000000 R14: ffff888033cfea00 R15: ffff888058a102d8
[  614.803146][T12993] FS:  00007f2d2d2ad6c0(0000) GS:ffff888125e88000(0000) knlGS:0000000000000000
[  614.812192][T12993] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  614.819240][T12993] CR2: 00002000003eb030 CR3: 000000004b49a000 CR4: 00000000003526f0
[  614.827296][T12993] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  614.835678][T12993] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  614.843835][T12993] Call Trace:
[  614.847158][T12993]  <TASK>
[  614.850599][T12993]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[  614.856824][T12993]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  614.863269][T12993]  kvm_vcpu_ioctl+0x663/0xed0
[  614.868100][T12993]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  614.873353][T12993]  ? do_futex+0x333/0x420
[  614.878121][T12993]  ? __fget_files+0x2a/0x420
[  614.882857][T12993]  ? __fget_files+0x3a0/0x420
[  614.887640][T12993]  ? __fget_files+0x2a/0x420
[  614.892337][T12993]  ? bpf_lsm_file_ioctl+0x9/0x20
[  614.897374][T12993]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  614.902828][T12993]  __se_sys_ioctl+0xfc/0x170
[  614.908158][T12993]  do_syscall_64+0xfa/0xf80
[  614.912737][T12993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.918904][T12993]  ? clear_bhb_loop+0x60/0xb0
[  614.923633][T12993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.929623][T12993] RIP: 0033:0x7f2d2c38f749
[  614.934083][T12993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.954070][T12993] RSP: 002b:00007f2d2d2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  614.962572][T12993] RAX: ffffffffffffffda RBX: 00007f2d2c5e5fa0 RCX: 00007f2d2c38f749
[  614.970695][T12993] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[  614.979114][T12993] RBP: 00007f2d2c413f91 R08: 0000000000000000 R09: 0000000000000000
[  614.987214][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.995387][T12993] R13: 00007f2d2c5e6038 R14: 00007f2d2c5e5fa0 R15: 00007ffede4171c8
[  615.003466][T12993]  </TASK>
[  615.006531][T12993] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  615.013843][T12993] CPU: 0 UID: 0 PID: 12993 Comm: syz.3.2086 Not tainted syzkaller #0 PREEMPT(full) 
[  615.023337][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  615.033507][T12993] Call Trace:
[  615.036807][T12993]  <TASK>
[  615.039750][T12993]  dump_stack_lvl+0x99/0x250
[  615.044370][T12993]  ? __asan_memcpy+0x40/0x70
[  615.048979][T12993]  ? __pfx_dump_stack_lvl+0x10/0x10
[  615.054206][T12993]  ? __pfx__printk+0x10/0x10
[  615.058849][T12993]  vpanic+0x237/0x6d0
[  615.062846][T12993]  ? __pfx_vpanic+0x10/0x10
[  615.067355][T12993]  ? is_bpf_text_address+0x292/0x2b0
[  615.072742][T12993]  ? is_bpf_text_address+0x26/0x2b0
[  615.077970][T12993]  panic+0xb9/0xc0
[  615.081788][T12993]  ? __pfx_panic+0x10/0x10
[  615.086231][T12993]  __warn+0x317/0x4b0
[  615.090218][T12993]  ? kvm_apic_accept_events+0x341/0x490
[  615.095778][T12993]  ? kvm_apic_accept_events+0x341/0x490
[  615.101339][T12993]  __report_bug+0x22e/0x4b0
[  615.105863][T12993]  ? kvm_apic_accept_events+0x341/0x490
[  615.111427][T12993]  ? __pfx___report_bug+0x10/0x10
[  615.116485][T12993]  ? __lock_acquire+0x6b6/0x2cf0
[  615.121452][T12993]  ? rcu_is_watching+0x15/0xb0
[  615.126224][T12993]  ? trace_contention_end+0x39/0x100
[  615.131518][T12993]  ? kvm_apic_accept_events+0x341/0x490
[  615.137118][T12993]  report_bug+0x16a/0x220
[  615.141580][T12993]  ? kvm_apic_accept_events+0x341/0x490
[  615.147141][T12993]  ? kvm_apic_accept_events+0x343/0x490
[  615.152709][T12993]  handle_bug+0x98/0x200
[  615.156989][T12993]  exc_invalid_op+0x1a/0x50
[  615.161517][T12993]  asm_exc_invalid_op+0x1a/0x20
[  615.166381][T12993] RIP: 0010:kvm_apic_accept_events+0x341/0x490
[  615.172550][T12993] Code: eb 0c e8 b2 c1 72 00 eb 05 e8 ab c1 72 00 45 31 ff 44 89 f8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 90 c1 72 00 90 <0f> 0b 90 e9 ec fd ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4f
[  615.192165][T12993] RSP: 0018:ffffc9001033fbf0 EFLAGS: 00010287
[  615.198246][T12993] RAX: ffffffff814ede70 RBX: 0000000000000002 RCX: 0000000000080000
[  615.206242][T12993] RDX: ffffc9000c80b000 RSI: 000000000000039f RDI: 00000000000003a0
[  615.214228][T12993] RBP: 0000000000000000 R08: ffffffff81471af2 R09: ffff888078769838
[  615.222210][T12993] R10: dffffc0000000000 R11: ffffed100b142008 R12: 0000000000000002
[  615.230193][T12993] R13: dffffc0000000000 R14: ffff888033cfea00 R15: ffff888058a102d8
[  615.238182][T12993]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  615.244535][T12993]  ? kvm_apic_accept_events+0x340/0x490
[  615.250112][T12993]  kvm_arch_vcpu_ioctl_get_mpstate+0x115/0x450
[  615.256297][T12993]  ? kvm_arch_vcpu_ioctl_get_mpstate+0xc2/0x450
[  615.262571][T12993]  kvm_vcpu_ioctl+0x663/0xed0
[  615.267265][T12993]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  615.272488][T12993]  ? do_futex+0x333/0x420
[  615.276889][T12993]  ? __fget_files+0x2a/0x420
[  615.281590][T12993]  ? __fget_files+0x3a0/0x420
[  615.286292][T12993]  ? __fget_files+0x2a/0x420
[  615.290905][T12993]  ? bpf_lsm_file_ioctl+0x9/0x20
[  615.295865][T12993]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  615.301162][T12993]  __se_sys_ioctl+0xfc/0x170
[  615.305827][T12993]  do_syscall_64+0xfa/0xf80
[  615.310357][T12993]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.316440][T12993]  ? clear_bhb_loop+0x60/0xb0
[  615.321145][T12993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.327044][T12993] RIP: 0033:0x7f2d2c38f749
[  615.331556][T12993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  615.351209][T12993] RSP: 002b:00007f2d2d2ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  615.359816][T12993] RAX: ffffffffffffffda RBX: 00007f2d2c5e5fa0 RCX: 00007f2d2c38f749
[  615.367815][T12993] RDX: 0000200000000040 RSI: 000000008004ae98 RDI: 0000000000000005
[  615.375793][T12993] RBP: 00007f2d2c413f91 R08: 0000000000000000 R09: 0000000000000000
[  615.383784][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  615.391954][T12993] R13: 00007f2d2c5e6038 R14: 00007f2d2c5e5fa0 R15: 00007ffede4171c8
[  615.400061][T12993]  </TASK>
[  615.403384][T12993] Kernel Offset: disabled
[  615.407720][T12993] Rebooting in 86400 seconds..