last executing test programs:

2.130554548s ago: executing program 0 (id=105):
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)="784116f2", 0x4}], 0x1}}], 0x4000000000002cf, 0x0)

2.02189609s ago: executing program 0 (id=106):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805)

1.962039135s ago: executing program 0 (id=107):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

1.261542594s ago: executing program 2 (id=117):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
unlink(&(0x7f0000000100)='./file0\x00')

1.191436341s ago: executing program 2 (id=121):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0)
recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write(r3, &(0x7f0000000300), 0x20)
read(r2, &(0x7f0000000700), 0x20)
write(r3, &(0x7f0000000500)="000000020104", 0x6)
read(r2, &(0x7f0000000310), 0x6)
sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0)

1.041475901s ago: executing program 0 (id=124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

1.02283255s ago: executing program 2 (id=125):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)
close(r0)
close(0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})

961.898531ms ago: executing program 0 (id=127):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='name', &(0x7f0000000100)='^\xff\x06\x00\x00\xb5.\xbc\xe4\x1b\xe9\x9f\xd0\x93gx\xb1\xfd\x9d*A\x06\x85e\x15\xbd+\xce\x17\xc0\x8e\xd9(\xa0\xa3?\xaa_%yw\x186W_8]\x99G\xcaw\xae(\xca;\xca$\xea)h\xa3\x01|\x87Dxs!J|\xd2\xc5Y\xc5\xad\xbb\x04cOe\xfd\xcfD\x92\xc9\xc3ro0\x9e-7v\xb5I\xb4Z\x83\xd83o+\n\xedf\xc3\aYX\xd7\xb0d*\xd0\x93\xa0S\x05D', 0x0)

881.697239ms ago: executing program 1 (id=128):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x3, 0x4}, 'syz1\x00', 0x10})
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x51, 0x7ffc, 0x8, {0x80, 0x15}, {0x0, 0x8000}, @period={0x5d, 0x4, 0x8000, 0xff, 0x2, {0xf, 0x0, 0x9, 0xc7}, 0x0, 0x0}})

807.289588ms ago: executing program 2 (id=129):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f00000024c0)=ANY=[], 0x5, 0x445a, &(0x7f0000004480)="$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")

806.690718ms ago: executing program 1 (id=130):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000680)="00cd21fad3e50af7cb56357b624302e69202fa7712237265e58a9abce647880233e03fd8c0cd7533e638ff9f4ad7ac3f6fc9903f27b93b1b413b0dc56e60b47db8bdc1e3f5028f1d47b7b73fbd65b6a6450cc844d6e6f9a9c764b617dba0fe0930ec13fa5a104abf7a8db03650ec1f58e8a5074aab", 0x75}, {&(0x7f0000000480)="593d803a5c4c2d1638816cb1f8cc", 0xe}], 0x2)

541.479365ms ago: executing program 1 (id=131):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock2(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
lseek(r1, 0x2000, 0x0)

291.631086ms ago: executing program 2 (id=132):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
write(r0, &(0x7f0000000800)='1\n\x00', 0x2)
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000a00)='./config/usb_gadget/g1/os_desc/c.1\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000e00)='dummy_udc.0\n\x00', 0xc)

291.361849ms ago: executing program 1 (id=133):
timer_create(0x98935195b67af7db, 0x0, 0x0)

230.123676ms ago: executing program 1 (id=134):
setpgid(0xffffffffffffffff, 0x0)

229.813698ms ago: executing program 1 (id=135):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{0x0}], 0x1)
sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)

162.077466ms ago: executing program 2 (id=136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)

0s ago: executing program 0 (id=137):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x2, &(0x7f00000002c0)={0x19b1, 0x7, 0xfffffffd, 0x1, 0xfffffffffffffff2, 0x1, 0x1, 0x200, 0x0, 0x300, 0x4, 0x2, 0x4494, 0x0, 0x9, 0x82, 0x0, 0x0, 0x3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x9})
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:38767' (ED25519) to the list of known hosts.
syzkaller login: [   50.114798][ T5539] cgroup: Unknown subsys name 'net'
[   50.187826][ T5539] cgroup: Unknown subsys name 'cpuset'
[   50.193009][ T5539] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.637762][ T5539] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.078168][ T4982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.082391][ T4982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.085509][ T4982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.088403][ T4982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.101093][ T4982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.150515][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.160578][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.164339][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.171397][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.181213][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.187852][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.198345][ T5595] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.202683][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.206442][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.210293][ T5595] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.709628][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.713096][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.715827][ T5598] bridge_slave_0: entered allmulticast mode
[   56.719471][ T5598] bridge_slave_0: entered promiscuous mode
[   56.748212][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.751344][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.754233][ T5598] bridge_slave_1: entered allmulticast mode
[   56.757878][ T5598] bridge_slave_1: entered promiscuous mode
[   56.762564][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.765522][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.768459][ T5592] bridge_slave_0: entered allmulticast mode
[   56.773503][ T5592] bridge_slave_0: entered promiscuous mode
[   56.777850][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.780836][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.783539][ T5592] bridge_slave_1: entered allmulticast mode
[   56.787054][ T5592] bridge_slave_1: entered promiscuous mode
[   56.871233][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.876962][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.893770][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.909654][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.924789][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.927665][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.930702][ T5601] bridge_slave_0: entered allmulticast mode
[   56.934459][ T5601] bridge_slave_0: entered promiscuous mode
[   56.938679][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.941791][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.944673][ T5601] bridge_slave_1: entered allmulticast mode
[   56.948255][ T5601] bridge_slave_1: entered promiscuous mode
[   57.003127][ T5598] team0: Port device team_slave_0 added
[   57.007031][ T5592] team0: Port device team_slave_0 added
[   57.011609][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.016838][ T5592] team0: Port device team_slave_1 added
[   57.021070][ T5598] team0: Port device team_slave_1 added
[   57.024746][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.086063][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.088681][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.099253][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.106302][ T5601] team0: Port device team_slave_0 added
[   57.108901][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.111970][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.121675][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.127646][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.129915][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.139910][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.145518][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.147773][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.157529][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.164118][ T5601] team0: Port device team_slave_1 added
[   57.200258][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.202872][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.212479][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.239139][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.242090][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.252284][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.289539][ T5592] hsr_slave_0: entered promiscuous mode
[   57.293086][ T5592] hsr_slave_1: entered promiscuous mode
[   57.299117][ T5598] hsr_slave_0: entered promiscuous mode
[   57.302525][ T5598] hsr_slave_1: entered promiscuous mode
[   57.305069][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[   57.307356][ T5598] Cannot create hsr debugfs directory
[   57.365933][ T5601] hsr_slave_0: entered promiscuous mode
[   57.368533][ T5601] hsr_slave_1: entered promiscuous mode
[   57.371671][ T5601] debugfs: 'hsr0' already exists in 'hsr'
[   57.373920][ T5601] Cannot create hsr debugfs directory
[   57.590536][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.605284][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.609504][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.618364][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.647072][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.653470][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.661897][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.666285][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.713763][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.718068][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.735601][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.742036][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.824405][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.837162][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.853843][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   57.873002][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.875463][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.886748][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   57.901219][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.903575][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.914024][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.916589][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.934233][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.936519][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.976993][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.023309][ T5601] 8021q: adding VLAN 0 to HW filter on device team0
[   58.036938][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.039826][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.058445][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.061455][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.122288][   T56] Bluetooth: hci0: command tx timeout
[   58.200624][   T56] Bluetooth: hci1: command tx timeout
[   58.216464][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.268734][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.276753][ T5598] veth0_vlan: entered promiscuous mode
[   58.280129][   T56] Bluetooth: hci2: command tx timeout
[   58.291561][ T5598] veth1_vlan: entered promiscuous mode
[   58.315410][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.325401][ T5598] veth0_macvtap: entered promiscuous mode
[   58.329307][ T5598] veth1_macvtap: entered promiscuous mode
[   58.335334][ T5592] veth0_vlan: entered promiscuous mode
[   58.339598][ T5592] veth1_vlan: entered promiscuous mode
[   58.363750][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.375168][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.383707][ T5592] veth0_macvtap: entered promiscuous mode
[   58.389857][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.394376][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.397439][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.401612][ T5592] veth1_macvtap: entered promiscuous mode
[   58.413705][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.428372][ T5601] veth0_vlan: entered promiscuous mode
[   58.443317][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.454511][ T5601] veth1_vlan: entered promiscuous mode
[   58.457950][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.473260][ T5649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.481968][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.488476][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.493790][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.504980][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.507986][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.519778][ T5601] veth0_macvtap: entered promiscuous mode
[   58.545153][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.553121][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.557382][ T5601] veth1_macvtap: entered promiscuous mode
[   58.580620][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.583066][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.609528][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.613862][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.618045][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.635527][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.642215][ T5598] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.655324][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.660961][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.664496][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.670181][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.775482][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.792423][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.821536][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.824958][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.005686][ T5714] loop0: detected capacity change from 0 to 2048
[   59.044905][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.049667][ T5714] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.103101][ T5592] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.140213][ T5725] netlink: 'syz.1.8': attribute type 1 has an invalid length.
[   59.202758][ T5732] netlink: 'syz.1.8': attribute type 10 has an invalid length.
[   59.205723][ T5732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.209003][ T5732] dummy0: entered promiscuous mode
[   59.253963][ T5734] loop0: detected capacity change from 0 to 1024
[   59.256943][ T5734] EXT4-fs: Ignoring removed i_version option
[   59.258948][ T5734] EXT4-fs: inline encryption not supported
[   59.267439][ T5734] EXT4-fs (loop0): Test dummy encryption mode enabled
[   59.279104][ T5734] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled
[   59.306103][ T5734] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.12: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   59.318388][ T5740] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure
[   59.323778][ T5734] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[   59.325032][ T5734] EXT4-fs error (device loop0): ext4_quota_enable:7195: comm syz.0.12: Bad quota inode: 4, type: 1
[   59.331291][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   59.331541][    C0] EXT4-fs (loop0): initial error at time 1785565549: ext4_ext_check_inode:521: inode 4
[   59.331561][    C0] EXT4-fs (loop0): last error at time 1785565549: ext4_ext_check_inode:521: inode 4
[   59.346750][ T5734] loop0: lost filesystem error report for type 5 error -117
[   59.346881][ T5734] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   59.376366][ T5734] EXT4-fs (loop0): mount failed
[   59.554380][ T5759] loop2: detected capacity change from 0 to 512
[   59.592038][ T5759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.595942][ T5759] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.603438][ T5759] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[   59.614259][ T5759] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   59.617153][ T5759] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.23: Failed to acquire dquot type 0
[   59.625069][ T5758] loop0: detected capacity change from 0 to 4096
[   59.633137][ T5759] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[   59.636712][ T5759] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   59.666669][ T5759] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.23: Failed to acquire dquot type 0
[   59.674050][ T5766] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   59.678450][ T5765] loop1: detected capacity change from 0 to 128
[   59.684269][ T5767] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[   59.686957][ T5765] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.688397][ T5767] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[   59.693445][ T5765] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   59.723566][ T5767] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.23: Failed to acquire dquot type 0
[   59.730404][ T5765] syz.1.25 (pid 5765) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   59.774461][ T5601] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.781032][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.932606][ T5780] syzkaller1: entered promiscuous mode
[   59.934733][ T5780] syzkaller1: entered allmulticast mode
[   60.200140][   T56] Bluetooth: hci0: command tx timeout
[   60.202177][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.290220][   T56] Bluetooth: hci1: command tx timeout
[   60.357377][   T24] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00
[   60.361207][   T56] Bluetooth: hci2: command tx timeout
[   60.363382][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.366545][   T24] usb 2-1: Product: syz
[   60.368302][   T24] usb 2-1: Manufacturer: syz
[   60.370362][   T24] usb 2-1: SerialNumber: syz
[   60.384336][   T24] qcserial 2-1:1.0: Qualcomm USB modem converter detected
[   60.394039][   T24] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0
[   60.645064][ T5794] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0
[   60.648907][ T5794] qcserial 2-1:1.0: device disconnected
[   60.657917][ T5794] qcserial 2-1:1.0: Qualcomm USB modem converter detected
[   60.664437][ T5794] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0
[   61.014255][ T5796] binder: BC_ACQUIRE_RESULT not supported
[   61.016607][ T5796] binder: 5795:5796 ioctl c0306201 200000000100 returned -22
[   61.174659][ T5800] loop0: detected capacity change from 0 to 128
[   61.182260][ T5800] =======================================================
[   61.182260][ T5800] WARNING: The mand mount option has been deprecated and
[   61.182260][ T5800]          and is ignored by this kernel. Remove the mand
[   61.182260][ T5800]          option from the mount to silence this warning.
[   61.182260][ T5800] =======================================================
[   61.205200][ T5800] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   61.209560][ T5800] hpfs: filesystem error: improperly stopped
[   61.213064][ T5800] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   61.216056][ T5800] hpfs: You really don't want any checks? You are crazy...
[   61.218413][ T5800] hpfs: Code page index out of array
[   61.220633][ T5800] hpfs: code page support is disabled
[   61.223021][ T5800] hpfs: hpfs_map_4sectors(): unaligned read
[   61.225495][ T5800] hpfs: hpfs_map_4sectors(): unaligned read
[   61.228277][ T5800] hpfs: filesystem error: unable to find root dir
[   61.530065][  T866] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   61.592800][ T5060] usb 2-1: USB disconnect, device number 2
[   61.603010][ T5060] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0
[   61.607233][ T5060] qcserial 2-1:1.0: device disconnected
[   61.680140][  T866] usb 1-1: Using ep0 maxpacket: 32
[   61.683700][  T866] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[   61.686752][  T866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   61.691484][  T866] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   61.694864][  T866] usb 1-1: config 0 has no interface number 1
[   61.697346][  T866] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   61.704506][  T866] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27
[   61.707944][  T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.711213][  T866] usb 1-1: Product: syz
[   61.712966][  T866] usb 1-1: Manufacturer: syz
[   61.714745][  T866] usb 1-1: SerialNumber: syz
[   61.718669][  T866] usb 1-1: config 0 descriptor??
[   61.727594][  T866] pwc: Logitech QuickCam Pro 3000 USB webcam detected.
[   61.927918][  T866] pwc: Failed to set LED on/off time (-71)
[   61.931499][  T866] pwc: send_video_command error -71
[   61.933506][  T866] pwc: Failed to set video mode VGA@30 fps; return code = -71
[   61.936032][  T866] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[   61.939700][  T866] usb 1-1: USB disconnect, device number 2
[   62.178545][ T5806] loop1: detected capacity change from 0 to 64
[   62.280296][   T56] Bluetooth: hci0: command tx timeout
[   62.360189][   T56] Bluetooth: hci1: command tx timeout
[   62.440174][   T56] Bluetooth: hci2: command tx timeout
[   62.461132][ T5060] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   62.610531][ T5060] usb 2-1: Using ep0 maxpacket: 32
[   62.614558][ T5060] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[   62.617199][ T5060] usb 2-1: config 0 has no interface number 0
[   62.619128][ T5060] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   62.623082][ T5060] usb 2-1: config 0 interface 89 has no altsetting 0
[   62.627711][ T5060] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[   62.631502][ T5060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.634050][ T5060] usb 2-1: Product: syz
[   62.635429][ T5060] usb 2-1: Manufacturer: syz
[   62.637022][ T5060] usb 2-1: SerialNumber: syz
[   62.640138][ T5060] usb 2-1: config 0 descriptor??
[   62.646032][ T5060] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[   62.649117][ T5060] em28xx 2-1:0.89: Video interface 89 found:
[   62.820122][   T33] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   62.970115][   T33] usb 1-1: Using ep0 maxpacket: 16
[   62.974091][   T33] usb 1-1: config 6 has an invalid interface number: 251 but max is 0
[   62.977131][   T33] usb 1-1: config 6 has no interface number 0
[   62.979256][   T33] usb 1-1: config 6 interface 251 altsetting 1 endpoint 0x3 has an invalid bInterval 56, changing to 9
[   62.984237][   T33] usb 1-1: config 6 interface 251 has no altsetting 0
[   62.989480][   T33] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=e7.fb
[   62.993447][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.996544][   T33] usb 1-1: Product: syz
[   62.998359][   T33] usb 1-1: Manufacturer: syz
[   63.001279][   T33] usb 1-1: SerialNumber: syz
[   63.215698][   T33] smsc95xx 1-1:6.251 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   63.221372][   T33] smsc95xx 1-1:6.251: probe with driver smsc95xx failed with error -22
[   63.226030][   T33] usb 1-1: USB disconnect, device number 3
[   63.254477][ T5060] em28xx 2-1:0.89: chip ID is em2884
[   63.439521][   T34] audit: type=1400 audit(1785565554.023:2): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=5832 comm="syz.2.56"
[   63.466773][ T5835] loop2: detected capacity change from 0 to 512
[   63.476222][ T5835] EXT4-fs (loop2): invalid first ino: 0
[   63.523094][ T5060] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[   63.525681][ T5060] em28xx 2-1:0.89: board has no eeprom
[   63.590531][ T5060] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[   63.593048][ T5060] em28xx 2-1:0.89: analog set to bulk mode.
[   63.602158][ T5060] usb 2-1: USB disconnect, device number 3
[   63.604529][ T5060] em28xx 2-1:0.89: Disconnecting em28xx
[   63.607280][  T866] em28xx 2-1:0.89: Registering V4L2 extension
[   63.638285][  T866] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[   63.643542][  T866] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[   63.646390][  T866] em28xx 2-1:0.89: No AC97 audio processor
[   63.663044][  T866] usb 2-1: Decoder not found
[   63.664674][  T866] em28xx 2-1:0.89: failed to create media graph
[   63.666634][  T866] em28xx 2-1:0.89: V4L2 device video103 deregistered
[   63.675916][  T866] em28xx 2-1:0.89: Registering snapshot button...
[   63.679012][  T866] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input4
[   63.685346][  T866] em28xx 2-1:0.89: Remote control support is not available for this card.
[   63.688312][ T5060] em28xx 2-1:0.89: Closing input extension
[   63.690818][ T5060] em28xx 2-1:0.89: Deregistering snapshot button
[   63.691020][ T5846] loop2: detected capacity change from 0 to 1024
[   63.714244][ T5060] em28xx 2-1:0.89: Freeing device
[   63.718318][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   63.724694][ T5846] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.749708][ T5846] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.62: bg 0: block 112: padding at end of block bitmap is not set
[   63.773270][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   64.010922][   T34] audit: type=1326 audit(1785565554.603:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.1.71" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4adf9e019 code=0x7ffc0000
[   64.035913][   T34] audit: type=1326 audit(1785565554.603:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.1.71" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4adf9e019 code=0x7ffc0000
[   64.048471][   T34] audit: type=1326 audit(1785565554.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.1.71" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4adf9e019 code=0x7ffc0000
[   64.106043][ T5874] loop1: detected capacity change from 0 to 512
[   64.110137][ T5701] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   64.126381][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.131434][ T5874] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.282570][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.286572][ T5701] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   64.293280][ T5701] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[   64.296127][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.299264][ T5701] usb 1-1: Product: syz
[   64.300985][ T5701] usb 1-1: Manufacturer: syz
[   64.303041][ T5701] usb 1-1: SerialNumber: syz
[   64.309315][ T5701] usbtmc 1-1:1.0: bulk endpoints not found
[   64.314156][ T5701] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5
[   64.360214][ T5595] Bluetooth: hci0: command tx timeout
[   64.469205][ T5595] Bluetooth: hci1: command tx timeout
[   64.517880][ T5060] usb 1-1: USB disconnect, device number 4
[   64.521028][ T5595] Bluetooth: hci2: command tx timeout
[   64.998400][ T5601] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.173038][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.176251][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.179078][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.183506][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.186451][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.189247][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'.
[   65.193114][ T5893] Zero length message leads to an empty skb
[   65.210080][ T5060] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   65.387503][ T5060] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[   65.394596][ T5060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.397077][ T5060] usb 3-1: Product: syz
[   65.468442][ T5060] usb 3-1: Manufacturer: syz
[   65.474957][ T5060] usb 3-1: SerialNumber: syz
[   65.490312][ T5060] usb 3-1: config 0 descriptor??
[   65.496970][ T5060] usb 3-1: selecting invalid altsetting 1
[   65.501232][ T5060] technisat-usb2: could not set alternate setting to 0
[   65.798301][ T5060] technisat-usb2: firmware version: 0.0
[   65.801846][ T5060] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[   65.981172][ T5060] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   65.987636][ T5060] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[   65.991832][ T5060] usb 3-1: USB disconnect, device number 2
[   66.541330][ T5929] netlink: 'syz.1.96': attribute type 23 has an invalid length.
[   66.620045][ T5595] Bluetooth: hci2: command 0x0405 tx timeout
[   66.850397][ T5921] loop0: detected capacity change from 0 to 131072
[   66.854822][ T5921] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[   66.857518][ T5921] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   66.862941][ T5921] F2FS-fs (loop0): invalid crc value
[   66.917867][ T5921] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   66.928643][ T5921] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   66.930201][ T5701] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   66.931630][ T5921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   67.113097][ T5701] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[   67.115834][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[   67.120059][ T5701] usb 2-1: Product: syz
[   67.128608][ T5701] usb 2-1: Manufacturer: syz
[   67.130658][   T33] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   67.133632][ T5701] usb 2-1: SerialNumber: syz
[   67.145554][ T5701] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[   67.209312][ T5949] loop0: detected capacity change from 0 to 128
[   67.215565][ T5949] FAT-fs (loop0): bogus number of reserved sectors
[   67.218191][ T5949] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   67.222834][ T5949] FAT-fs (loop0): Can't find a valid FAT filesystem
[   67.302278][   T33] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   67.304946][   T33] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   67.308287][   T33] usb 3-1: config 220 has no interface number 2
[   67.310847][   T33] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   67.316132][   T33] usb 3-1: config 220 interface 0 has no altsetting 0
[   67.318832][   T33] usb 3-1: config 220 interface 76 has no altsetting 0
[   67.321392][   T33] usb 3-1: config 220 interface 1 has no altsetting 0
[   67.325951][   T33] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   67.329102][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.332028][   T33] usb 3-1: Product: syz
[   67.333385][   T33] usb 3-1: Manufacturer: syz
[   67.334874][   T33] usb 3-1: SerialNumber: syz
[   67.345300][ T5701] vp7045: USB control message 'out' went wrong.
[   67.347352][ T5701] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   67.353505][ T5701] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[   67.360152][ T5701] usb 2-1: USB disconnect, device number 4
[   67.398135][ T5949] loop0: detected capacity change from 0 to 32768
[   67.423807][ T5949] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.440747][ T5949] XFS (loop0): Ending clean mount
[   67.462907][ T5592] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.549106][   T33] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   67.551683][   T33] uvcvideo 3-1:220.0: No valid video chain found.
[   67.553846][   T33] usb 3-1: selecting invalid altsetting 0
[   67.565160][   T33] usb 3-1: selecting invalid altsetting 0
[   67.567554][   T33] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   67.573562][   T33] usb 3-1: USB disconnect, device number 3
[   68.195979][ T5980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'.
[   68.251761][ T5983] loop2: detected capacity change from 0 to 1024
[   68.274736][ T5983] EXT4-fs: Ignoring removed nomblk_io_submit option
[   68.296317][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   68.317134][ T5983] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.330800][ T5983] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.115: bg 0: block 112: padding at end of block bitmap is not set
[   68.366058][ T5598] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   68.584516][ T6003] loop1: detected capacity change from 0 to 256
[   68.587507][ T6003] exfat: Deprecated parameter 'utf8'
[   68.589184][ T6003] exfat: Deprecated parameter 'namecase'
[   68.615833][ T6003] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[   68.692946][ T6011] loop1: detected capacity change from 0 to 2048
[   68.696589][ T6011] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   68.707092][ T6012] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.749852][ T6014] input: syz1 as /devices/virtual/input/input6
[   69.158043][ T6017] loop2: detected capacity change from 0 to 32768
[   69.179525][ T6017] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 69 has invalid tree depth 2048 in extent list
[   69.186017][ T6017] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   69.189234][ T6017] OCFS2: File system is now read-only.
[   69.191404][ T6017] (syz.2.129,6017,0):ocfs2_find_leaf:1949 ERROR: status = -30
[   69.194042][ T6017] (syz.2.129,6017,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   69.197077][ T6017] (syz.2.129,6017,0):ocfs2_get_clusters:634 ERROR: status = -30
[   69.199393][ T6017] (syz.2.129,6017,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[   69.202312][ T6017] (syz.2.129,6017,0):ocfs2_map_slot_buffers:399 ERROR: status = -30
[   69.204766][ T6017] (syz.2.129,6017,0):ocfs2_init_slot_info:448 ERROR: status = -30
[   69.207320][ T6017] (syz.2.129,6017,0):ocfs2_initialize_super:2222 ERROR: status = -30
[   69.211473][ T6017] (syz.2.129,6017,0):ocfs2_fill_super:1177 ERROR: status = -30
[   69.394707][ T6031] loop1: detected capacity change from 0 to 256
[   69.397756][ T6031] vfat: Deprecated parameter 'posix'
[   69.403416][ T6025] configfs-gadget.g1 gadget.0: HOST MAC 36:87:70:69:ff:9d
[   69.405742][ T6025] configfs-gadget.g1 gadget.0: MAC 1e:d0:a4:53:ac:3c
[   69.409497][ T6031] FAT-fs: "posix" option is obsolete, not supported now
[   69.670530][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   69.847942][   T24] usb 1-1: Dual-Role OTG device on HNP port
[   69.870732][   T24] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.00
[   69.886732][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.900576][    C1] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:591
[   69.903774][    C1] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 5598, name: syz-executor
[   69.906704][    C1] preempt_count: 103, expected: 0
[   69.908254][    C1] RCU nest depth: 1, expected: 0
[   69.909749][    C1] 3 locks held by syz-executor/5598:
[   69.911320][    C1]  #0: ffffffff8e75d000 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x95/0x2380
[   69.914222][    C1]  #1: ffff8881ba716850 (&gi->spinlock){..-.}-{3:3}, at: configfs_composite_setup+0x61/0x100
[   69.917253][    C1]  #2: ffff8881ba7166e8 (&cdev->lock){..-.}-{3:3}, at: composite_setup+0x1d9a/0x3460
[   69.920431][    C1] irq event stamp: 332239
[   69.921940][    C1] hardirqs last  enabled at (332238): [<ffffffff8bb152c0>] _raw_spin_unlock_irqrestore+0x30/0x80
[   69.925120][    C1] hardirqs last disabled at (332239): [<ffffffff8bb1511a>] _raw_spin_lock_irqsave+0x1a/0x60
[   69.928208][    C1] softirqs last  enabled at (331524): [<ffffffff816c86cb>] fpu__restore_sig+0x55b/0x1250
[   69.931401][    C1] softirqs last disabled at (332235): [<ffffffff81878e1f>] __irq_exit_rcu+0x5f/0x150
[   69.934763][    C1] Preemption disabled at:
[   69.934768][    C1] [<ffffffff82234047>] kmem_cache_alloc_noprof+0xc7/0x650
[   69.938733][    C1] CPU: 1 UID: 0 PID: 5598 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   69.938746][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.938751][    C1] Call Trace:
[   69.938757][    C1]  <IRQ>
[   69.938760][    C1]  dump_stack_lvl+0xe8/0x150
[   69.938771][    C1]  __might_resched+0x378/0x4d0
[   69.938780][    C1]  ? kmem_cache_alloc_noprof+0xc7/0x650
[   69.938790][    C1]  __mutex_lock+0x116/0x12d0
[   69.938802][    C1]  ? ncm_set_alt+0x153/0xba0
[   69.938809][    C1]  ? __queue_work+0x1ab/0xfa0
[   69.938818][    C1]  ? __pfx___mutex_lock+0x10/0x10
[   69.938829][    C1]  ? rcu_is_watching+0x15/0xb0
[   69.938838][    C1]  ? usb_ep_enable+0x238/0x4b0
[   69.938846][    C1]  ncm_set_alt+0x153/0xba0
[   69.938853][    C1]  ? usb_gadget_set_state+0x12c/0x300
[   69.938862][    C1]  set_config+0x749/0x1160
[   69.938873][    C1]  composite_setup+0x1da5/0x3460
[   69.938884][    C1]  configfs_composite_setup+0xc7/0x100
[   69.938893][    C1]  dummy_timer+0x2e72/0x4b60
[   69.938905][    C1]  ? __lock_acquire+0x683/0x2cd0
[   69.938917][    C1]  ? __lock_acquire+0x683/0x2cd0
[   69.938926][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   69.938937][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   69.938946][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   69.938953][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   69.938961][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   69.938968][    C1]  __hrtimer_run_queues+0x527/0xc90
[   69.938981][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   69.938988][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[   69.938997][    C1]  hrtimer_run_softirq+0x182/0x580
[   69.939006][    C1]  handle_softirqs+0x225/0x870
[   69.939015][    C1]  ? __irq_exit_rcu+0x5f/0x150
[   69.939024][    C1]  __irq_exit_rcu+0x5f/0x150
[   69.939031][    C1]  irq_exit_rcu+0x9/0x30
[   69.939037][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   69.939046][    C1]  </IRQ>
[   69.939048][    C1]  <TASK>
[   69.939051][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   69.939058][    C1] RIP: 0010:debug_smp_processor_id+0x0/0x20
[   69.939068][    C1] Code: e0 bc 82 8e 4c 89 f6 e8 1e b3 53 f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c7 60 ad 28 8c 48 c7 c6 a0 ad 28 8c eb 1c 66 66
[   69.939073][    C1] RSP: 0018:ffffc900064ff790 EFLAGS: 00000283
[   69.939080][    C1] RAX: 0000000000000001 RBX: ffffc900064ff8d8 RCX: 0000000080000001
[   69.939084][    C1] RDX: ffffc900064ff901 RSI: ffffffff8176ca75 RDI: ffffffff8e75d000
[   69.939088][    C1] RBP: ffffc900064ffe01 R08: ffffc900064ffe70 R09: 0000000000000000
[   69.939092][    C1] R10: ffffc900064ff918 R11: fffff52000c9ff25 R12: ffffc900064f8000
[   69.939123][    C1] R13: ffffffff8176ca75 R14: ffffffff8e75d000 R15: ffffc900064ffe80
[   69.939133][    C1]  ? unwind_next_frame+0x95/0x2380
[   69.939149][    C1]  ? unwind_next_frame+0x95/0x2380
[   69.939159][    C1]  rcu_is_watching+0x15/0xb0
[   69.939167][    C1]  lock_release+0x4b/0x3d0
[   69.939174][    C1]  ? deref_stack_reg+0x18e/0x220
[   69.939186][    C1]  ? unwind_next_frame+0x95/0x2380
[   69.939198][    C1]  unwind_next_frame+0x1a90/0x2380
[   69.939214][    C1]  ? sock_alloc_file+0xb8/0x2e0
[   69.939228][    C1]  ? unwind_next_frame+0x95/0x2380
[   69.939242][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   69.939257][    C1]  arch_stack_walk+0x11b/0x150
[   69.939275][    C1]  ? __sys_socket+0x13f/0x1b0
[   69.939285][    C1]  ? security_file_alloc+0x34/0x310
[   69.939301][    C1]  stack_trace_save+0xa9/0x100
[   69.939315][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[   69.939330][    C1]  ? alloc_empty_file+0x55/0x1d0
[   69.939347][    C1]  kasan_save_track+0x3e/0x80
[   69.939362][    C1]  ? kasan_save_track+0x3e/0x80
[   69.939374][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[   69.939384][    C1]  ? kmem_cache_alloc_noprof+0x2b8/0x650
[   69.939397][    C1]  ? security_file_alloc+0x34/0x310
[   69.939410][    C1]  ? init_file+0x90/0x2b0
[   69.939421][    C1]  ? alloc_empty_file+0x6e/0x1d0
[   69.939432][    C1]  ? alloc_file_pseudo+0x155/0x240
[   69.939443][    C1]  ? sock_alloc_file+0xb8/0x2e0
[   69.939482][    C1]  __kasan_slab_alloc+0x6c/0x80
[   69.939494][    C1]  kmem_cache_alloc_noprof+0x2b8/0x650
[   69.939508][    C1]  ? security_file_alloc+0x34/0x310
[   69.939521][    C1]  ? rcu_is_watching+0x15/0xb0
[   69.939532][    C1]  ? kmem_cache_alloc_noprof+0x156/0x650
[   69.939548][    C1]  security_file_alloc+0x34/0x310
[   69.939564][    C1]  init_file+0x90/0x2b0
[   69.939579][    C1]  alloc_empty_file+0x6e/0x1d0
[   69.939592][    C1]  alloc_file_pseudo+0x155/0x240
[   69.939607][    C1]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   69.939618][    C1]  ? alloc_fd+0x62e/0x6a0
[   69.939633][    C1]  sock_alloc_file+0xb8/0x2e0
[   69.939646][    C1]  ? __sys_socket+0x12b/0x1b0
[   69.939658][    C1]  __sys_socket+0x13f/0x1b0
[   69.939668][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.939678][    C1]  __x64_sys_socket+0x7a/0x90
[   69.939688][    C1]  do_syscall_64+0x170/0xf80
[   69.939700][    C1]  ? trace_irq_disable+0x3b/0x150
[   69.939715][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.939725][    C1] RIP: 0033:0x7f917459f887
[   69.939736][    C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   69.939749][    C1] RSP: 002b:00007ffc05dc8748 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[   69.939760][    C1] RAX: ffffffffffffffda RBX: 00007f91747ec460 RCX: 00007f917459f887
[   69.939766][    C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[   69.939772][    C1] RBP: 00007ffc05dc8e6c R08: 0000000000000000 R09: 0000000000000000
[   69.939777][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000034
[   69.939782][    C1] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffc05dc8ec0
[   69.939799][    C1]  </TASK>
[   69.939804][    C1] 
[   70.142568][    C1] =============================
[   70.144435][    C1] [ BUG: Invalid wait context ]
[   70.146296][    C1] syzkaller #0 Tainted: G        W          
[   70.148592][    C1] -----------------------------
[   70.150454][    C1] syz-executor/5598 is trying to lock:
[   70.152533][    C1] ffff8881bbf15a18 (&opts->lock){+.+.}-{4:4}, at: ncm_set_alt+0x153/0xba0
[   70.155778][    C1] other info that might help us debug this:
[   70.157969][    C1] context-{3:3}
[   70.159348][    C1] 3 locks held by syz-executor/5598:
[   70.161339][    C1]  #0: ffffffff8e75d000 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x95/0x2380
[   70.164936][    C1]  #1: ffff8881ba716850 (&gi->spinlock){..-.}-{3:3}, at: configfs_composite_setup+0x61/0x100
[   70.168614][    C1]  #2: ffff8881ba7166e8 (&cdev->lock){..-.}-{3:3}, at: composite_setup+0x1d9a/0x3460
[   70.171550][    C1] stack backtrace:
[   70.172743][    C1] CPU: 1 UID: 0 PID: 5598 Comm: syz-executor Tainted: G        W           syzkaller #0 PREEMPT(full) 
[   70.172753][    C1] Tainted: [W]=WARN
[   70.172756][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.172760][    C1] Call Trace:
[   70.172765][    C1]  <IRQ>
[   70.172768][    C1]  dump_stack_lvl+0xe8/0x150
[   70.172777][    C1]  __lock_acquire+0xe39/0x2cd0
[   70.172785][    C1]  ? __show_trace_log_lvl+0x478/0x550
[   70.172796][    C1]  lock_acquire+0xf0/0x2e0
[   70.172802][    C1]  ? ncm_set_alt+0x153/0xba0
[   70.172809][    C1]  ? __might_resched+0x378/0x4d0
[   70.172816][    C1]  __mutex_lock+0x199/0x12d0
[   70.172825][    C1]  ? ncm_set_alt+0x153/0xba0
[   70.172831][    C1]  ? ncm_set_alt+0x153/0xba0
[   70.172837][    C1]  ? __queue_work+0x1ab/0xfa0
[   70.172845][    C1]  ? __pfx___mutex_lock+0x10/0x10
[   70.172854][    C1]  ? rcu_is_watching+0x15/0xb0
[   70.172861][    C1]  ? usb_ep_enable+0x238/0x4b0
[   70.172868][    C1]  ncm_set_alt+0x153/0xba0
[   70.172874][    C1]  ? usb_gadget_set_state+0x12c/0x300
[   70.172881][    C1]  set_config+0x749/0x1160
[   70.172889][    C1]  composite_setup+0x1da5/0x3460
[   70.172897][    C1]  configfs_composite_setup+0xc7/0x100
[   70.172904][    C1]  dummy_timer+0x2e72/0x4b60
[   70.172914][    C1]  ? __lock_acquire+0x683/0x2cd0
[   70.172921][    C1]  ? __lock_acquire+0x683/0x2cd0
[   70.172928][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   70.172937][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   70.172944][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   70.172951][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   70.172958][    C1]  ? __pfx_dummy_timer+0x10/0x10
[   70.172965][    C1]  __hrtimer_run_queues+0x527/0xc90
[   70.172975][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   70.172981][    C1]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[   70.172988][    C1]  hrtimer_run_softirq+0x182/0x580
[   70.172996][    C1]  handle_softirqs+0x225/0x870
[   70.173003][    C1]  ? __irq_exit_rcu+0x5f/0x150
[   70.173010][    C1]  __irq_exit_rcu+0x5f/0x150
[   70.173016][    C1]  irq_exit_rcu+0x9/0x30
[   70.173022][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   70.173031][    C1]  </IRQ>
[   70.173033][    C1]  <TASK>
[   70.173035][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   70.173042][    C1] RIP: 0010:debug_smp_processor_id+0x0/0x20
[   70.173051][    C1] Code: e0 bc 82 8e 4c 89 f6 e8 1e b3 53 f9 e9 67 ff ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 c7 c7 60 ad 28 8c 48 c7 c6 a0 ad 28 8c eb 1c 66 66
[   70.173056][    C1] RSP: 0018:ffffc900064ff790 EFLAGS: 00000283
[   70.173062][    C1] RAX: 0000000000000001 RBX: ffffc900064ff8d8 RCX: 0000000080000001
[   70.173067][    C1] RDX: ffffc900064ff901 RSI: ffffffff8176ca75 RDI: ffffffff8e75d000
[   70.173097][    C1] RBP: ffffc900064ffe01 R08: ffffc900064ffe70 R09: 0000000000000000
[   70.173105][    C1] R10: ffffc900064ff918 R11: fffff52000c9ff25 R12: ffffc900064f8000
[   70.173112][    C1] R13: ffffffff8176ca75 R14: ffffffff8e75d000 R15: ffffc900064ffe80
[   70.173120][    C1]  ? unwind_next_frame+0x95/0x2380
[   70.173129][    C1]  ? unwind_next_frame+0x95/0x2380
[   70.173138][    C1]  rcu_is_watching+0x15/0xb0
[   70.173145][    C1]  lock_release+0x4b/0x3d0
[   70.173151][    C1]  ? deref_stack_reg+0x18e/0x220
[   70.173158][    C1]  ? unwind_next_frame+0x95/0x2380
[   70.173166][    C1]  unwind_next_frame+0x1a90/0x2380
[   70.173174][    C1]  ? sock_alloc_file+0xb8/0x2e0
[   70.173183][    C1]  ? unwind_next_frame+0x95/0x2380
[   70.173190][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[   70.173199][    C1]  arch_stack_walk+0x11b/0x150
[   70.173208][    C1]  ? __sys_socket+0x13f/0x1b0
[   70.173216][    C1]  ? security_file_alloc+0x34/0x310
[   70.173225][    C1]  stack_trace_save+0xa9/0x100
[   70.173233][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[   70.173241][    C1]  ? alloc_empty_file+0x55/0x1d0
[   70.173249][    C1]  kasan_save_track+0x3e/0x80
[   70.173258][    C1]  ? kasan_save_track+0x3e/0x80
[   70.173266][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[   70.173271][    C1]  ? kmem_cache_alloc_noprof+0x2b8/0x650
[   70.173279][    C1]  ? security_file_alloc+0x34/0x310
[   70.173286][    C1]  ? init_file+0x90/0x2b0
[   70.173292][    C1]  ? alloc_empty_file+0x6e/0x1d0
[   70.173299][    C1]  ? alloc_file_pseudo+0x155/0x240
[   70.173305][    C1]  ? sock_alloc_file+0xb8/0x2e0
[   70.173318][    C1]  __kasan_slab_alloc+0x6c/0x80
[   70.173324][    C1]  kmem_cache_alloc_noprof+0x2b8/0x650
[   70.173332][    C1]  ? security_file_alloc+0x34/0x310
[   70.173340][    C1]  ? rcu_is_watching+0x15/0xb0
[   70.173346][    C1]  ? kmem_cache_alloc_noprof+0x156/0x650
[   70.173355][    C1]  security_file_alloc+0x34/0x310
[   70.173363][    C1]  init_file+0x90/0x2b0
[   70.173370][    C1]  alloc_empty_file+0x6e/0x1d0
[   70.173377][    C1]  alloc_file_pseudo+0x155/0x240
[   70.173384][    C1]  ? __pfx_alloc_file_pseudo+0x10/0x10
[   70.173392][    C1]  ? alloc_fd+0x62e/0x6a0
[   70.173399][    C1]  sock_alloc_file+0xb8/0x2e0
[   70.173407][    C1]  ? __sys_socket+0x12b/0x1b0
[   70.173412][    C1]  __sys_socket+0x13f/0x1b0
[   70.173418][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.173424][    C1]  __x64_sys_socket+0x7a/0x90
[   70.173429][    C1]  do_syscall_64+0x170/0xf80
[   70.173437][    C1]  ? trace_irq_disable+0x3b/0x150
[   70.173446][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.173452][    C1] RIP: 0033:0x7f917459f887
[   70.173458][    C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.173463][    C1] RSP: 002b:00007ffc05dc8748 EFLAGS: 00000206 ORIG_RAX: 0000000000000029
[   70.173469][    C1] RAX: ffffffffffffffda RBX: 00007f91747ec460 RCX: 00007f917459f887
[   70.173473][    C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002
[   70.173477][    C1] RBP: 00007ffc05dc8e6c R08: 0000000000000000 R09: 0000000000000000
[   70.173480][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000034
[   70.173484][    C1] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffc05dc8ec0
[   70.173490][    C1]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   70.506170][   T24] cdc_ncm 1-1:1.0: MAC-Address: 36:87:70:69:ff:9d
[   70.533279][   T24] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 36:87:70:69:ff:9d
[   70.685673][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.787868][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.846080][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.884760][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.944324][   T12] bridge_slave_1: left allmulticast mode
[   70.946464][   T12] bridge_slave_1: left promiscuous mode
[   70.948809][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.953738][   T12] bridge_slave_0: left allmulticast mode
[   70.956044][   T12] bridge_slave_0: left promiscuous mode
[   70.957893][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.060458][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.065132][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.069196][   T12] bond0 (unregistering): Released all slaves
[   71.275203][   T12] hsr_slave_0: left promiscuous mode
[   71.277821][   T12] hsr_slave_1: left promiscuous mode
[   71.281252][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.284110][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.287462][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.293894][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.302729][   T12] veth1_macvtap: left promiscuous mode
[   71.304870][   T12] veth0_macvtap: left promiscuous mode
[   71.307199][   T12] veth1_vlan: left promiscuous mode
[   71.312981][   T12] veth0_vlan: left promiscuous mode
[   71.375892][   T12] team0 (unregistering): Port device team_slave_1 removed
[   71.380092][   T12] team0 (unregistering): Port device team_slave_0 removed
[   71.639358][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.711225][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.755459][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.783420][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.858150][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.913096][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.956688][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.000689][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.086274][   T12] bridge_slave_1: left allmulticast mode
[   72.088652][   T12] bridge_slave_1: left promiscuous mode
[   72.091834][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.095581][   T12] bridge_slave_0: left allmulticast mode
[   72.097841][   T12] bridge_slave_0: left promiscuous mode
[   72.099754][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.103569][   T12] bridge_slave_1: left allmulticast mode
[   72.105335][   T12] bridge_slave_1: left promiscuous mode
[   72.107142][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.110595][   T12] bridge_slave_0: left allmulticast mode
[   72.112464][   T12] bridge_slave_0: left promiscuous mode
[   72.114357][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.202145][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.210346][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.214416][   T12] bond0 (unregistering): Released all slaves
[   72.276507][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.281366][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.285557][   T12] bond0 (unregistering): Released all slaves
[   72.557836][   T12] hsr_slave_0: left promiscuous mode
[   72.561408][   T12] hsr_slave_1: left promiscuous mode
[   72.563558][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.566481][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.569489][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.572502][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.576994][   T12] hsr_slave_0: left promiscuous mode
[   72.579391][   T12] hsr_slave_1: left promiscuous mode
[   72.582290][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.584976][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.587974][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.591165][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.596700][   T12] veth1_macvtap: left promiscuous mode
[   72.598850][   T12] veth0_macvtap: left promiscuous mode
[   72.602369][   T12] veth1_vlan: left promiscuous mode
[   72.604484][   T12] veth0_vlan: left promiscuous mode
[   72.607066][   T12] veth1_macvtap: left promiscuous mode
[   72.609193][   T12] veth0_macvtap: left promiscuous mode
[   72.611495][   T12] veth1_vlan: left promiscuous mode
[   72.613683][   T12] veth0_vlan: left promiscuous mode
[   72.686224][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.697536][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.766287][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.778007][   T12] team0 (unregistering): Port device team_slave_0 removed
[   76.601203][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.603644][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
