last executing test programs:

4m17.170670892s ago: executing program 2 (id=340):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x290, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{}, 0x4, 0x1, 0x0, 0x0, "ee6a491530f05065"}}, 0x38}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000)

4m17.092070031s ago: executing program 2 (id=341):
mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', 0x0, 0x2000, 0x0)

4m17.091907054s ago: executing program 2 (id=342):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x18, 0x1411, 0x109, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0xfffffffffffffda1, 0x4b, 0x3b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)

4m17.09179151s ago: executing program 2 (id=343):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x1, 0xbc8, &(0x7f0000002380)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2001091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

4m16.998813311s ago: executing program 2 (id=345):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8fc0, 0x9f8c})

4m16.690921742s ago: executing program 2 (id=351):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x21, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @empty}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

4m16.656678912s ago: executing program 32 (id=351):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x21, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @empty}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)

2m44.637943097s ago: executing program 1 (id=1639):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x749})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1)

2m44.449453484s ago: executing program 1 (id=1641):
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fc1046", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3, [0xffff, 0xf]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20}}}}}}}}}, 0x0)

2m44.348053396s ago: executing program 1 (id=1643):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))

2m44.239123741s ago: executing program 1 (id=1644):
socket(0x10, 0x3, 0x0)
close(0x3)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
r1 = socket$kcm(0x2d, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x8040)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)

2m43.993402534s ago: executing program 1 (id=1645):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x36}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

2m43.569785057s ago: executing program 1 (id=1646):
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x410840, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
sendfile(r2, r2, 0x0, 0x7e78a6f1)
fcntl$addseals(r2, 0x409, 0xc)

2m43.482732655s ago: executing program 33 (id=1646):
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x410840, 0x1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
sendfile(r2, r2, 0x0, 0x7e78a6f1)
fcntl$addseals(r2, 0x409, 0xc)

2m20.827297549s ago: executing program 4 (id=1973):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

2m20.826925245s ago: executing program 4 (id=1974):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)

2m20.767024418s ago: executing program 4 (id=1975):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400100001a000308feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107170e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b00000000080001000100000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e00000005350000020001002000000000000000480003"], 0x140}}, 0x844)

2m20.766906971s ago: executing program 4 (id=1976):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x44}}, 0x0)

2m20.636547196s ago: executing program 4 (id=1979):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x98, &(0x7f0000000080)=ANY=[], 0xff, 0xa4, &(0x7f0000000ac0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1df)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x02\x00', 0x189141, 0x9)

2m20.584396051s ago: executing program 4 (id=1982):
r0 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c)
io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100), &(0x7f0000000240))
syz_io_uring_submit(r6, r2, r3, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

2m18.465711036s ago: executing program 3 (id=2001):
r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0x1, 0x40422)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0x4008, 0x29, 0x1002, 0x0, 0x0, 0x2, 0x2, 0x6}})

2m18.385154118s ago: executing program 3 (id=2002):
r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000005c0)='AQB+\x0fK9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\x0e\x00\x86 \x83\xe2\xd0,]G\xdaQI\xc0\xe1x\xd6\xf6\xb9%t\x19\xda\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2\x04\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x11\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2JlL\xb8\xa3Vq\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x0e`\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\xcd\n@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6b\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7', 0x0)

2m18.385014184s ago: executing program 3 (id=2003):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/auth_enable\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

2m18.287214406s ago: executing program 3 (id=2004):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1084cce0, 0x40, 0x73, 0x0, 0x1e3, 0x0, 0x0, 0x10, 0x2e}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x1a3a00, 0x181)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m18.187233285s ago: executing program 3 (id=2005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x800002, 0x10000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

2m17.946485507s ago: executing program 3 (id=2006):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200dfc907002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000000000002303be4ec7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

2m17.868319015s ago: executing program 34 (id=2006):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200dfc907002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000000000002303be4ec7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

2m5.346324283s ago: executing program 35 (id=1982):
r0 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x64)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c)
io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000100), &(0x7f0000000240))
syz_io_uring_submit(r6, r2, r3, &(0x7f00000000c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

2m1.626157836s ago: executing program 5 (id=2183):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000b80)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x2}, 0xe)

2m1.504311515s ago: executing program 5 (id=2185):
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x9, 0x1, 0x200, 0x63, 0x51, 0xffffffffffffffff, 0x71b8d33a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)

2m1.43526452s ago: executing program 5 (id=2187):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x803}}}, 0x7)

2m1.374283587s ago: executing program 5 (id=2189):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=00000000000000000770,mode=lfs,inline_data,fastboot,fsync_mode=strict,\x00iscard_unit=section,\x00'], 0x21, 0x5548, &(0x7f00000058c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='10', 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xffc9)

2m0.914096065s ago: executing program 5 (id=2201):
mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x46032, 0xffffffffffffffff, 0x100000000)
mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, &(0x7f00000001c0)=0x401, 0x400, 0x0)

2m0.284062686s ago: executing program 5 (id=2203):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000140)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000})

2m0.14936702s ago: executing program 36 (id=2203):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000140)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000})

1m13.126317654s ago: executing program 6 (id=2791):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m12.996072831s ago: executing program 6 (id=2792):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, <r4=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)

1m12.819247639s ago: executing program 6 (id=2793):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000041c0)={0x1}, 0x2)

1m12.818993715s ago: executing program 6 (id=2794):
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48)

1m12.749255124s ago: executing program 6 (id=2795):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

1m12.52646311s ago: executing program 6 (id=2796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)={0x14, 0x13, 0x1, 0x70bd29, 0x25dfdbfb, "", [@nested={0x4, 0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)

56.769418899s ago: executing program 37 (id=2796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)={0x14, 0x13, 0x1, 0x70bd29, 0x25dfdbfb, "", [@nested={0x4, 0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)

4.779717476s ago: executing program 0 (id=3534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000010018000000180034801400350069703665727370616e"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x80000)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x260, 0x17a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x8100}, 0x2800804c)

4.695309185s ago: executing program 0 (id=3537):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00227f000000"], 0x0}, 0x0)

3.381119208s ago: executing program 8 (id=3556):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)

3.381030068s ago: executing program 8 (id=3557):
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="d5289f8a010803000000000000000000030000050900010073797a31000000000900010073797a30000000001c000480080006400000000108000a4000000008080005400000000f0900010073797a3100000000090001007379"], 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x48040)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000003a000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

3.310196388s ago: executing program 8 (id=3558):
syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x20, 0xfa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5f40, 0x3, 0xfc}, {0x6, 0x24, 0x1a, 0x6, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x6, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x33, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0xfd, 0x7}}}}}}}]}}, &(0x7f00000010c0)={0x0, 0x0, 0xf, &(0x7f0000000b40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x1, 0x5, 0x6}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

3.01622782s ago: executing program 0 (id=3560):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
mmap$IORING_OFF_SQ_RING(0x0, 0xc00040, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2.92832795s ago: executing program 0 (id=3561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70ad28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x8014)

2.781244815s ago: executing program 0 (id=3562):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003300010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)

2.710989288s ago: executing program 0 (id=3563):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'wlan1\x00', {}, 0x26})
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7313}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000500)={0x2, @raw_data="177df10503033d16f4cb837f0e40acf1d91a7d3e3f72e9daa3cc63ab963a33dbab4ba9e6d4d14b661c5e5fc03fba082eb5bff0fe9a96762396c811ddc9c8e85b080129d996a8c60aa878a8c8f967e29abe64c4184dcd4d7981714aac7c12cd3fd74daa37627f348c7c79044c5d2d3577f39be5c22258ed8ccf109c3f07a0de3952174f7b06fef27e332d6776d9aa57ffa7aa3de0e0c46cf0395883f565330d0d65f515e2ef20d41426dcb59aea192500427de510cb0d8f3aaa8a6c0f7ddadad1550aeab7cbe3d10a"})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

961.230644ms ago: executing program 7 (id=3569):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc02000000000000000000000000000000000000000000000000000000000000fffd0003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000001d0000000000000000000000000000000f000000000000000000000000000000dd020000080000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000006c00000000000000ac1e0001000000000000000000000000000000000400ff00000000000000000000000000ac1e010100000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000135000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000200100000000000000000000000000000000000003020000000000000300000000000000fc00000000000000000000000000000100000000330000000200"], 0x23c}, 0x1, 0x0, 0x0, 0xc881}, 0x0)

899.686974ms ago: executing program 7 (id=3570):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x2, 0x0, [{0x3000, 0xe3, &(0x7f00000004c0)=""/227}, {0xa000, 0x80, &(0x7f00000005c0)=""/128}]})
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)

899.516294ms ago: executing program 7 (id=3571):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
writev(r0, &(0x7f00000009c0)=[{0x0, 0x30}, {&(0x7f0000000340)="47947adbd0bba08fa05aa82fad2ec2c842e9ef9e8be7abc56d000046f81f1da20fa7c28a0756deae87b6e2deb9dd0e485234820c", 0x34}, {&(0x7f0000000740)="9af2b1eee1148b765f0ceb4459974176bd2f5f01b241d03e2a25071cd522cddb9bffe328f62bdde7d40978e5ba9f5c350286e1bde616a7f6e20ebe53b81dbb993bcb29eca2885a1157eb4ebec227d4b26eafc78a5194b42c013dc911a24f3b175f1000", 0x63}], 0x3)

830.983114ms ago: executing program 7 (id=3572):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000000d5}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x5, 0x3, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

830.683449ms ago: executing program 7 (id=3573):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x8400}}, 0x44)
socket$nl_generic(0x10, 0x3, 0x10)

271.091764ms ago: executing program 8 (id=3574):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
process_madvise(r1, 0x0, 0x0, 0xe, 0x0)

270.764376ms ago: executing program 7 (id=3575):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace(0x4208, r0)
getpid()
getrlimit(0xb, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
keyctl$setperm(0x5, 0x0, 0x100000)
r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r4, 0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3)
msgget(0x2, 0x217)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0x40045010, &(0x7f0000000040)=0x5f)
ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000)

130.987357ms ago: executing program 8 (id=3576):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

0s ago: executing program 8 (id=3577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/153, 0x99}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f0000000840)=""/221, 0xdd}, {&(0x7f0000002f40)=""/4011, 0xfab}, {&(0x7f00000004c0)=""/119, 0x77}, {&(0x7f0000000340)=""/147, 0x93}], 0x7}, 0x2}], 0x1, 0x40002000, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

kernel console output (not intermixed with test programs):

] loop6: detected capacity change from 0 to 512
[  236.149311][T11924] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  236.163089][T11924] EXT4-fs (loop6): 1 truncate cleaned up
[  236.165467][T11924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.215251][T11026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.219141][   T31] usb 8-1: Using ep0 maxpacket: 32
[  236.222431][   T31] usb 8-1: unable to get BOS descriptor or descriptor too short
[  236.225679][   T31] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  236.228757][   T31] usb 8-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  236.240242][   T31] usb 8-1: config 1 interface 0 has no altsetting 0
[  236.266587][   T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.269778][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.272516][   T31] usb 8-1: Product: syz
[  236.273985][   T31] usb 8-1: Manufacturer: syz
[  236.275519][   T31] usb 8-1: SerialNumber: syz
[  236.286777][T11928] loop6: detected capacity change from 0 to 256
[  236.296056][T11928] exfat: Deprecated parameter 'namecase'
[  236.303334][T11928] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  236.311108][T11928] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  236.507667][   T31] usb 8-1: bad CDC descriptors
[  236.514683][   T31] usb 8-1: USB disconnect, device number 5
[  236.844850][   T33] audit: type=1326 audit(1785564110.572:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.879550][   T33] audit: type=1326 audit(1785564110.572:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.886152][   T33] audit: type=1326 audit(1785564110.572:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.900500][   T33] audit: type=1326 audit(1785564110.572:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.907616][   T33] audit: type=1326 audit(1785564110.572:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.951844][   T33] audit: type=1326 audit(1785564110.572:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.964426][   T33] audit: type=1326 audit(1785564110.572:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  236.972497][   T33] audit: type=1326 audit(1785564110.572:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.0.2466" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fabcc79e019 code=0x7ffc0000
[  237.076973][T11954] loop0: detected capacity change from 0 to 128
[  237.427766][T11977] loop7: detected capacity change from 0 to 64
[  237.446064][T11977] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount.
[  237.517473][T11981] netlink: 252 bytes leftover after parsing attributes in process `syz.6.2486'.
[  237.540782][T11981] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2486'.
[  237.860492][T11999] program syz.6.2495 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  237.918001][T12003] syzkaller0: entered promiscuous mode
[  237.923212][T12003] syzkaller0: entered allmulticast mode
[  237.927296][T12003] tipc: Started in network mode
[  237.928852][T12003] tipc: Node identity 826235c72304, cluster identity 4711
[  237.937721][T12003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.946574][T12000] tipc: Resetting bearer <eth:syzkaller0>
[  237.964808][T12000] tipc: Disabling bearer <eth:syzkaller0>
[  238.965113][T12034] loop6: detected capacity change from 0 to 1024
[  239.022136][T12034] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  239.024162][T12034] hfsplus: xattr searching failed
[  239.148729][T12030] loop0: detected capacity change from 0 to 40427
[  239.280807][T12040] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2510'.
[  239.618957][T12054] batadv_slave_1: entered promiscuous mode
[  239.638320][T12053] batadv_slave_1: left promiscuous mode
[  240.123884][T12068] loop6: detected capacity change from 0 to 256
[  240.143178][T12068] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.167026][T12068] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.175257][T12070] loop7: detected capacity change from 0 to 22
[  240.178637][T12070] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  240.197961][T12070] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  240.571305][T12082] loop0: detected capacity change from 0 to 512
[  240.578692][T12082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  240.597997][T12082] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  240.609538][T12080] syzkaller0: tun_chr_ioctl cmd 1074025677
[  240.611906][T12080] syzkaller0: linktype set to 769
[  240.617062][T12082] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  240.627585][T12082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  240.647244][T12082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2527: bg 0: block 41: padding at end of block bitmap is not set
[  240.652831][T12082] EXT4-fs (loop0): Remounting filesystem read-only
[  240.660437][T12085] xt_l2tp: v2 doesn't support IP mode
[  240.671592][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.706482][T12088] program syz.0.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.730678][T12091] netlink: 'syz.6.2530': attribute type 21 has an invalid length.
[  240.758327][T12090] loop7: detected capacity change from 0 to 4096
[  240.808310][T12090] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  240.820802][T12090] ntfs3(loop7): ino=3, mi_enum_attr
[  240.844392][T12090] ntfs3(loop7): ino=8, mi_enum_attr
[  240.858371][T12090] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  240.861634][T12090] ntfs3(loop7): Failed to load $BadClus (-22).
[  241.119183][   T31] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  241.272832][   T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  241.276821][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.307834][   T31] usb 1-1: config 0 descriptor??
[  241.322802][   T31] cp210x 1-1:0.0: cp210x converter detected
[  241.707966][T12108] loop7: detected capacity change from 0 to 4096
[  241.716064][T12108] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  241.726405][   T31] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  241.735055][   T31] usb 1-1: cp210x converter now attached to ttyUSB0
[  241.761243][T12108] ntfs3(loop7): ino=19, mi_enum_attr
[  241.781929][T12108] ntfs3(loop7): failed to convert "c46c" to iso8859-15
[  241.787274][T12110] netlink: 'syz.6.2540': attribute type 1 has an invalid length.
[  241.806612][T12108] ntfs3(loop7): ino=20, mi_enum_attr
[  241.943619][   T31] usb 1-1: USB disconnect, device number 43
[  241.946958][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  241.989979][   T31] cp210x 1-1:0.0: device disconnected
[  242.033613][T12120] netlink: 'syz.7.2545': attribute type 8 has an invalid length.
[  242.051601][T12120] sch_fq: defrate 0 ignored.
[  242.133750][T12125] loop7: detected capacity change from 0 to 512
[  242.137959][   T33] audit: type=1326 audit(1785564115.862:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.6.2548" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x0
[  242.140904][T12125] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  242.177038][T12125] EXT4-fs (loop7): 1 truncate cleaned up
[  242.184973][T12125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.221354][T12125] fscrypt (loop7, inode 18): Can't use IV_INO_LBLK_64 policy on filesystem 'loop7' because it doesn't have stable inode numbers
[  242.248355][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.451460][T12141] rtc_cmos 00:04: Alarms can be up to one day in the future
[  242.672779][T12149] loop6: detected capacity change from 0 to 32768
[  242.706887][T12149] JBD2: Ignoring recovery information on journal
[  242.731306][T12149] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  242.788682][T11026] ocfs2: Unmounting device (7,6) on (node local)
[  242.840470][ T5627] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  242.918490][T12165] loop6: detected capacity change from 0 to 2048
[  242.935507][T12165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.958531][   T33] audit: type=1800 audit(1785564116.682:180): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2563" name="file1" dev="loop6" ino=15 res=0 errno=0
[  242.998055][ T5627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.002114][ T5627] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.006803][ T5627] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  243.016135][ T5627] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  243.020332][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.023372][ T5627] usb 1-1: Product: syz
[  243.025009][ T5627] usb 1-1: Manufacturer: syz
[  243.026804][ T5627] usb 1-1: SerialNumber: syz
[  243.043912][T11026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.048194][ T5627] usb-storage 1-1:1.0: USB Mass Storage device detected
[  243.058261][ T5627] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  243.070827][ T5627] scsi host6: usb-storage 1-1:1.0
[  243.258901][   T31] usb 1-1: USB disconnect, device number 44
[  243.460688][ T5668] kernel read not supported for file /vcs (pid: 5668 comm: kworker/1:3)
[  243.502735][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2568'.
[  243.871774][T12199] syzkaller0: entered promiscuous mode
[  243.876002][T12199] syzkaller0: entered allmulticast mode
[  243.988715][T12203] tun0: tun_chr_ioctl cmd 1074025675
[  243.993944][T12203] tun0: persist disabled
[  244.195087][ T6763] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  244.211765][ T6763] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  244.301370][   T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  244.347201][T12211] loop7: detected capacity change from 0 to 32768
[  244.390692][T12211] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.432739][T12211] XFS (loop7): Ending clean mount
[  244.451068][   T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.456540][   T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.467412][   T31] usb 7-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  244.471567][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.474048][   T31] usb 7-1: Product: syz
[  244.477943][   T31] usb 7-1: Manufacturer: syz
[  244.480268][   T31] usb 7-1: SerialNumber: syz
[  244.488254][T11202] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  244.691073][   T31] usb 7-1: unit 250 not found!
[  244.692568][   T31] usb 7-1: unit 119 not found!
[  244.733925][T12237] batman_adv: batadv0: Adding interface: vlan2
[  244.736350][T12237] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.748007][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.750406][   T31] usb 7-1: USB disconnect, device number 7
[  244.753927][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.756980][T12237] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  244.794120][ T5589] udevd[5589]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.807961][T12240] loop0: detected capacity change from 0 to 512
[  245.169088][   T31] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  245.287321][T12253] loop6: detected capacity change from 0 to 4096
[  245.301111][T12253] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.316082][T12253] EXT4-fs (loop6): Invalid log block size: 458754
[  245.330786][   T31] usb 8-1: unable to get BOS descriptor or descriptor too short
[  245.334098][   T31] usb 8-1: config 100 has an invalid interface number: 173 but max is 0
[  245.336671][   T31] usb 8-1: config 100 has no interface number 0
[  245.339683][   T31] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  245.343655][   T31] usb 8-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1024, setting to 8
[  245.347976][   T31] usb 8-1: config 100 interface 173 has no altsetting 0
[  245.394749][   T31] usb 8-1: string descriptor 0 read error: -22
[  245.397329][   T31] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  245.401219][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.407223][T12248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  245.416132][T12248] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  245.424487][   T31] metro_usb 8-1:100.173: Metrologic USB to Serial converter detected
[  245.441503][   T31] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  245.573202][T12261] random: crng reseeded on system resumption
[  245.627999][ T5668] usb 8-1: USB disconnect, device number 6
[  245.632697][ T5668] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  245.635816][ T5668] metro_usb 8-1:100.173: device disconnected
[  245.840631][T12270] loop0: detected capacity change from 0 to 8
[  246.289854][   T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  246.295816][T12274] loop0: detected capacity change from 0 to 131072
[  246.466512][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  246.473923][   T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  246.477404][   T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  246.502921][   T31] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  246.506876][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.519454][   T31] usb 7-1: Product: syz
[  246.520768][   T31] usb 7-1: Manufacturer: syz
[  246.522795][   T31] usb 7-1: SerialNumber: syz
[  246.532534][   T31] usb 7-1: config 0 descriptor??
[  246.539710][T12280] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  246.542063][T12280] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  246.546046][   T31] usb 7-1: ucan: probing device on interface #0
[  246.953109][   T31] usb 7-1: ucan: device reported invalid tx-fifo size
[  246.955285][   T31] usb 7-1: ucan: probe failed; try to update the device firmware
[  247.119140][   T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  247.155483][   T31] usb 7-1: USB disconnect, device number 8
[  247.259109][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  247.270398][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  247.275624][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  247.286111][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  247.290656][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  247.293397][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  247.296053][   T10] usb 1-1: Product: syz
[  247.297408][   T10] usb 1-1: Manufacturer: syz
[  247.303483][T12291] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  247.306753][   T10] usb_debug 1-1:1.0: debug converter detected
[  247.310226][   T10] usb 1-1: debug converter now attached to ttyUSB0
[  247.411766][    T9] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  247.414965][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.419857][    T9] usb 8-1: config 0 descriptor??
[  247.520133][   T10] usb 1-1: USB disconnect, device number 45
[  247.527436][   T10] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  247.530438][   T10] usb_debug 1-1:1.0: device disconnected
[  247.760629][    T9] usb 8-1: USB disconnect, device number 7
[  247.780234][T12299] loop6: detected capacity change from 0 to 512
[  248.174158][T12314] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  248.234621][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  248.380573][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.384655][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.388951][    T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  248.401590][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.417017][    T9] usb 7-1: config 0 descriptor??
[  248.479423][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  248.538564][T12320] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.542205][T12320] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.641341][   T10] usb 1-1: Using ep0 maxpacket: 32
[  248.646571][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.656038][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.660556][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  248.664212][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.675118][   T10] usb 1-1: config 0 descriptor??
[  248.696474][   T10] hub 1-1:0.0: USB hub found
[  248.826678][    T9] arvo 0003:1E7D:30D4.0011: collection stack underflow
[  248.839078][    T9] arvo 0003:1E7D:30D4.0011: item 0 1 0 12 parsing failed
[  248.842683][    T9] arvo 0003:1E7D:30D4.0011: parse failed
[  248.845008][    T9] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -22
[  248.878922][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.889193][   T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  248.920714][T12320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.037576][   T31] usb 7-1: USB disconnect, device number 9
[  249.165671][T12320] macsec1: left promiscuous mode
[  249.179279][T12320] macsec1: left allmulticast mode
[  249.182002][   T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.184841][   T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.187812][   T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.198857][   T12] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.342124][   T10] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0
[  249.361721][   T10] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  249.668665][T12336] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2634'.
[  249.713200][T12338] loop6: detected capacity change from 0 to 1024
[  249.733001][T12338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.767979][T11026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.818187][T12343] overlayfs: upper fs does not support file handles, falling back to index=off.
[  249.876037][T12344] evm: overlay not supported
[  250.034291][T12318] usb 1-1: reset high-speed USB device number 46 using dummy_hcd
[  250.175657][T12346] loop7: detected capacity change from 0 to 256
[  250.190488][T12346] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  250.202735][T12346] exFAT-fs (loop7): start_clu is invalid cluster(0x0)
[  250.208403][   T33] audit: type=1800 audit(1785564123.932:181): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2637" name="file1" dev="loop7" ino=1048684 res=0 errno=0
[  250.229106][   T33] audit: type=1800 audit(1785564123.952:182): pid=12346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2637" name="file1" dev="loop7" ino=1048688 res=0 errno=0
[  250.420605][T12318] usbhid 1-1:0.0: reset_resume error -71
[  250.422869][   T10] usb 1-1: USB disconnect, device number 46
[  250.485763][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2640'.
[  250.488673][T12355] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2640'.
[  250.715444][T12365] loop6: detected capacity change from 0 to 4096
[  250.721753][T12367] loop7: detected capacity change from 0 to 2048
[  250.733745][T12365] EXT4-fs: inline encryption not supported
[  250.742877][T12367] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=11586, location=11586
[  250.759339][T12365] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  250.761970][T12365] EXT4-fs (loop6): Test dummy encryption mode enabled
[  250.773159][T12365] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  250.775682][T12365] System zones: 0-5
[  250.781573][T12365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.789841][T12367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.810588][T12365] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  250.911495][T11026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.342029][   T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  251.522423][   T31] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  251.527668][   T31] usb 7-1: config 0 has no interface number 0
[  251.532310][   T31] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  251.540012][   T31] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  251.548793][   T31] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  251.552854][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.561411][   T31] usb 7-1: Product: syz
[  251.564000][   T31] usb 7-1: Manufacturer: syz
[  251.567254][   T31] usb 7-1: SerialNumber: syz
[  251.572461][   T31] usb 7-1: config 0 descriptor??
[  251.581421][   T31] yurex 7-1:0.50: Could not submitting URB
[  251.587014][   T31] yurex 7-1:0.50: probe with driver yurex failed with error -5
[  251.641539][T12389] loop0: detected capacity change from 0 to 32768
[  251.793717][   T10] usb 7-1: USB disconnect, device number 10
[  251.816759][T12391] netlink: 'syz.0.2655': attribute type 5 has an invalid length.
[  251.898541][T12396] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2658'.
[  252.269438][   T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  252.429095][   T10] usb 8-1: Using ep0 maxpacket: 16
[  252.433138][   T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.437007][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  252.449305][   T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  252.484344][   T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  252.487208][   T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  252.493910][   T10] usb 8-1: Manufacturer: syz
[  252.497087][   T10] usb 8-1: config 0 descriptor??
[  252.707973][   T10] usb 8-1: USB disconnect, device number 8
[  253.893328][T12457] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2684'.
[  254.063818][T12462] loop0: detected capacity change from 0 to 512
[  254.071819][T12462] EXT4-fs: Ignoring removed orlov option
[  254.085852][T12462] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  254.099805][T12462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42e028, mo2=0002]
[  254.112248][T12453] loop7: detected capacity change from 0 to 131072
[  254.116338][T12453] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  254.118935][T12453] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  254.122170][T12453] F2FS-fs (loop7): invalid crc value
[  254.126759][T12462] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  254.147295][T12462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  254.157242][T12453] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  254.161303][T12453] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  254.163669][T12453] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  254.201414][ T5588] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.319238][   T31] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  254.480847][   T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  254.484440][   T31] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  254.487932][   T31] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.513158][   T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  254.515962][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.518955][   T31] usb 7-1: Product: syz
[  254.519140][ T5627] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  254.524843][   T31] usb 7-1: Manufacturer: syz
[  254.526623][   T31] usb 7-1: SerialNumber: syz
[  254.542761][   T31] hub 7-1:1.0: bad descriptor, ignoring hub
[  254.545012][   T31] hub 7-1:1.0: probe with driver hub failed with error -5
[  254.670866][ T5627] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  254.674062][ T5627] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  254.677401][ T5627] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  254.689225][ T5627] usb 1-1: config 220 has no interface number 2
[  254.699222][ T5627] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  254.704090][ T5627] usb 1-1: config 220 interface 0 has no altsetting 0
[  254.706602][ T5627] usb 1-1: config 220 interface 76 has no altsetting 0
[  254.714237][ T5627] usb 1-1: config 220 interface 1 has no altsetting 0
[  254.724685][ T5627] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  254.728134][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.734509][ T5627] usb 1-1: Product: syz
[  254.736086][ T5627] usb 1-1: Manufacturer: syz
[  254.737832][ T5627] usb 1-1: SerialNumber: syz
[  254.772011][   T31] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  254.839102][ T5668] usb 8-1: new low-speed USB device number 9 using dummy_hcd
[  254.947302][ T5627] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  254.952078][ T5627] uvcvideo 1-1:220.0: No valid video chain found.
[  254.954277][ T5627] usb 1-1: selecting invalid altsetting 0
[  254.963767][ T5627] usb 1-1: selecting invalid altsetting 0
[  254.965591][ T5627] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  254.965849][   T31] usb 7-1: reset high-speed USB device number 11 using dummy_hcd
[  254.977437][ T5627] usb 1-1: USB disconnect, device number 47
[  254.991394][ T5668] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  254.999238][ T5668] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  255.002423][ T5668] usb 8-1: config 179 has no interface number 0
[  255.004378][ T5668] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 8
[  255.007711][ T5668] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 19
[  255.030921][ T5668] usb 8-1: config 179 interface 65 has no altsetting 0
[  255.033603][ T5668] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  255.036979][ T5668] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.043036][T12474] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  255.258077][   T31] usb 8-1: USB disconnect, device number 9
[  255.476873][ T5627] usb 7-1: USB disconnect, device number 11
[  255.491928][ T5627] usblp0: removed
[  256.029317][   T31] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  256.044605][T12487] loop6: detected capacity change from 0 to 256
[  256.057418][T12487] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  256.072782][T12487] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  256.076503][T12487] exFAT-fs (loop6): Filesystem has been set read-only
[  256.188460][   T31] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  256.192206][   T31] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  256.205496][   T31] usb 8-1: Product: syz
[  256.209918][   T31] usb 8-1: config 0 descriptor??
[  256.221272][   T31] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  256.224088][T12493] binder: 12492:12493 ioctl c010f508 0 returned -22
[  256.226681][   T31] usb 8-1: Detected FT232H
[  256.240170][T12493] binder: 12492:12493 ioctl c018620c 200000000000 returned -22
[  256.417240][   T31] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  256.425849][   T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  256.428427][   T31] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  256.435647][   T31] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  256.440000][   T31] usb 8-1: USB disconnect, device number 10
[  256.453765][   T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  256.457569][   T31] ftdi_sio 8-1:0.0: device disconnected
[  256.496965][   T33] audit: type=1326 audit(1785564130.222:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.517423][   T33] audit: type=1326 audit(1785564130.222:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.530905][   T33] audit: type=1326 audit(1785564130.232:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.537613][   T33] audit: type=1326 audit(1785564130.232:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.546096][   T33] audit: type=1326 audit(1785564130.232:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.556215][   T33] audit: type=1326 audit(1785564130.232:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.565191][   T33] audit: type=1326 audit(1785564130.242:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.574965][   T33] audit: type=1326 audit(1785564130.242:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.584606][   T33] audit: type=1326 audit(1785564130.242:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.6.2704" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb41a39e019 code=0x7ffc0000
[  256.759095][ T5627] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  256.859380][T12518] i2c i2c-0: new_device: Can't parse I2C address
[  256.931292][ T5627] usb 1-1: Using ep0 maxpacket: 32
[  256.934484][ T5627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.953503][ T5627] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  256.956761][ T5627] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  256.981572][ T5627] usb 1-1: config 1 interface 1 has no altsetting 0
[  257.002329][ T5627] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  257.005877][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.018248][ T5627] usb 1-1: Product: syz
[  257.022715][ T5627] usb 1-1: Manufacturer: syz
[  257.024671][ T5627] usb 1-1: SerialNumber: syz
[  257.044008][ T5627] usb 1-1: interface 2 not found
[  257.046327][ T5627] usb 1-1: selecting invalid altsetting 0
[  257.065411][ T5627] usb 1-1: selecting invalid altsetting 0
[  257.067234][ T5627] usbtest 1-1:1.1: probe with driver usbtest failed with error -22
[  257.072634][ T5627] usb 1-1: selecting invalid altsetting 0
[  257.075116][ T5627] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  257.079602][ T5627] usb 1-1: selecting invalid altsetting 0
[  257.081816][ T5627] snd-ua101 1-1:1.1: probe with driver snd-ua101 failed with error -22
[  257.239586][   T31] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  257.248786][ T5627] usb 1-1: USB disconnect, device number 48
[  257.621635][   T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.626504][   T31] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  257.629648][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.632116][   T31] usb 8-1: Product: syz
[  257.633438][   T31] usb 8-1: Manufacturer: syz
[  257.634845][   T31] usb 8-1: SerialNumber: syz
[  257.637924][   T31] usb 8-1: config 0 descriptor??
[  257.663515][   T31] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22
[  257.687923][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.856203][   T31] usb 8-1: USB disconnect, device number 11
[  258.177563][T12540] loop6: detected capacity change from 0 to 4096
[  258.180136][ T5627] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  258.186995][T12540] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  258.344873][ T5627] usb 1-1: unable to get BOS descriptor or descriptor too short
[  258.348294][ T5627] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  258.351312][ T5627] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  258.354353][ T5627] usb 1-1: config 63 has no interface number 0
[  258.356215][ T5627] usb 1-1: config 63 interface 66 has no altsetting 0
[  258.362185][ T5627] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  258.364923][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.368592][ T5627] usb 1-1: Product: syz
[  258.372687][ T5627] usb 1-1: Manufacturer: syz
[  258.374132][ T5627] usb 1-1: SerialNumber: syz
[  258.472050][T12547] loop7: detected capacity change from 0 to 8192
[  258.605854][ T5627] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  258.610294][ T5627] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[  258.615167][T12555] loop7: detected capacity change from 0 to 128
[  258.615654][ T5627] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1).
[  258.625992][ T5627] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1).
[  258.631696][ T5627] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  258.634954][ T5627] uvcvideo 1-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[  258.638929][ T5627] uvcvideo 1-1:63.66: No streaming interface found for terminal 29.
[  258.641694][ T5627] uvcvideo 1-1:63.66: Entity type for entity Output 32773 was not initialized!
[  258.647899][ T5627] usb 1-1: USB disconnect, device number 49
[  258.661423][T12555] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  258.724516][T12560] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  258.728585][T12560] PKCS7: Only support pkcs7_signedData type
[  259.838032][T12593] loop6: detected capacity change from 0 to 32768
[  259.845727][T12593] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2741 (12593)
[  259.871274][T12593] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  259.879086][T12593] BTRFS info (device loop6): using blake2b checksum algorithm
[  260.143272][T12593] BTRFS info (device loop6): enabling ssd optimizations
[  260.145404][T12593] BTRFS info (device loop6): turning on async discard
[  260.147437][T12593] BTRFS info (device loop6): enabling free space tree
[  260.149948][T12606] binder: BINDER_SET_CONTEXT_MGR already set
[  260.168007][T12606] binder: 12605:12606 ioctl 4018620d 200000004a80 returned -16
[  260.410450][T12593] overlayfs: upper fs does not support file handles, falling back to index=off.
[  260.557225][T11026] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  260.870448][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  260.872568][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  260.931566][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2752'.
[  261.409290][ T5627] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  261.559841][ T5627] usb 7-1: Using ep0 maxpacket: 32
[  261.564697][ T5627] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  261.567456][ T5627] usb 7-1: config 0 has no interface number 0
[  261.587010][ T5627] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  261.591532][ T5627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.606193][ T5627] usb 7-1: Product: syz
[  261.607519][ T5627] usb 7-1: Manufacturer: syz
[  261.608980][ T5627] usb 7-1: SerialNumber: syz
[  261.632880][ T5627] usb 7-1: config 0 descriptor??
[  262.360156][T12687] loop0: detected capacity change from 0 to 1024
[  262.478471][T12695] loop7: detected capacity change from 0 to 256
[  262.494231][T12695] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  262.530172][T12695] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff)
[  262.532607][T12695] exFAT-fs (loop7): Filesystem has been set read-only
[  262.689371][T12697] loop0: detected capacity change from 0 to 32768
[  262.885990][T12705] loop0: detected capacity change from 0 to 512
[  263.456402][ T5627] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  263.460147][ T5627] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  263.463216][ T5627] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  263.466501][ T5627] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  263.470541][ T5627] usb 7-1: USB disconnect, device number 12
[  263.545885][T12710] loop7: detected capacity change from 0 to 512
[  263.586712][T12710] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2785: bad orphan inode 17
[  263.598371][T12710] loop7: lost filesystem error report for type 5 error -117
[  263.598546][T12710] ext4_test_bit(bit=16, block=4) = 1
[  263.600906][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  263.600915][    C0] EXT4-fs (loop7): initial error at time 1785564137: ext4_orphan_get:1417
[  263.600924][    C0] EXT4-fs (loop7): last error at time 1785564137: ext4_orphan_get:1417
[  263.639381][T12710] is_bad_inode(inode)=0
[  263.640908][T12710] NEXT_ORPHAN(inode)=0
[  263.642831][T12710] max_ino=32
[  263.646525][T12710] i_nlink=1
[  263.647820][T12716] loop0: detected capacity change from 0 to 1024
[  263.655508][T12710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.730180][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.890372][T12723] program syz.6.2789 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.959181][    T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  263.997234][T12728] loop6: detected capacity change from 0 to 512
[  264.016985][T12728] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  264.027240][T12728] System zones: 1-12
[  264.037197][T12728] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.2791: Directory hole found for htree index block 0
[  264.043176][T12728] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  264.045341][T12728] EXT4-fs (loop6): Remounting filesystem read-only
[  264.051469][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  264.051484][    C0] EXT4-fs (loop6): initial error at time 1785564137: dx_probe:791: inode 2
[  264.051504][    C0] EXT4-fs (loop6): last error at time 1785564137: dx_probe:791: inode 2
[  264.062543][T12728] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117
[  264.065871][T12728] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  264.070758][T12728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.084234][T12728] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  264.089555][T12728] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  264.114144][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  264.120888][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.124878][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  264.128635][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  264.133409][T11026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.152947][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  264.160469][    T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  264.166124][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.179231][    T9] usb 1-1: Product: syz
[  264.180945][    T9] usb 1-1: Manufacturer: syz
[  264.182771][    T9] usb 1-1: SerialNumber: syz
[  264.192982][    T9] usb 1-1: config 0 descriptor??
[  264.201723][T12718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  264.210407][    C0] usb 1-1: NFC: Urb failure (status -71)
[  264.213879][    T9] usb 1-1: NFC: Unable to get FW version
[  264.216802][    T9] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90
[  264.419853][    T9] usb 1-1: USB disconnect, device number 50
[  264.501267][T12737] loop6: detected capacity change from 0 to 32768
[  264.508024][T12737] 
[  264.508024][T12737]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.508024][T12737] 
[  264.530733][   T33] audit: type=1800 audit(1785564138.262:192): pid=12737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2795" name="file1" dev="loop6" ino=4 res=0 errno=0
[  264.579903][T12737] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt
[  264.579903][T12737] 
[  264.586061][T12737] ERROR: (device loop6): xtSearch: xt_getpage: xtree page corrupt
[  264.586061][T12737] 
[  264.590407][T12737] xtLookup: xtSearch returned -5
[  264.592284][T12737] ERROR: (device loop6): xtTruncate: xt_getpage: xtree page corrupt
[  264.592284][T12737] 
[  264.608749][T11026] ERROR: (device loop6): diWrite: ixpxd invalid
[  264.608749][T11026] 
[  264.611796][T11026] ERROR: (device loop6): txCommit: 
[  264.611796][T11026] 
[  264.629246][   T33] audit: type=1800 audit(1785564138.352:193): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2788" name="/" dev="fuse" ino=6 res=0 errno=0
[  264.708780][ T9206] 
[  264.708780][ T9206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.708780][ T9206] 
[  264.716812][ T9206] 
[  264.716812][ T9206]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.716812][ T9206] 
[  264.723606][  T116] 
[  264.723606][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.723606][  T116] 
[  264.728375][T12738] 
[  264.728375][T12738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.728375][T12738] 
[  264.739469][T12738] 
[  264.739469][T12738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  264.739469][T12738] 
[  264.763851][T12740] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  264.792496][ T5647] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.834749][T12742] loop7: detected capacity change from 0 to 2048
[  264.874380][T12742] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.885527][T12742] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  264.886193][ T5647] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.902384][T12742] EXT4-fs (loop7): Remounting filesystem read-only
[  264.917328][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.974808][T12748] loop7: detected capacity change from 0 to 128
[  264.977472][T12748] affs: Bad value for 'setuid'
[  264.979275][T12748] affs: Bad value for 'setuid'
[  265.002401][ T5647] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.077267][ T5647] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.229964][ T5647] bridge_slave_1: left allmulticast mode
[  265.232114][ T5647] bridge_slave_1: left promiscuous mode
[  265.234278][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.239944][ T5647] bridge_slave_0: left allmulticast mode
[  265.241913][ T5647] bridge_slave_0: left promiscuous mode
[  265.243942][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.414907][ T5647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.420707][ T5647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.425360][ T5647] bond0 (unregistering): Released all slaves
[  265.472366][   T31] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  265.523906][ T5647] tipc: Left network mode
[  265.641913][   T31] usb 8-1: Using ep0 maxpacket: 16
[  265.650647][   T31] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  265.665136][   T31] usb 8-1: config 0 interface 0 has no altsetting 0
[  265.667274][   T31] usb 8-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00
[  265.674660][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.687211][   T31] usb 8-1: config 0 descriptor??
[  265.892942][ T5647] hsr_slave_0: left promiscuous mode
[  265.915760][ T5647] hsr_slave_1: left promiscuous mode
[  265.918717][ T5647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.929629][ T5647] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.940323][ T5647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.942890][ T5647] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.962710][ T5647] veth1_macvtap: left promiscuous mode
[  265.964547][ T5647] veth0_macvtap: left promiscuous mode
[  265.966459][ T5647] veth1_vlan: left promiscuous mode
[  265.968361][ T5647] veth0_vlan: left promiscuous mode
[  266.107641][   T31] smartjoyplus 0003:6666:8802.0013: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.7-1/input0
[  266.112004][   T31] smartjoyplus 0003:6666:8802.0013: no output reports found
[  266.310436][   T31] usb 8-1: USB disconnect, device number 12
[  266.397127][ T5647] team0 (unregistering): Port device team_slave_1 removed
[  266.412475][ T5647] team0 (unregistering): Port device team_slave_0 removed
[  267.500040][T12827] netlink: 'syz.7.2820': attribute type 1 has an invalid length.
[  267.779092][   T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  267.929454][   T10] usb 8-1: Using ep0 maxpacket: 32
[  267.933470][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  267.936794][   T10] usb 8-1: config 14 has an invalid interface number: 232 but max is 0
[  267.940013][   T10] usb 8-1: config 14 has no interface number 0
[  267.942218][   T10] usb 8-1: config 14 interface 232 has no altsetting 0
[  267.955345][   T10] usb 8-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=d0.d9
[  267.958494][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.969081][   T10] usb 8-1: Product: syz
[  267.970639][   T10] usb 8-1: Manufacturer: syz
[  267.972376][   T10] usb 8-1: SerialNumber: syz
[  268.189867][   T10] mct_u232 8-1:14.232: MCT U232 converter detected
[  268.192890][   T10] mct_u232 ttyUSB0: expected endpoint missing
[  268.196894][   T10] usb 8-1: USB disconnect, device number 13
[  268.202360][   T10] mct_u232 8-1:14.232: device disconnected
[  269.894391][T12862] loop7: detected capacity change from 0 to 2048
[  269.911016][T12862] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.095892][T12880] netlink: 'syz.7.2841': attribute type 1 has an invalid length.
[  271.172532][T12880] 8021q: adding VLAN 0 to HW filter on device bond2
[  271.181732][T12880] bond1: (slave bond2): making interface the new active one
[  271.184376][T12880] bond1: (slave bond2): Enslaving as an active interface with an up link
[  271.489107][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  271.649153][    T9] usb 8-1: Using ep0 maxpacket: 8
[  271.652227][    T9] usb 8-1: config 2 has an invalid interface number: 31 but max is 0
[  271.654817][    T9] usb 8-1: config 2 has no interface number 0
[  271.656808][    T9] usb 8-1: config 2 interface 31 has no altsetting 0
[  271.661217][    T9] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  271.664045][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.666577][    T9] usb 8-1: Product: syz
[  271.667961][    T9] usb 8-1: Manufacturer: syz
[  271.687369][    T9] usb 8-1: SerialNumber: syz
[  271.903367][    T9] ch9200 8-1:2.31: probe with driver ch9200 failed with error -71
[  271.912093][    T9] usb 8-1: USB disconnect, device number 14
[  272.447981][T12905] loop7: detected capacity change from 0 to 2048
[  272.474712][T12905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.499119][   T33] audit: type=1800 audit(1785564146.212:194): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2850" name="file1" dev="loop7" ino=18 res=0 errno=0
[  272.565979][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.832392][T12929] program syz.7.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.889408][   T31] playstation 0003:054C:05C4.0014: item fetching failed at offset 0/1
[  272.892966][   T31] playstation 0003:054C:05C4.0014: Parse failed
[  272.895119][   T31] playstation 0003:054C:05C4.0014: probe with driver playstation failed with error -22
[  273.013384][T12940] loop0: detected capacity change from 0 to 128
[  273.409190][   T31] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  273.559764][   T31] usb 8-1: Using ep0 maxpacket: 8
[  273.562860][   T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  273.569118][   T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  273.579108][   T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  273.582134][   T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.591632][   T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  273.594627][   T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.812790][   T31] usb 8-1: GET_CAPABILITIES returned 0
[  273.814722][   T31] usbtmc 8-1:16.0: can't read capabilities
[  273.968737][T12957] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000
[  274.034385][   T31] usb 8-1: USB disconnect, device number 15
[  274.216003][T12970] mmap: syz.0.2876 (12970): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  274.299282][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'.
[  274.779143][   T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  274.925391][T12993] loop7: detected capacity change from 0 to 512
[  274.929381][   T10] usb 1-1: Using ep0 maxpacket: 16
[  274.944600][   T10] usb 1-1: config 0 has an invalid interface number: 216 but max is 0
[  274.944964][T12993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.947124][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.947135][   T10] usb 1-1: config 0 has no interface number 0
[  274.956529][T12993] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  274.972747][T12993] EXT4-fs (loop7): shut down requested (1)
[  274.973643][   T10] usb 1-1: config 0 interface 216 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  274.994451][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.012659][   T10] usb 1-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74
[  275.034180][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.035791][T12997] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2887'.
[  275.036675][   T10] usb 1-1: Product: syz
[  275.048019][   T10] usb 1-1: Manufacturer: syz
[  275.052498][   T10] usb 1-1: SerialNumber: syz
[  275.063772][   T10] usb 1-1: config 0 descriptor??
[  275.068870][   T10] usb-storage 1-1:0.216: USB Mass Storage device detected
[  275.297504][   T33] audit: type=1326 audit(1785564149.022:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.308423][ T5668] usb 1-1: USB disconnect, device number 51
[  275.314889][   T33] audit: type=1326 audit(1785564149.022:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.349445][   T33] audit: type=1326 audit(1785564149.022:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.362968][   T33] audit: type=1326 audit(1785564149.022:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.372178][   T33] audit: type=1326 audit(1785564149.032:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.381196][   T33] audit: type=1326 audit(1785564149.032:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.390468][   T33] audit: type=1326 audit(1785564149.032:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.399639][   T33] audit: type=1326 audit(1785564149.032:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.409524][   T33] audit: type=1326 audit(1785564149.032:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.7.2889" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d5619e019 code=0x7ffc0000
[  275.579370][ T6763] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  275.729306][ T6763] usb 8-1: Using ep0 maxpacket: 16
[  275.733086][ T6763] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  275.737038][ T6763] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.741810][ T6763] usb 8-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.745693][ T6763] usb 8-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  275.751659][ T6763] usb 8-1: config 7 interface 0 has no altsetting 0
[  275.754193][ T6763] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  275.758052][ T6763] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.187561][ T6763] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:7.0/0003:0458:5010.0015/input/input20
[  276.194580][T13019] loop0: detected capacity change from 0 to 2048
[  276.301796][ T6763] kye 0003:0458:5010.0015: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0
[  276.393299][   T10] usb 8-1: USB disconnect, device number 16
[  276.859216][ T6763] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  276.933326][T13035] syzkaller0: tun_chr_ioctl cmd 2147767521
[  277.009257][ T6763] usb 1-1: Using ep0 maxpacket: 8
[  277.023309][ T6763] usb 1-1: config 0 has no interfaces?
[  277.025564][ T6763] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  277.034197][ T6763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.044403][ T6763] usb 1-1: config 0 descriptor??
[  277.060921][T13039] loop7: detected capacity change from 0 to 512
[  277.091599][T13039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.118589][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.307413][T13053] ip6erspan0: entered allmulticast mode
[  277.901576][T13073] loop7: detected capacity change from 0 to 2048
[  277.934214][T13073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.018187][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.339139][ T5668] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  278.489111][ T5668] usb 8-1: Using ep0 maxpacket: 32
[  278.494049][ T5668] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10
[  278.501458][ T5668] usb 8-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40
[  278.505750][ T5668] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.509407][ T5668] usb 8-1: Product: syz
[  278.511293][ T5668] usb 8-1: Manufacturer: syz
[  278.513332][ T5668] usb 8-1: SerialNumber: syz
[  278.725523][ T5668] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  278.753396][ T5668] usb 8-1: USB disconnect, device number 17
[  279.574206][T13105] scsi_nl_rcv_msg: discarding partial skb
[  279.644833][ T5668] usb 1-1: USB disconnect, device number 52
[  279.736002][T13109] loop7: detected capacity change from 0 to 1024
[  279.766236][T13110] qnx4: unable to read the superblock
[  279.775474][T13109] EXT4-fs: Ignoring removed bh option
[  279.826356][T13109] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.897062][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  279.897148][   T33] audit: type=1800 audit(1785564153.622:218): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2922" name="file1" dev="loop7" ino=15 res=0 errno=0
[  280.556415][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.716014][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  280.722617][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  280.727132][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  280.731980][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  280.736541][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  280.837668][T13120] loop7: detected capacity change from 0 to 256
[  280.860583][T13120] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  281.148146][T13116] dummy0 speed is unknown, defaulting to 1000
[  281.162479][T13131] loop0: detected capacity change from 0 to 512
[  281.261162][T13136] loop7: detected capacity change from 0 to 128
[  281.278101][T13136] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  281.299322][T13136] UDF-fs: warning (device loop7): udf_fill_super: No fileset found
[  281.524466][T13116] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.526774][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.529484][T13116] bridge_slave_0: entered allmulticast mode
[  281.532727][T13116] bridge_slave_0: entered promiscuous mode
[  281.540621][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.542869][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.553991][T13116] bridge_slave_1: entered allmulticast mode
[  281.556473][T13116] bridge_slave_1: entered promiscuous mode
[  281.586999][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.619317][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.681999][T13116] team0: Port device team_slave_0 added
[  281.687379][T13116] team0: Port device team_slave_1 added
[  281.770557][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.773242][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.788825][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.794992][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.797078][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  281.805919][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.828911][T13116] hsr_slave_0: entered promiscuous mode
[  281.832223][T13159] tmpfs: Bad value for 'mpol'
[  281.845313][T13116] hsr_slave_1: entered promiscuous mode
[  281.848201][T13116] debugfs: 'hsr0' already exists in 'hsr'
[  281.851801][T13116] Cannot create hsr debugfs directory
[  281.963891][T13157] loop0: detected capacity change from 0 to 32768
[  282.104231][T13116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  282.110696][T13116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  282.114627][T13116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  282.118709][T13116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  282.191236][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.194185][T13116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.197136][T13116] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.200152][T13116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.295379][T13116] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.309972][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.313073][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.396451][T13187] loop0: detected capacity change from 0 to 1024
[  282.405324][T13116] 8021q: adding VLAN 0 to HW filter on device team0
[  282.470961][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.473473][ T9202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.478496][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.478522][T13191] loop0: detected capacity change from 0 to 8
[  282.481348][ T9202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.519889][T13116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  282.793368][ T5591] Bluetooth: hci3: command tx timeout
[  282.916330][T13206] loop7: detected capacity change from 0 to 512
[  282.928825][   T33] audit: type=1800 audit(1785564156.652:219): pid=13206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2953" name="file1" dev="loop7" ino=1048692 res=0 errno=0
[  283.618057][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.970506][T13116] veth0_vlan: entered promiscuous mode
[  283.981725][T13116] veth1_vlan: entered promiscuous mode
[  284.015847][T13116] veth0_macvtap: entered promiscuous mode
[  284.019763][T13116] veth1_macvtap: entered promiscuous mode
[  284.034480][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.071229][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.075994][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.078893][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.091692][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.100083][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  284.371028][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.373523][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.399883][ T9202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  284.404580][ T9202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  284.494504][T13233] loop7: detected capacity change from 0 to 32768
[  284.551781][ T5603]  loop7: p1 p3 < >
[  284.574920][T13233]  loop7: p1 p3 < >
[  284.575569][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2961'.
[  284.717668][T13248] retu-mfd 0-0002: could not read Tahvo revision: -6
[  284.722754][T13248] i2c i2c-0: new_device: Instantiated device tahvo at 0x02
[  284.744058][T13248] retu-mfd 1-0002: could not read Tahvo revision: -5
[  284.746491][T13248] retu-mfd 1-0002: probe with driver retu-mfd failed with error -5
[  284.748984][T13248] i2c i2c-1: new_device: Instantiated device tahvo at 0x02
[  284.852140][T13253] loop7: detected capacity change from 0 to 8
[  284.855954][T13253] SQUASHFS error: zlib decompression failed, data probably corrupt
[  284.858494][T13253] SQUASHFS error: Failed to read block 0x9b: -5
[  284.860941][T13253] SQUASHFS error: Unable to read metadata cache entry [99]
[  284.863199][T13253] SQUASHFS error: Unable to read inode 0x104
[  284.879467][ T5591] Bluetooth: hci3: command tx timeout
[  284.938879][T13257] loop0: detected capacity change from 0 to 512
[  284.982230][T13259] dummy0 speed is unknown, defaulting to 1000
[  285.429976][T13271] loop8: detected capacity change from 0 to 40427
[  285.438551][T13271] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  285.441791][T13271] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  285.446047][T13271] F2FS-fs (loop8): invalid crc value
[  285.553224][T13271] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.571021][T13271] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  285.573483][T13271] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  286.154332][T13323] loop0: detected capacity change from 0 to 2048
[  286.949442][ T5591] Bluetooth: hci3: command tx timeout
[  286.959599][T13349] loop0: detected capacity change from 0 to 32768
[  287.234667][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'.
[  287.405925][T13370] loop8: detected capacity change from 0 to 8192
[  288.036354][T13373] loop7: detected capacity change from 0 to 8
[  288.068955][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.076237][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.096055][   T33] audit: type=1800 audit(1785564161.822:220): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3010" name="file1" dev="loop7" ino=5 res=0 errno=0
[  288.120735][T13375] loop0: detected capacity change from 0 to 256
[  288.125964][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.128262][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.170603][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.172813][T13373] SQUASHFS error: Failed to read block 0x4de: -5
[  288.357206][T13378] loop8: detected capacity change from 0 to 32768
[  288.539513][   T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  288.704189][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  288.708117][   T10] usb 8-1: config 13 has an invalid interface number: 248 but max is 2
[  288.721317][   T10] usb 8-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  288.725169][   T10] usb 8-1: config 13 has 1 interface, different from the descriptor's value: 3
[  288.728613][   T10] usb 8-1: config 13 has no interface number 0
[  288.732528][T13397] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3021'.
[  288.749089][   T10] usb 8-1: config 13 interface 248 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  288.756942][   T10] usb 8-1: config 13 interface 248 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 7
[  288.769361][   T10] usb 8-1: config 13 interface 248 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 15
[  288.776918][   T10] usb 8-1: config 13 interface 248 has no altsetting 0
[  288.816595][   T10] usb 8-1: New USB device found, idVendor=066b, idProduct=2202, bcdDevice=49.c7
[  288.820209][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.824314][   T10] usb 8-1: Product: syz
[  288.825996][   T10] usb 8-1: Manufacturer: syz
[  288.827796][   T10] usb 8-1: SerialNumber: syz
[  288.925914][T13404] loop8: detected capacity change from 0 to 128
[  288.945787][T13404] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  288.966720][T13404] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  289.012741][T13116] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.031798][ T5591] Bluetooth: hci3: command tx timeout
[  289.069486][   T10] kaweth 8-1:13.248: couldn't find required endpoints
[  289.072136][   T10] pegasus 8-1:13.248: Missing or invalid endpoints
[  289.099521][   T10] usb 8-1: USB disconnect, device number 18
[  289.355135][T13418] loop8: detected capacity change from 0 to 512
[  289.403077][T13418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.421384][T13418] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.440069][   T33] audit: type=1800 audit(1785564163.172:221): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3030" name="file2" dev="loop8" ino=16 res=0 errno=0
[  289.771464][T13436] dummy0 speed is unknown, defaulting to 1000
[  290.227619][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.575117][T13432] loop0: detected capacity change from 0 to 32768
[  290.985847][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3037'.
[  291.249899][T13449] loop0: detected capacity change from 0 to 40427
[  291.501432][T13468] loop0: detected capacity change from 0 to 4096
[  291.504073][T13468] EXT4-fs: Ignoring removed mblk_io_submit option
[  291.849120][   T10] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  292.001365][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  292.005107][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.013190][   T10] usb 1-1: config 0 descriptor??
[  292.396644][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3051'.
[  292.438190][   T10] koneplus 0003:1E7D:2E22.0016: hidraw0: USB HID vef.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0
[  292.550017][T13488] loop8: detected capacity change from 0 to 4096
[  292.554743][T13488] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  292.639407][    T9] usb 1-1: USB disconnect, device number 53
[  292.983938][T13507] loop8: detected capacity change from 0 to 4096
[  293.000445][T13507] EXT4-fs: Ignoring removed orlov option
[  293.013516][T13507] EXT4-fs (loop8): Test dummy encryption mode enabled
[  293.019146][  T781] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  293.024726][T13507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.173009][  T781] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  293.176029][  T781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.178517][  T781] usb 8-1: Product: syz
[  293.201136][  T781] usb 8-1: Manufacturer: syz
[  293.202779][  T781] usb 8-1: SerialNumber: syz
[  293.228151][  T781] usb 8-1: config 0 descriptor??
[  293.448737][  T781] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  294.096905][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.294633][T13528] loop8: detected capacity change from 0 to 8
[  294.317246][T13528] SQUASHFS error: Unable to read inode 0xa7
[  294.452477][T13536] veth3: entered promiscuous mode
[  294.454848][T13536] veth3: entered allmulticast mode
[  294.456927][T13536] team0: Device veth3 is up. Set it down before adding it as a team port
[  294.568775][T13542] bond0: entered promiscuous mode
[  294.571923][T13542] bond_slave_0: entered promiscuous mode
[  294.573922][T13542] bond_slave_1: entered promiscuous mode
[  294.614788][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3079'.
[  294.660980][T13546] loop0: detected capacity change from 0 to 128
[  294.858935][T13548] loop0: detected capacity change from 0 to 32768
[  294.887280][  T781] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  294.900968][  T781] usb 8-1: USB disconnect, device number 19
[  295.630391][T13568] loop0: detected capacity change from 0 to 32768
[  295.653486][T13568] xfs: Unknown parameter 'smackfstransmute'
[  296.740712][    T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  296.900519][    T9] usb 8-1: Using ep0 maxpacket: 32
[  296.904700][    T9] usb 8-1: config 0 has an invalid interface number: 35 but max is 0
[  296.908100][    T9] usb 8-1: config 0 has no interface number 0
[  296.912082][    T9] usb 8-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  296.940547][    T9] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  296.944137][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.947267][    T9] usb 8-1: Product: syz
[  296.951971][    T9] usb 8-1: Manufacturer: syz
[  296.953896][    T9] usb 8-1: SerialNumber: syz
[  296.961814][    T9] usb 8-1: config 0 descriptor??
[  296.970558][    T9] radio-si470x 8-1:0.35: could not find interrupt in endpoint
[  296.973328][    T9] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5
[  297.167782][    T9] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  297.368399][    T9] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71)
[  297.375469][    T9] radio-raremono 8-1:0.35: V4L2 device registered as radio48
[  297.385618][    T9] usb 8-1: USB disconnect, device number 20
[  297.388010][    T9] radio-raremono 8-1:0.35: Thanko's Raremono disconnected
[  297.392885][T13608] i2c i2c-0: delete_device: Can't parse I2C address
[  297.532311][T13617] loop0: detected capacity change from 0 to 128
[  297.728036][T13631] x_tables: duplicate underflow at hook 4
[  298.095584][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3124'.
[  298.949664][   T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  299.109104][   T10] usb 1-1: Using ep0 maxpacket: 32
[  299.123923][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  299.128973][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[  299.139732][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.153963][   T10] usb 1-1: config 0 descriptor??
[  299.171316][   T10] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  299.212723][   T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  299.220664][   T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  299.227092][   T10] usb 1-1: media controller created
[  299.244199][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  299.380008][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  299.382228][   T10] error writing reg: 0xff, val: 0x00
[  299.400016][ T5591] Bluetooth: hci1: Malformed Event: 0x13
[  299.405597][T13685] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3138'.
[  299.422381][   T10] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  299.621986][   T10] usb 1-1: USB disconnect, device number 54
[  300.651612][T13700] loop7: detected capacity change from 0 to 32768
[  300.667874][T13700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3144 (13700)
[  300.694862][T13700] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.703348][T13700] BTRFS info (device loop7): using sha256 checksum algorithm
[  300.719914][T13711] tipc: Started in network mode
[  300.730173][T13711] tipc: Node identity ac14140f, cluster identity 4711
[  300.739575][T13711] tipc: New replicast peer: 255.255.255.255
[  300.741794][T13711] tipc: Enabled bearer <udp:syz2>, priority 10
[  300.817972][T13700] BTRFS info (device loop7): enabling ssd optimizations
[  300.827525][T13700] BTRFS info (device loop7): turning on async discard
[  300.829874][T13700] BTRFS info (device loop7): enabling free space tree
[  300.891018][T11202] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.980345][T13732] loop0: detected capacity change from 0 to 16
[  301.479126][T13750] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  301.534857][T13753] loop7: detected capacity change from 0 to 1024
[  301.541608][T13753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.550912][    T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  301.586871][   T33] audit: type=1800 audit(1785564175.312:222): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3160" name="bus" dev="loop7" ino=990 res=0 errno=0
[  301.601054][T13753] program syz.7.3160 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.718082][    T9] usb 1-1: Using ep0 maxpacket: 16
[  301.728903][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.737247][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  301.745401][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  301.748277][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.753118][    T9] usb 1-1: Product: syz
[  301.754500][    T9] usb 1-1: Manufacturer: syz
[  301.756009][    T9] usb 1-1: SerialNumber: syz
[  301.860546][   T10] tipc: Node number set to 2886997007
[  301.980828][    T9] usb 1-1: 0:2 : does not exist
[  301.993761][    T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  302.129559][T13763] loop7: detected capacity change from 0 to 40427
[  302.132729][T13763] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  302.135513][T13763] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  302.167617][T13763] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.171680][T13763] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  302.173841][T13763] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  302.259232][T13763] syz.7.3165: attempt to access beyond end of device
[  302.259232][T13763] loop7: rw=2049, sector=45096, nr_sectors = 8152 limit=40427
[  302.266374][T13763] syz.7.3165: attempt to access beyond end of device
[  302.266374][T13763] loop7: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  302.282768][T13763] syz.7.3165: attempt to access beyond end of device
[  302.282768][T13763] loop7: rw=2049, sector=57344, nr_sectors = 5328 limit=40427
[  302.291636][    T9] usb 1-1: USB disconnect, device number 55
[  302.305323][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.403480][T11202] syz-executor: attempt to access beyond end of device
[  302.403480][T11202] loop7: rw=8390659, sector=45096, nr_sectors = 8152 limit=40427
[  302.408835][T11202] syz-executor: attempt to access beyond end of device
[  302.408835][T11202] loop7: rw=8390659, sector=57344, nr_sectors = 4136 limit=40427
[  302.417188][T11202] syz-executor: attempt to access beyond end of device
[  302.417188][T11202] loop7: rw=8390659, sector=45056, nr_sectors = 8 limit=40427
[  302.425141][T11202] F2FS-fs (loop7): Issue discard(5637, 5637, 1019) failed, ret: -5
[  302.428522][T11202] F2FS-fs (loop7): Issue discard(7168, 7168, 517) failed, ret: -5
[  302.434303][T11202] F2FS-fs (loop7): Issue discard(5632, 5632, 1) failed, ret: -5
[  302.585238][T13770] loop0: detected capacity change from 0 to 4096
[  303.605851][T13790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  303.706580][T13798] netlink: 'syz.8.3178': attribute type 1 has an invalid length.
[  303.710265][T13798] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3178'.
[  303.747238][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3179'.
[  304.758924][T13891] loop8: detected capacity change from 0 to 32768
[  304.773946][T13891] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3187 (13891)
[  304.820570][T13891] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  304.824807][T13891] BTRFS info (device loop8): using sha256 checksum algorithm
[  304.905096][T13891] BTRFS info (device loop8): turning off barriers
[  304.907207][T13891] BTRFS info (device loop8): enabling free space tree
[  305.013781][T13116] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  305.178987][T13922] loop7: detected capacity change from 0 to 4096
[  305.256371][T13922] ntfs3(loop7): ino=19, mi_enum_attr
[  305.258167][T13922] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  305.369609][T13922] ntfs3(loop7): ino=5, "/" mi_enum_attr
[  305.518782][T13936] loop8: detected capacity change from 0 to 4096
[  305.695401][T13946] loop7: detected capacity change from 0 to 256
[  306.040311][    T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  306.189218][    T9] usb 8-1: Using ep0 maxpacket: 16
[  306.194236][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.199263][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.210043][    T9] usb 8-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40
[  306.212942][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.215420][    T9] usb 8-1: Product: syz
[  306.216784][    T9] usb 8-1: Manufacturer: syz
[  306.218439][    T9] usb 8-1: SerialNumber: syz
[  306.397659][T13969] loop0: detected capacity change from 0 to 32768
[  306.433792][    T9] usb 8-1: unit 0 not found!
[  306.493291][    T9] usb 8-1: USB disconnect, device number 21
[  306.980074][  T781] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  307.090544][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.095824][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.099880][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.103621][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.107279][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.112108][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.115766][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.119958][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3221'.
[  307.143017][  T781] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  307.146603][  T781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.158591][  T781] usb 1-1: Product: syz
[  307.160140][  T781] usb 1-1: Manufacturer: syz
[  307.161546][  T781] usb 1-1: SerialNumber: syz
[  307.164448][  T781] usb 1-1: config 0 descriptor??
[  307.176069][  T781] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  307.178364][   T33] audit: type=1400 audit(1785564180.892:223): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13983 comm="syz.7.3222"
[  307.232610][T13988] loop7: detected capacity change from 0 to 4096
[  307.245061][T13988] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  307.247924][T13988] ntfs3(loop7): It is recommended to use chkdsk.
[  307.369969][ T6763] usb 1-1: USB disconnect, device number 56
[  308.048545][T14010] loop0: detected capacity change from 0 to 4096
[  308.069260][    T9] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  308.248171][    T9] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[  308.251259][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.253739][    T9] usb 8-1: Product: syz
[  308.254991][    T9] usb 8-1: Manufacturer: syz
[  308.256374][    T9] usb 8-1: SerialNumber: syz
[  308.259717][    T9] usb 8-1: config 0 descriptor??
[  308.272280][    T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  308.286502][T14018] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  308.387969][T14022] loop0: detected capacity change from 0 to 256
[  308.573449][T14028] loop0: detected capacity change from 0 to 256
[  308.578065][T14028] exfat: Deprecated parameter 'namecase'
[  308.582459][T14028] exfat: Deprecated parameter 'utf8'
[  308.669510][    T9] gspca_m5602: Failed to find a sensor
[  308.671672][    T9] ALi m5602 8-1:0.0: ALi m5602 webcam failed
[  308.683123][    T9] usb 8-1: USB disconnect, device number 22
[  308.731463][T14032] loop0: detected capacity change from 0 to 512
[  308.757554][T14032] loop0: detected capacity change from 0 to 512
[  309.029442][ T5599] Bluetooth: hci2: command 0x0406 tx timeout
[  309.879127][ T5699] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  310.029094][ T5699] usb 8-1: Using ep0 maxpacket: 32
[  310.033750][ T5699] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  310.036138][ T5699] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  310.043529][ T5699] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  310.046790][ T5699] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  310.059344][ T5699] usb 8-1: config 0 interface 0 has no altsetting 0
[  310.064465][ T5699] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  310.067657][ T5699] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  310.079690][ T5699] usb 8-1: Product: syz
[  310.081265][ T5699] usb 8-1: Manufacturer: syz
[  310.082939][ T5699] usb 8-1: SerialNumber: syz
[  310.091325][ T5699] usb 8-1: config 0 descriptor??
[  310.101863][ T5699] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  310.123292][ T5699] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  310.181036][T14070] netlink: 'syz.0.3262': attribute type 1 has an invalid length.
[  310.225941][T14072] loop0: detected capacity change from 0 to 64
[  310.359634][T14068] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  310.359903][ T6763] usb 8-1: USB disconnect, device number 23
[  310.362111][    C0] ldusb 8-1:0.0: usb_submit_urb failed (-19)
[  310.374655][ T6763] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  310.537148][T14085] __nla_validate_parse: 13 callbacks suppressed
[  310.537191][T14085] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3269'.
[  310.657212][T14088] bond0: left promiscuous mode
[  310.659403][T14088] bond_slave_0: left promiscuous mode
[  310.661655][T14088] bond_slave_1: left promiscuous mode
[  310.669104][T14088] bridge0: port 1(1x9) entered disabled state
[  310.673265][T14088] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.690920][T14088] vlan2: left promiscuous mode
[  310.692484][T14088] geneve1: left promiscuous mode
[  311.210354][T14098] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3275'.
[  311.670368][T14122] loop7: detected capacity change from 0 to 8
[  311.683451][T14122] SQUASHFS error: zlib decompression failed, data probably corrupt
[  311.686251][T14122] SQUASHFS error: Failed to read block 0x9b: -5
[  311.688117][T14122] SQUASHFS error: Unable to read metadata cache entry [99]
[  311.701974][T14122] SQUASHFS error: Unable to read inode 0x127
[  312.036172][T14139] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  312.041321][T14139] udc dummy_udc.0: failed to start g1: -19
[  312.048041][T14139] UDC core: g1: couldn't find an available UDC or it's busy
[  312.236551][T14144] loop0: detected capacity change from 0 to 32768
[  312.363201][T14152] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3301'.
[  312.445025][T14156] loop8: detected capacity change from 0 to 2048
[  312.472432][T14160] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  312.483832][T14156] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  312.508441][T14156] Remounting filesystem read-only
[  312.583468][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'.
[  312.920444][   T33] audit: type=1804 audit(1785564186.652:224): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3317" name="/newroot/1190/file0/file1" dev="overlay" ino=6284 res=1 errno=0
[  313.611480][T14181] orangefs_mount: mount request failed with -4
[  314.115885][T14221] binder: 14220:14221 ioctl c0306201 2000000003c0 returned -14
[  314.171532][T14215] loop0: detected capacity change from 0 to 32768
[  314.473041][T14225] loop7: detected capacity change from 0 to 32768
[  314.709132][ T5699] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  314.889267][ T5699] usb 1-1: Using ep0 maxpacket: 32
[  314.892284][ T5699] usb 1-1: config 2 has an invalid interface number: 45 but max is 0
[  314.894862][ T5699] usb 1-1: config 2 has no interface number 0
[  314.896872][ T5699] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  314.900596][ T5699] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  314.905987][ T5699] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  314.908951][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.911624][ T5699] usb 1-1: Product: syz
[  314.913109][ T5699] usb 1-1: Manufacturer: syz
[  314.914765][ T5699] usb 1-1: SerialNumber: syz
[  314.921108][ T5699] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected
[  314.925748][ T5699] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  315.122840][ T5699] usb 1-1: USB disconnect, device number 57
[  315.129530][ T5699] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  315.139174][ T5699] kobil_sct 1-1:2.45: device disconnected
[  315.821465][T14241] comedi comedi0: reset error (fatal)
[  315.845819][T14254] loop0: detected capacity change from 0 to 1024
[  315.946873][T14262] loop8: detected capacity change from 0 to 128
[  315.950037][T14262] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  315.964976][T14262] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  316.139094][ T5699] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  316.301818][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short
[  316.306864][ T5699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  316.318622][ T5699] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  316.329888][ T5699] usb 1-1: config 1 interface 0 has no altsetting 1
[  316.341999][ T5699] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  316.345118][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.347644][ T5699] usb 1-1: Product: syz
[  316.355429][ T5699] usb 1-1: Manufacturer: syz
[  316.357255][ T5699] usb 1-1: SerialNumber: syz
[  316.369743][ T5699] smsusb:smsusb_probe: board id=8, interface number 0
[  316.407435][T14277] loop8: detected capacity change from 0 to 4096
[  316.414368][T14277] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  316.427495][T14277] ntfs3(loop8): ino=19, mi_enum_attr
[  316.430026][T14277] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  316.432902][T14277] ntfs3(loop8): ino=1a, mi_enum_attr
[  316.434738][T14277] ntfs3(loop8): ino=1a, mi_enum_attr
[  316.436751][T14277] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  316.576495][ T5699] smsusb:smsusb_probe: Device initialized with return code -19
[  316.717143][T14290] loop7: detected capacity change from 0 to 32768
[  316.719889][T14290] btrfs: Deprecated parameter 'usebackuproot'
[  316.721756][T14290] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  316.725369][T14290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3364 (14290)
[  316.742935][T14290] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.746022][T14290] BTRFS info (device loop7): using crc32c checksum algorithm
[  316.787293][ T6763] usb 1-1: USB disconnect, device number 58
[  316.804366][ T6178] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  316.808542][T14290] BTRFS error (device loop7): failed to load root extent
[  316.810720][T14290] BTRFS warning (device loop7): try to load backup roots slot 1
[  316.813159][T13885] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  316.817061][T14290] BTRFS warning (device loop7): couldn't read tree root
[  316.819172][T14290] BTRFS warning (device loop7): try to load backup roots slot 2
[  316.822488][T13881] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  316.825621][T14290] BTRFS warning (device loop7): couldn't read tree root
[  316.827800][T14290] BTRFS warning (device loop7): try to load backup roots slot 3
[  316.856846][T14290] BTRFS info (device loop7): rebuilding free space tree
[  316.884978][T14290] BTRFS info (device loop7): checking UUID tree
[  316.887051][T14290] BTRFS info (device loop7): enabling ssd optimizations
[  316.889450][T14290] BTRFS info (device loop7): turning on async discard
[  316.892079][T14290] BTRFS info (device loop7): enabling free space tree
[  316.894441][T14290] BTRFS info (device loop7): force clearing of disk cache
[  316.896804][T14290] BTRFS info (device loop7): trying to use backup root at mount time
[  316.899687][T14290] BTRFS info (device loop7): use zstd compression, level 3
[  316.902089][T14290] BTRFS info (device loop7): max_inline set to 4096
[  316.965822][T11202] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.999394][T14317] loop8: detected capacity change from 0 to 2048
[  317.046412][T14317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.123454][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.170416][T14323] loop8: detected capacity change from 0 to 512
[  317.177278][T14323] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  317.182318][T14323] EXT4-fs (loop8): bad geometry: block count 1024 exceeds size of device (256 blocks)
[  317.352511][T14335] loop0: detected capacity change from 0 to 8
[  317.388770][T14336] loop8: detected capacity change from 0 to 4096
[  317.423674][T14338] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.462794][T14341] loop7: detected capacity change from 0 to 256
[  317.467683][T14341] vfat: Unknown parameter 'ufi_xlate'
[  317.557207][T14346] IPv4: Oversized IP packet from 127.202.26.0
[  317.639307][T12738] jfs_flush_journal: synclist not empty
[  317.641521][T12738] metapage: ffff8881772089b0: 00001000 00000000 00003a24 00000000
[  317.643845][T12738] metapage: ffff8881772089c0: 6e711228 ffff8881 6e711228 ffff8881
[  317.646182][T12738] metapage: ffff8881772089d0: 00000004 00000000 00000000 00000000
[  317.648668][T12738] metapage: ffff8881772089e0: 6cbd6000 ffff8881 0000001c 00000000
[  317.651528][T12738] metapage: ffff8881772089f0: 00000000 dead4ead ffffffff 00000000
[  317.654186][T12738] metapage: ffff888177208a00: ffffffff ffffffff 9a3f18a0 ffffffff
[  317.656723][T12738] metapage: ffff888177208a10: 93cf16d0 ffffffff 00000000 00000000
[  317.660621][T12738] metapage: ffff888177208a20: 8c0b2360 ffffffff 00000300 00000000
[  317.663446][T12738] metapage: ffff888177208a30: 77208a30 ffff8881 77208a30 ffff8881
[  317.665971][T12738] metapage: ffff888177208a40: 05b2f580 ffffea00 b59d6000 ffff8881
[  317.668342][T12738] metapage: ffff888177208a50: 00001000 00003b14 00000001 00000000
[  317.671119][T12738] metapage: ffff888177208a60: 6e711000 ffff8881
[  317.671348][  T781] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  317.672977][T12738] page: ffffea0005b2f580: 057ff3800000422c ffffea0006d88508
[  317.673014][T12738] page: ffffea0005b2f590: ffffea0005d54c88 ffff8881b9831890
[  317.673020][T12738] page: ffffea0005b2f5a0: 000000000000001c ffff8881772089b0
[  317.683309][T12738] page: ffffea0005b2f5b0: 00000003ffffffff ffff8881026dde80
[  317.739114][   T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  317.834017][  T781] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  317.836874][  T781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.850918][  T781] usb 1-1: config 0 descriptor??
[  317.854483][  T781] gspca_main: cpia1-2.14.0 probing 0813:0001
[  317.891672][   T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  317.894317][   T10] usb 8-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[  317.897471][   T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  317.901071][   T10] usb 8-1: config 1 has no interface number 0
[  317.909543][   T10] usb 8-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  317.926952][   T10] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  317.938765][   T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.948023][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.951809][   T10] usb 8-1: Product: syz
[  317.951904][T14359] loop8: detected capacity change from 0 to 1024
[  317.953417][   T10] usb 8-1: Manufacturer: syz
[  317.953430][   T10] usb 8-1: SerialNumber: syz
[  317.964063][   T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  317.966150][   T10] cdc_ncm 8-1:1.1: bind() failure
[  317.985200][T14359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  318.006414][T14359] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.019751][T14359] EXT4-fs warning (device loop8): ext4_empty_dir:3097: inode #12: comm syz.8.3387: directory missing '..'
[  318.051544][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  318.183478][ T6763] usb 8-1: USB disconnect, device number 24
[  318.258451][  T781] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  318.659584][  T781] gspca_cpia1: usb_control_msg 02, error -71
[  318.661788][  T781] gspca_cpia1: usb_control_msg 05, error -71
[  318.665892][  T781] cpia1 1-1:0.0: unexpected systemstate: 00
[  318.673294][  T781] usb 1-1: USB disconnect, device number 59
[  318.895541][T14380] loop8: detected capacity change from 0 to 764
[  318.905780][T14380] rock: directory entry would overflow storage
[  318.907737][T14380] rock: sig=0x4654, size=5, remaining=4
[  318.912144][T14382] loop7: detected capacity change from 0 to 2048
[  318.935103][T14382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.945568][T14406] loop0: detected capacity change from 0 to 1024
[  320.231967][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.393604][T14417] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  320.396649][T14417] CPU: 1 UID: 0 PID: 14417 Comm: syz.0.3409 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  320.396663][T14417] Tainted: [L]=SOFTLOCKUP
[  320.396665][T14417] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  320.396670][T14417] Call Trace:
[  320.396673][T14417]  <TASK>
[  320.396678][T14417]  dump_stack_lvl+0xe8/0x150
[  320.396710][T14417]  sysfs_create_dir_ns+0x271/0x2a0
[  320.396722][T14417]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  320.396733][T14417]  ? do_raw_spin_unlock+0x4d/0x210
[  320.396746][T14417]  kobject_add_internal+0x622/0xcd0
[  320.396756][T14417]  kobject_add+0x163/0x240
[  320.396768][T14417]  ? __pfx_kobject_add+0x10/0x10
[  320.396780][T14417]  ? get_device_parent+0x366/0x3a0
[  320.396791][T14417]  device_add+0x3fa/0xb60
[  320.396802][T14417]  tty_register_device_attr+0x422/0x950
[  320.396814][T14417]  ? __pfx_tty_register_device_attr+0x10/0x10
[  320.396824][T14417]  ? tty_port_init+0x136/0x1a0
[  320.396832][T14417]  ? gsm_dlci_alloc+0x330/0x640
[  320.396841][T14417]  gsm_activate_mux+0x110/0x2a0
[  320.396851][T14417]  gsmld_ioctl+0xcf5/0x1930
[  320.396861][T14417]  ? __pfx_gsmld_ioctl+0x10/0x10
[  320.396872][T14417]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  320.396884][T14417]  ? ldsem_down_read+0x12/0x40
[  320.396895][T14417]  ? __pfx_gsmld_ioctl+0x10/0x10
[  320.396903][T14417]  tty_ioctl+0x9bd/0xdd0
[  320.396910][T14417]  ? __pfx_tty_ioctl+0x10/0x10
[  320.396917][T14417]  __se_sys_ioctl+0xfc/0x170
[  320.396924][T14417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.396932][T14417]  do_syscall_64+0x170/0xf80
[  320.396941][T14417]  ? trace_irq_disable+0x3b/0x150
[  320.396952][T14417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.396959][T14417] RIP: 0033:0x7fabcc79e019
[  320.396966][T14417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.396972][T14417] RSP: 002b:00007fabcd637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  320.396981][T14417] RAX: ffffffffffffffda RBX: 00007fabcca26090 RCX: 00007fabcc79e019
[  320.396986][T14417] RDX: 0000200000000200 RSI: 0000000040204706 RDI: 0000000000000004
[  320.396990][T14417] RBP: 00007fabcc83500c R08: 0000000000000000 R09: 0000000000000000
[  320.396995][T14417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  320.397026][T14417] R13: 00007fabcca26128 R14: 00007fabcca26090 R15: 00007ffd86931488
[  320.397045][T14417]  </TASK>
[  320.397103][T14417] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  320.510830][T14417] gsm_register_devices failed to register device minor 1
[  320.634361][T14412] Q-> 0) C: SABM(P)
[  320.637095][  T781] gsm_send_packet: 00000000: f9 03 3f 01 1c f9                                ..?...
[  320.641748][  T781] --> 0) C: SABM(P)
[  320.641764][  T781] 03 3f 01 1c                                      .?..
[  320.645055][  T781] gsmld_output: 00000000: f9 03 3f 01 1c f9                                ..?...
[  320.655778][ T9210] gsmld_receive_buf: 00000000: 5e 5c f9                                         ^\.
[  320.667751][T14424] tipc: Started in network mode
[  320.678296][T14424] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  320.692927][T14424] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  320.739331][    C1] Q-> 0) C: DISC(P)
[  320.744297][  T781] gsm_send_packet: 00000000: f9 03 53 01 fd f9                                ..S...
[  320.748278][  T781] --> 0) C: DISC(P)
[  320.748292][  T781] 03 53 01 fd                                      .S..
[  320.751796][  T781] gsmld_output: 00000000: f9 03 53 01 fd f9                                ..S...
[  320.760170][ T9210] gsmld_receive_buf: 00000000: 5e 43 53 5e 41 fd f9                             ^CS^A..
[  321.451060][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3425'.
[  321.749398][T14458] SQUASHFS error: lzo decompression failed, data probably corrupt
[  321.767368][T14458] SQUASHFS error: Failed to read block 0x91: -5
[  321.789069][T14458] SQUASHFS error: Unable to read metadata cache entry [8f]
[  321.791502][T14458] SQUASHFS error: Unable to read inode 0x11f
[  322.287540][T14465] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size.
[  322.312657][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  322.314669][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  322.746626][T14486] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  322.750305][T14486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  323.017760][T14503] vlan3: entered promiscuous mode
[  323.102840][T14504] set_capacity_and_notify: 1 callbacks suppressed
[  323.102892][T14504] zram0: detected capacity change from 0 to 8
[  323.179467][T14503] bond0: entered promiscuous mode
[  323.182186][T14503] bond_slave_0: entered promiscuous mode
[  323.188487][T14503] bond_slave_1: entered promiscuous mode
[  323.542948][T14516] loop0: detected capacity change from 0 to 256
[  323.919567][   T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  324.071652][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  324.075103][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.081589][   T10] usb 1-1: string descriptor 0 read error: -22
[  324.084111][   T10] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  324.087657][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.913353][   T10] usb 1-1: USB disconnect, device number 60
[  325.480622][T14537] loop0: detected capacity change from 0 to 128
[  325.699700][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3468'.
[  326.240120][T14570] loop0: detected capacity change from 0 to 16
[  326.245164][T14570] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  326.701368][T14574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21
[  327.084992][T14582] loop0: detected capacity change from 0 to 764
[  327.154884][T14582] 0: reclassify loop, rule prio 0, protocol 03
[  327.627458][T14614] loop8: detected capacity change from 0 to 512
[  327.656800][T14614] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3498: iget: bad i_size value: 38620345925642
[  327.665302][T14614] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  327.665533][T14614] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3498: couldn't read orphan inode 15 (err -117)
[  327.671750][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  327.671760][    C0] EXT4-fs (loop8): initial error at time 1785564201: ext4_orphan_get:1391: inode 15
[  327.671772][    C0] EXT4-fs (loop8): last error at time 1785564201: ext4_orphan_get:1391: inode 15
[  327.682924][T14614] loop8: lost filesystem error report for type 5 error -117
[  327.683775][T14614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.692953][T14614] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3498: bg 0: block 5: invalid block bitmap
[  327.709909][T14614] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  327.719426][T14614] EXT4-fs (loop8): This should not happen!! Data will be lost
[  327.719426][T14614] 
[  327.722297][T14614] EXT4-fs (loop8): Total free blocks count 0
[  327.724075][T14614] EXT4-fs (loop8): Free/Dirty block details
[  327.734266][T14614] EXT4-fs (loop8): free_blocks=0
[  327.735821][T14614] EXT4-fs (loop8): dirty_blocks=2
[  327.744395][T14614] EXT4-fs (loop8): Block reservation details
[  327.746197][T14614] EXT4-fs (loop8): i_reserved_data_blocks=2
[  327.753323][   T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  327.767694][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.899084][   T10] usb 1-1: Using ep0 maxpacket: 16
[  327.906273][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.918074][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  327.923272][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.925647][   T10] usb 1-1: Product: syz
[  327.930744][   T10] usb 1-1: Manufacturer: syz
[  327.932264][   T10] usb 1-1: SerialNumber: syz
[  327.951013][   T10] usb 1-1: config 0 descriptor??
[  327.961855][   T10] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (046d:0721)
[  327.963989][   T10] uvcvideo 1-1:0.0: No valid video chain found.
[  328.277262][  T781] usb 1-1: USB disconnect, device number 61
[  328.816640][T14627] loop8: detected capacity change from 0 to 128
[  328.851162][T14627] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  328.869784][T14627] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.030197][T13116] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  329.539097][ T5699] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  329.689236][ T5699] usb 8-1: Using ep0 maxpacket: 16
[  329.700640][ T5699] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  329.704206][ T5699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  329.709577][ T5699] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  329.712491][ T5699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.715159][ T5699] usb 8-1: Product: syz
[  329.716693][ T5699] usb 8-1: Manufacturer: syz
[  329.718157][ T5699] usb 8-1: SerialNumber: syz
[  329.730326][ T5699] usb 8-1: config 0 descriptor??
[  329.733857][ T5699] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  329.736866][ T5699] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  330.342133][ T5699] em28xx 8-1:0.0: chip ID is em28178
[  330.551762][ T5699] usb 8-1: USB disconnect, device number 25
[  330.565263][ T5699] em28xx 8-1:0.0: Disconnecting em28xx
[  330.585126][ T5699] em28xx 8-1:0.0: Freeing device
[  331.206219][T14674] loop7: detected capacity change from 0 to 512
[  331.208617][T14674] EXT4-fs: Invalid want_extra_isize -1
[  331.423639][T14679] loop0: detected capacity change from 0 to 256
[  331.602390][T14679] loop0: detected capacity change from 0 to 256
[  331.604795][T14679] exfat: Deprecated parameter 'utf8'
[  331.606443][T14679] exfat: Deprecated parameter 'namecase'
[  331.629130][T14679] exfat: Deprecated parameter 'namecase'
[  331.808271][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3528'.
[  332.132063][T14697] loop7: detected capacity change from 0 to 512
[  332.160334][T14697] EXT4-fs: Ignoring removed orlov option
[  332.162714][T14697] EXT4-fs: Ignoring removed mblk_io_submit option
[  332.186662][T14697] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.3533: corrupted in-inode xattr: e_value size too large
[  332.209087][T14697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  332.209441][T14697] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3533: couldn't read orphan inode 15 (err -117)
[  332.219087][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  332.221729][    C1] EXT4-fs (loop7): initial error at time 1785564205: ext4_iget_extra_inode:5025: inode 15
[  332.225501][    C1] EXT4-fs (loop7): last error at time 1785564205: ext4_iget_extra_inode:5025: inode 15
[  332.230826][T14697] loop7: lost filesystem error report for type 5 error -117
[  332.244578][T14697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.353448][T14703] loop8: detected capacity change from 0 to 512
[  332.358942][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.364061][T14703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.382002][T14703] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.399361][T14703] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  332.470995][T13116] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.534453][T14711] loop7: detected capacity change from 0 to 256
[  332.679107][ T5699] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  332.696084][T14710] loop8: detected capacity change from 0 to 32768
[  332.702629][T14710] btrfs: Deprecated parameter 'usebackuproot'
[  332.704465][T14710] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  332.715458][T14710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3538 (14710)
[  332.721311][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3540'.
[  332.724425][T14715] macvlan0: entered promiscuous mode
[  332.726226][T14715] netlink: 'syz.7.3540': attribute type 1 has an invalid length.
[  332.728731][T14715] netlink: 'syz.7.3540': attribute type 2 has an invalid length.
[  332.744225][T14710] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  332.747397][T14710] BTRFS info (device loop8): using crc32c checksum algorithm
[  332.754751][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3540'.
[  332.801104][T12015] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  332.824566][T14710] BTRFS error (device loop8): failed to load root extent
[  332.827279][T14710] BTRFS warning (device loop8): try to load backup roots slot 1
[  332.836167][T12015] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  332.844322][T14710] BTRFS warning (device loop8): couldn't read tree root
[  332.846757][T14710] BTRFS warning (device loop8): try to load backup roots slot 2
[  332.850594][ T5699] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.855245][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  332.860264][T13881] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  332.864478][T14710] BTRFS warning (device loop8): couldn't read tree root
[  332.879234][T14710] BTRFS warning (device loop8): try to load backup roots slot 3
[  332.882249][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.885974][ T5699] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  332.888670][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.910180][T14710] BTRFS info (device loop8): rebuilding free space tree
[  332.918490][ T5699] usb 1-1: config 0 descriptor??
[  332.998411][T14710] BTRFS info (device loop8): checking UUID tree
[  333.009768][T14710] BTRFS info (device loop8): enabling ssd optimizations
[  333.019384][T14710] BTRFS info (device loop8): turning off barriers
[  333.021957][T14710] BTRFS info (device loop8): turning on sync discard
[  333.024704][T14710] BTRFS info (device loop8): enabling free space tree
[  333.043731][T14710] BTRFS info (device loop8): force clearing of disk cache
[  333.047011][T14710] BTRFS info (device loop8): enabling auto defrag
[  333.065341][ T6763] IPVS: starting estimator thread 0...
[  333.068427][T14744] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  333.069091][T14710] BTRFS info (device loop8): trying to use backup root at mount time
[  333.074854][T14710] BTRFS info (device loop8): use zlib compression, level 3
[  333.077847][T14710] BTRFS info (device loop8): max_inline set to 0
[  333.149108][T14745] IPVS: using max 87 ests per chain, 208800 per kthread
[  333.208622][T13116] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  333.391176][ T5699] hid-picolcd 0003:04D8:F002.0017: invalid report_size 12130
[  333.393699][ T5699] hid-picolcd 0003:04D8:F002.0017: item 0 2 1 7 parsing failed
[  333.396393][ T5699] hid-picolcd 0003:04D8:F002.0017: device report parse failed
[  333.409106][ T5699] hid-picolcd 0003:04D8:F002.0017: probe with driver hid-picolcd failed with error -22
[  333.414180][T14749] loop7: detected capacity change from 0 to 4096
[  333.463782][T14749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.492401][T14749] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  333.496838][T14749] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  333.529515][T14749] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3549: Failed to acquire dquot type 1
[  333.573233][  T781] usb 1-1: USB disconnect, device number 62
[  333.594755][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.809944][T14772] loop7: detected capacity change from 0 to 512
[  333.815412][T14772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  333.829155][T14772] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3559: iget: bad i_size value: 38620345925642
[  333.835407][T14772] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  333.835842][T14772] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3559: couldn't read orphan inode 15 (err -117)
[  333.842893][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  333.842903][    C0] EXT4-fs (loop7): initial error at time 1785564207: ext4_orphan_get:1391: inode 15
[  333.842915][    C0] EXT4-fs (loop7): last error at time 1785564207: ext4_orphan_get:1391: inode 15
[  333.856783][T14772] loop7: lost filesystem error report for type 5 error -117
[  333.857651][T14772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.125043][T14776] loop0: detected capacity change from 0 to 512
[  334.340748][T13881] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u9:43: bg 0: block 5: invalid block bitmap
[  334.351796][T13881] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  334.356204][T13881] EXT4-fs (loop7): This should not happen!! Data will be lost
[  334.356204][T13881] 
[  334.361829][T13881] EXT4-fs (loop7): Total free blocks count 0
[  334.363619][T13881] EXT4-fs (loop7): Free/Dirty block details
[  334.365354][T13881] EXT4-fs (loop7): free_blocks=0
[  334.366869][T13881] EXT4-fs (loop7): dirty_blocks=16000
[  334.368466][T13881] EXT4-fs (loop7): Block reservation details
[  334.370598][T13881] EXT4-fs (loop7): i_reserved_data_blocks=16000
[  334.425863][T13885] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  334.673909][T14785] overlayfs: missing 'lowerdir'
[  335.130172][  T781] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  335.282555][  T781] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.286347][  T781] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  335.290332][  T781] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  335.294633][  T781] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  335.297733][  T781] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.303391][  T781] usb 8-1: config 0 descriptor??
[  335.509856][  T781] ath6kl: Failed to submit usb control message: -71
[  335.513465][  T781] ath6kl: unable to send the bmi data to the device: -71
[  335.517624][  T781] ath6kl: Unable to send get target info: -71
[  335.532523][  T781] ath6kl: Failed to init ath6kl core: -71
[  335.534976][  T781] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[  335.549630][  T781] usb 8-1: USB disconnect, device number 26
[  337.375257][T14819] BUG: Bad page state in process syz.8.3578  pfn:1a0f7a
[  337.384875][T14819] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x1a0f7a
[  337.395782][T14819] flags: 0x57ff0000002090c(referenced|uptodate|active|owner_2|swapbacked|node=1|zone=2|lastcpupid=0x7ff)
[  337.418799][T14819] raw: 057ff0000002090c 0000000000000000 dead000000000122 0000000000000000
[  337.422128][T13881] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x1a0f7a
[  337.425861][T13881] flags: 0x57ff0000002090c(referenced|uptodate|active|owner_2|swapbacked|node=1|zone=2|lastcpupid=0x7ff)
[  337.430070][T13881] raw: 057ff0000002090c 0000000000000000 dead000000000122 0000000000000000
[  337.433192][T13881] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000
[  337.436183][T13881] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled())
[  337.439313][T13881] page_owner tracks the page as allocated
[  337.441704][T13881] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 14819, tgid 14819 (syz.8.3578), ts 337372764703, free_ts 337304164051
[  337.447733][T13881]  post_alloc_hook+0x231/0x280
[  337.449727][T13881]  get_page_from_freelist+0x2503/0x25a0
[  337.451794][T13881]  __alloc_frozen_pages_noprof+0x18d/0x380
[  337.453938][T13881]  alloc_pages_mpol+0x22b/0x390
[  337.455734][T13881]  vma_alloc_folio_noprof+0xea/0x210
[  337.457599][T13881]  do_pte_missing+0x172b/0x39a0
[  337.459754][T13881]  handle_mm_fault+0x1b11/0x3270
[  337.462844][T13881]  do_user_addr_fault+0xa4d/0x1340
[  337.465059][T13881]  exc_page_fault+0x6a/0xc0
[  337.466938][T13881]  asm_exc_page_fault+0x26/0x30
[  337.468935][T13881] page last free pid 14816 tgid 14816 stack trace:
[  337.471665][T13881]  free_unref_folios+0xf29/0x1740
[  337.473853][T13881]  folios_put_refs+0x795/0x8d0
[  337.475866][T13881]  free_pages_and_swap_cache+0x525/0x590
[  337.478159][T13881]  tlb_flush_mmu+0x6d3/0xa30
[  337.480128][T13881]  unmap_page_range+0x3c70/0x48f0
[  337.482218][T13881]  unmap_vmas+0x462/0x680
[  337.484072][T13881]  exit_mmap+0x292/0xa20
[  337.485869][T13881]  __mmput+0x118/0x420
[  337.487232][T13881]  exit_mm+0x160/0x210
[  337.488749][T13881]  do_exit+0x6cd/0x2460
[  337.490525][T13881]  do_group_exit+0x22d/0x2f0
[  337.492264][T13881]  __x64_sys_exit_group+0x3f/0x40
[  337.494205][T13881]  x64_sys_call+0x221a/0x2240
[  337.495727][T13881]  do_syscall_64+0x170/0xf80
[  337.497245][T13881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.499232][T13881] ------------[ cut here ]------------
[  337.500977][T13881] 1
[  337.500982][T13881] WARNING: ./include/linux/memcontrol.h:744 at folio_lruvec_lock_irqsave+0x26b/0x3d0, CPU#1: kworker/u9:43/13881
[  337.505423][T13881] Modules linked in:
[  337.506712][T13881] CPU: 1 UID: 0 PID: 13881 Comm: kworker/u9:43 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  337.510363][T13881] Tainted: [L]=SOFTLOCKUP
[  337.511770][T13881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.514928][T13881] Workqueue: writeback wb_workfn (flush-8:0)
[  337.516827][T13881] RIP: 0010:folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.518799][T13881] Code: 80 3c 2c 00 74 08 4c 89 f7 e8 f1 9a f7 ff 49 89 2e eb a4 4c 89 ef 48 c7 c6 40 9f dc 8b e8 dd 5c f0 fe c6 05 89 97 c3 0d 01 90 <0f> 0b 90 e9 c1 fe ff ff 90 0f 0b 90 e9 87 fe ff ff 44 89 e1 80 e1
[  337.524915][T13881] RSP: 0018:ffffc90003c16840 EFLAGS: 00010246
[  337.526872][T13881] RAX: f8c1cd9d1f368200 RBX: 0000000000000004 RCX: 0000000000000001
[  337.529369][T13881] RDX: 0000000000000005 RSI: ffffffff8e16cbd8 RDI: ffff888110803b00
[  337.531850][T13881] RBP: ffffc90003c168e0 R08: 0000000000000003 R09: 0000000000000004
[  337.534351][T13881] R10: dffffc0000000000 R11: fffffbfff1cbd3d0 R12: ffffea000683deb0
[  337.536857][T13881] R13: ffffea000683de80 R14: dffffc0000000000 R15: 0000000000000000
[  337.539387][T13881] FS:  0000000000000000(0000) GS:ffff8882a9452000(0000) knlGS:0000000000000000
[  337.542152][T13881] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.544238][T13881] CR2: 000055eafcf60000 CR3: 000000016d42c000 CR4: 00000000000006f0
[  337.546743][T13881] Call Trace:
[  337.547867][T13881]  <TASK>
[  337.548844][T13881]  folio_batch_move_lru+0x284/0x430
[  337.550671][T13881]  ? bio_alloc_bioset+0x897/0x1150
[  337.552436][T13881]  ? __pfx_lru_add+0x10/0x10
[  337.554018][T13881]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  337.556049][T13881]  ? lock_acquire+0xf0/0x2e0
[  337.557778][T13881]  lru_add_drain_cpu+0xbc/0x750
[  337.559772][T13881]  ? lru_add_drain+0x79/0x3e0
[  337.561711][T13881]  lru_add_drain+0x121/0x3e0
[  337.563286][T13881]  __folio_batch_release+0x48/0x90
[  337.565250][T13881]  mpage_prepare_extent_to_map+0x1364/0x1690
[  337.567422][T13881]  ? writeback_sb_inodes+0x9eb/0x1b30
[  337.569509][T13881]  ? __writeback_inodes_wb+0x114/0x240
[  337.571794][T13881]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  337.574484][T13881]  ? kmem_cache_alloc_noprof+0x303/0x650
[  337.576751][T13881]  ? ext4_init_io_end+0x29/0x130
[  337.578860][T13881]  ext4_do_writepages+0xc80/0x4820
[  337.581238][T13881]  ? kasan_quarantine_put+0xbb/0x1f0
[  337.583400][T13881]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.585120][T13881]  ? cfg80211_inform_single_bss_data+0x13de/0x1b80
[  337.587167][T13881]  ? __pfx_ext4_do_writepages+0x10/0x10
[  337.589246][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.591372][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.593492][T13881]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  337.595866][T13881]  ext4_writepages+0x241/0x3b0
[  337.597899][T13881]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.600168][T13881]  ? __pfx_ext4_writepages+0x10/0x10
[  337.602387][T13881]  ? do_raw_spin_unlock+0x4d/0x210
[  337.604581][T13881]  ? __pfx_ext4_writepages+0x10/0x10
[  337.606714][T13881]  do_writepages+0x338/0x560
[  337.608398][T13881]  ? reacquire_held_locks+0x104/0x190
[  337.610238][T13881]  ? writeback_sb_inodes+0x46a/0x1b30
[  337.611935][T13881]  __writeback_single_inode+0x12e/0x1050
[  337.613703][T13881]  writeback_sb_inodes+0x9eb/0x1b30
[  337.615363][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.616935][T13881]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  337.618949][T13881]  ? __pfx_down_read_trylock+0x10/0x10
[  337.621323][T13881]  __writeback_inodes_wb+0x114/0x240
[  337.623576][T13881]  wb_writeback+0x439/0xb40
[  337.625516][T13881]  ? queue_io+0x2d1/0x4a0
[  337.627376][T13881]  ? __pfx_wb_writeback+0x10/0x10
[  337.629527][T13881]  ? do_raw_spin_lock+0x12b/0x2f0
[  337.631617][T13881]  wb_workfn+0xb4c/0xf50
[  337.633009][T13881]  ? __pfx_wb_workfn+0x10/0x10
[  337.634535][T13881]  ? rcu_is_watching+0x15/0xb0
[  337.636145][T13881]  ? process_scheduled_works+0x9bd/0x1470
[  337.637944][T13881]  process_scheduled_works+0xa2f/0x1470
[  337.640463][T13881]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.642912][T13881]  ? assign_work+0x3cf/0x5d0
[  337.644887][T13881]  worker_thread+0xa44/0xfb0
[  337.646493][T13881]  kthread+0x388/0x470
[  337.647830][T13881]  ? __pfx_worker_thread+0x10/0x10
[  337.650006][T13881]  ? __pfx_kthread+0x10/0x10
[  337.651947][T13881]  ret_from_fork+0x51e/0xb90
[  337.653908][T13881]  ? __pfx_ret_from_fork+0x10/0x10
[  337.656077][T13881]  ? __switch_to+0xc7d/0x1450
[  337.658080][T13881]  ? __pfx_kthread+0x10/0x10
[  337.659771][T13881]  ret_from_fork_asm+0x1a/0x30
[  337.661434][T13881]  </TASK>
[  337.662531][T13881] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  337.665003][T13881] CPU: 1 UID: 0 PID: 13881 Comm: kworker/u9:43 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  337.668636][T13881] Tainted: [L]=SOFTLOCKUP
[  337.670113][T13881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.673353][T13881] Workqueue: writeback wb_workfn (flush-8:0)
[  337.675329][T13881] Call Trace:
[  337.676441][T13881]  <TASK>
[  337.677457][T13881]  vpanic+0x56c/0xa60
[  337.678928][T13881]  ? __pfx__printk+0x10/0x10
[  337.680765][T13881]  ? __pfx_vpanic+0x10/0x10
[  337.682582][T13881]  ? is_bpf_text_address+0x292/0x2b0
[  337.684491][T13881]  ? is_bpf_text_address+0x26/0x2b0
[  337.686083][T13881]  panic+0xc5/0xd0
[  337.687271][T13881]  ? __pfx_panic+0x10/0x10
[  337.688841][T13881]  ? ret_from_fork_asm+0x1a/0x30
[  337.690873][T13881]  __warn+0x315/0x4f0
[  337.692514][T13881]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.694546][T13881]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.696333][T13881]  __report_bug+0x28e/0x530
[  337.697751][T13881]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.700005][T13881]  ? __pfx___report_bug+0x10/0x10
[  337.702063][T13881]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.704408][T13881]  report_bug+0x16a/0x220
[  337.705819][T13881]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.707747][T13881]  ? folio_lruvec_lock_irqsave+0x26d/0x3d0
[  337.709768][T13881]  handle_bug+0x9c/0x200
[  337.711180][T13881]  exc_invalid_op+0x1a/0x50
[  337.712749][T13881]  asm_exc_invalid_op+0x1a/0x20
[  337.714650][T13881] RIP: 0010:folio_lruvec_lock_irqsave+0x26b/0x3d0
[  337.717069][T13881] Code: 80 3c 2c 00 74 08 4c 89 f7 e8 f1 9a f7 ff 49 89 2e eb a4 4c 89 ef 48 c7 c6 40 9f dc 8b e8 dd 5c f0 fe c6 05 89 97 c3 0d 01 90 <0f> 0b 90 e9 c1 fe ff ff 90 0f 0b 90 e9 87 fe ff ff 44 89 e1 80 e1
[  337.724536][T13881] RSP: 0018:ffffc90003c16840 EFLAGS: 00010246
[  337.726992][T13881] RAX: f8c1cd9d1f368200 RBX: 0000000000000004 RCX: 0000000000000001
[  337.730113][T13881] RDX: 0000000000000005 RSI: ffffffff8e16cbd8 RDI: ffff888110803b00
[  337.733087][T13881] RBP: ffffc90003c168e0 R08: 0000000000000003 R09: 0000000000000004
[  337.735516][T13881] R10: dffffc0000000000 R11: fffffbfff1cbd3d0 R12: ffffea000683deb0
[  337.738363][T13881] R13: ffffea000683de80 R14: dffffc0000000000 R15: 0000000000000000
[  337.741624][T13881]  folio_batch_move_lru+0x284/0x430
[  337.743726][T13881]  ? bio_alloc_bioset+0x897/0x1150
[  337.745798][T13881]  ? __pfx_lru_add+0x10/0x10
[  337.747720][T13881]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  337.749835][T13881]  ? lock_acquire+0xf0/0x2e0
[  337.751291][T13881]  lru_add_drain_cpu+0xbc/0x750
[  337.752818][T13881]  ? lru_add_drain+0x79/0x3e0
[  337.754280][T13881]  lru_add_drain+0x121/0x3e0
[  337.755703][T13881]  __folio_batch_release+0x48/0x90
[  337.757287][T13881]  mpage_prepare_extent_to_map+0x1364/0x1690
[  337.759455][T13881]  ? writeback_sb_inodes+0x9eb/0x1b30
[  337.761662][T13881]  ? __writeback_inodes_wb+0x114/0x240
[  337.763881][T13881]  ? __pfx_mpage_prepare_extent_to_map+0x10/0x10
[  337.766457][T13881]  ? kmem_cache_alloc_noprof+0x303/0x650
[  337.768749][T13881]  ? ext4_init_io_end+0x29/0x130
[  337.770468][T13881]  ext4_do_writepages+0xc80/0x4820
[  337.772205][T13881]  ? kasan_quarantine_put+0xbb/0x1f0
[  337.773825][T13881]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.775429][T13881]  ? cfg80211_inform_single_bss_data+0x13de/0x1b80
[  337.777416][T13881]  ? __pfx_ext4_do_writepages+0x10/0x10
[  337.779479][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.781488][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.783536][T13881]  ? update_cfs_rq_load_avg+0x426/0x4e0
[  337.785804][T13881]  ext4_writepages+0x241/0x3b0
[  337.787554][T13881]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.789639][T13881]  ? __pfx_ext4_writepages+0x10/0x10
[  337.791811][T13881]  ? do_raw_spin_unlock+0x4d/0x210
[  337.793897][T13881]  ? __pfx_ext4_writepages+0x10/0x10
[  337.796108][T13881]  do_writepages+0x338/0x560
[  337.798030][T13881]  ? reacquire_held_locks+0x104/0x190
[  337.800196][T13881]  ? writeback_sb_inodes+0x46a/0x1b30
[  337.802356][T13881]  __writeback_single_inode+0x12e/0x1050
[  337.804627][T13881]  writeback_sb_inodes+0x9eb/0x1b30
[  337.806740][T13881]  ? __lock_acquire+0x683/0x2cd0
[  337.808712][T13881]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  337.810508][T13881]  ? __pfx_down_read_trylock+0x10/0x10
[  337.812283][T13881]  __writeback_inodes_wb+0x114/0x240
[  337.814163][T13881]  wb_writeback+0x439/0xb40
[  337.815988][T13881]  ? queue_io+0x2d1/0x4a0
[  337.817650][T13881]  ? __pfx_wb_writeback+0x10/0x10
[  337.819695][T13881]  ? do_raw_spin_lock+0x12b/0x2f0
[  337.821710][T13881]  wb_workfn+0xb4c/0xf50
[  337.823426][T13881]  ? __pfx_wb_workfn+0x10/0x10
[  337.825002][T13881]  ? rcu_is_watching+0x15/0xb0
[  337.826518][T13881]  ? process_scheduled_works+0x9bd/0x1470
[  337.828343][T13881]  process_scheduled_works+0xa2f/0x1470
[  337.830585][T13881]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.833019][T13881]  ? assign_work+0x3cf/0x5d0
[  337.834903][T13881]  worker_thread+0xa44/0xfb0
[  337.836655][T13881]  kthread+0x388/0x470
[  337.838210][T13881]  ? __pfx_worker_thread+0x10/0x10
[  337.840307][T13881]  ? __pfx_kthread+0x10/0x10
[  337.842211][T13881]  ret_from_fork+0x51e/0xb90
[  337.844098][T13881]  ? __pfx_ret_from_fork+0x10/0x10
[  337.845681][T13881]  ? __switch_to+0xc7d/0x1450
[  337.847122][T13881]  ? __pfx_kthread+0x10/0x10
[  337.848706][T13881]  ret_from_fork_asm+0x1a/0x30
[  337.850666][T13881]  </TASK>
[  337.852659][T13881] Kernel Offset: disabled
[  337.854438][T13881] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:03:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffc90003e36880 RCX=ffff8880120b9d80 RDX=0000000000000000
RSI=0000000000000002 RDI=0000000000000002 RBP=0000000000000001 RSP=ffffc90003e367b8
R8 =ffffffff8ba75b26 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8e75d000
R12=ffff8881131e141e R13=0000000000000002 R14=dffffc0000000000 R15=1ffff920007c6d19
RIP=ffffffff8ba6005c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7d570646c0 ffffffff 00c00000
GS =0000 ffff88818de52000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557d0724a0 CR3=000000010ba38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f7d56f5d560
XMM02=00007f7d563f25e8 00007f7d563f2618 XMM03=00007f7d563f2600 00007f7d563f25e0
XMM04=00007f7d56f5d020 00007f7d563f25c0 XMM05=00007f7d563f25d0 00007f7d563f2610
XMM06=00007f7d563f25f8 00007f7d563f25c8 XMM07=00007f7d563f2600 00007f7d563f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f03355354468e700 RBX=0000000000000246 RCX=0000000080000001 RDX=00000000825b62ad
RSI=ffffffff8e16cbd8 RDI=ffffffff8c28adc0 RBP=0000000000000000 RSP=ffffc9000a6ffa08
R8 =ffffffff84b9f492 R9 =0000000000000000 R10=0000000000000000 R11=ffff8881b6090418
R12=0000000000000000 R13=ffff8881b6090418 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff810014b0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f324e06d6c0 ffffffff 00c00000
GS =0000 ffff8882a9452000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055eafcf60000 CR3=00000001aca52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00327265636e6575 7165732f7665642f
XMM02=8c347f6237aa4dd7 3fcd127cac4a7181 XMM03=794dcd4d18c464be 9ae267f9c8a878a8
XMM04=0ac6a896d9290108 5be8c8c9dd11c896 XMM05=db333a96ab63cca3 dae9723f3e7d1ad9
XMM06=2e08ba3fc05f5e1c 664bd1d4e6a94bab XMM07=5be8c8c9dd11c896 2376969afef0bfb5
XMM08=0ad1e3cbb7ea0a55 d1dada7d0f6c8aaa XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
