last executing test programs:

4m13.910699623s ago: executing program 1 (id=510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)={0x78, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x4, @random="c88ae534"}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xc, 0xba}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x8, 0x91, "de4cbb45"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x20000014)

4m13.787457456s ago: executing program 1 (id=503):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x54d, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c8", 0x1}], 0x1}}], 0x1, 0x55)
sendto$inet6(r0, &(0x7f0000000540)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7, 0x5bae, 0xa, 0x3, 0x4, 0x2, 0x30, {0x0, @in6={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x4, 0x1, 0xabd, 0x6, 0x3}}, &(0x7f00000001c0)=0xb0)

4m12.82076684s ago: executing program 1 (id=507):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x105042, 0x1d3)
writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000240)="30e6", 0x2}], 0x1)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1)

4m12.096604377s ago: executing program 1 (id=509):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m11.390901185s ago: executing program 1 (id=518):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b0001000000000904"], 0x0)
mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TCSETSF2(r0, 0x541e, &(0x7f0000000140)={0x4, 0x5, 0x1e, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8})

4m10.603193614s ago: executing program 1 (id=524):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

4m10.179275644s ago: executing program 32 (id=524):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

4m3.879592648s ago: executing program 3 (id=548):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000200)={0x31, 0x17, 0x1, {0x28, './sys/class/net/bridge0/bridge/stp_state'}}, 0x31)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x1800011, &(0x7f0000000440)={[{@nombcache}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0x33e}}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$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")

4m2.612568959s ago: executing program 3 (id=550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)

4m2.261632978s ago: executing program 3 (id=552):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x8c)

4m2.062128303s ago: executing program 3 (id=554):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m1.419331068s ago: executing program 3 (id=556):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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")
mount$overlay(0x0, &(0x7f0000005480)='./file0\x00', &(0x7f00000054c0), 0x0, &(0x7f0000005500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3ff, 0x1)
getdents64(r0, 0x0, 0x0)

3m58.401724312s ago: executing program 3 (id=567):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x21f58d9, 0x0)

3m57.481599884s ago: executing program 33 (id=567):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x21f58d9, 0x0)

3m19.036591634s ago: executing program 2 (id=758):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000081)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

3m18.903651958s ago: executing program 2 (id=759):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x40, 0x9, 0x3, {{0x14, 0x4, 0x3, 0x3b, 0x50, 0x68, 0x0, 0xf, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x2c, 0x9b, 0x1, 0x9, [{@rand_addr=0x64010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x7ceb4910}, {@remote, 0x101}, {@broadcast, 0x101}, {@private=0xa010101, 0x4e9}]}, @timestamp={0x44, 0x10, 0x92, 0x0, 0x7, [0x7, 0x4, 0x200]}]}}}}})
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100005800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)

3m18.81401648s ago: executing program 2 (id=760):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b01, 0x0)

3m16.703911331s ago: executing program 2 (id=773):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0)

3m16.135273555s ago: executing program 2 (id=775):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

3m15.876130932s ago: executing program 2 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33)

3m14.676523001s ago: executing program 34 (id=777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xe, 0x2, 0x9}}]}, 0x38}}, 0x4000010)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe"], 0xfe33)

1m56.858225493s ago: executing program 0 (id=1427):
io_uring_enter(0xffffffffffffffff, 0x2883, 0xf1bd, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa7)

1m56.687164158s ago: executing program 0 (id=1428):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0})
dup(r1)
close_range(r0, r1, 0x0)

1m56.408375704s ago: executing program 0 (id=1440):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000004)

1m54.172963879s ago: executing program 0 (id=1453):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0)

1m54.047387022s ago: executing program 0 (id=1445):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400e46000000460007ddd9643c7c3d2a801ecc79692807372e0500000094c271db5596"], 0x0, 0x0, 0x0, 0x0}, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
clock_nanosleep(0x8, 0x300, 0x0, 0x0)

1m52.438297312s ago: executing program 0 (id=1449):
r0 = eventfd2(0x0, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(r0, 0xffffffffffffffff, 0x0)

1m51.898575945s ago: executing program 35 (id=1449):
r0 = eventfd2(0x0, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
close_range(r0, 0xffffffffffffffff, 0x0)

2.500497119s ago: executing program 4 (id=2575):
socket$rds(0x15, 0x5, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4e21, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="c963b8b7b00c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddfc4f9c023b431968db6dbc868705956f8baf975b8cb6e17048050e8e89f732bced1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0)

2.363710642s ago: executing program 5 (id=2577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002a40)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x200cc0c4)

2.304275023s ago: executing program 5 (id=2578):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f2"}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0xdc0a51ee460f8376}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0)

2.303095303s ago: executing program 4 (id=2579):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040a0404"], 0x7)
mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

2.129179068s ago: executing program 6 (id=2581):
pipe2(&(0x7f0000000540)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
pipe2(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
fcntl$setstatus(r2, 0x4, 0x46800)
splice(r0, 0x0, r3, 0x0, 0x3ff, 0x2)

2.050904559s ago: executing program 5 (id=2583):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000780)=ANY=[@ANYRES8=0x0], 0x3, 0xd99, &(0x7f0000006900)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')

1.856755845s ago: executing program 5 (id=2585):
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000040)=ANY=[@ANYBLOB='showassoc,session=0x00001e,map=acorn,\x00'/48], 0x1, 0x566, &(0x7f0000000ac0)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=")
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x1, 0x1}}}, &(0x7f0000000300)=<r5=>0x0)
syz_ublk_setup_queues(r4, r5, &(0x7f0000000700)={0x0, 0xc766, 0x0, 0x0, 0x3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x40, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0x23b}}], 0x1, 0x0, 0x0)

1.744328697s ago: executing program 5 (id=2587):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d})
ppoll(&(0x7f0000000140)=[{r1, 0xc}, {r0, 0x4180}], 0x2, 0x0, 0x0, 0x0)

1.510300443s ago: executing program 4 (id=2590):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x400}}}}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050)

1.335921377s ago: executing program 4 (id=2591):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0)
syz_usb_disconnect(r0)

1.244759379s ago: executing program 6 (id=2592):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ppoll(&(0x7f0000000040)=[{r0, 0x90}], 0x1, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x2c)
sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}}], 0x1, 0x34000811)

959.585506ms ago: executing program 7 (id=2595):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1)
dup2(r1, r0)

843.452989ms ago: executing program 7 (id=2596):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}, 0x804}], 0x1, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

819.30746ms ago: executing program 5 (id=2597):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@nodiscard}, {}]}, 0x2, 0xb9a7, &(0x7f000000c1c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3})

651.789694ms ago: executing program 7 (id=2598):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0)

589.573855ms ago: executing program 4 (id=2599):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
remap_file_pages(&(0x7f00008da000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x24010)

566.105946ms ago: executing program 7 (id=2600):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f00000003c0)={r2}, &(0x7f0000000400)=0x8)

485.034808ms ago: executing program 4 (id=2601):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

335.704931ms ago: executing program 7 (id=2602):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a3ec, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50)

317.479872ms ago: executing program 6 (id=2603):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x10, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
recvmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}, 0x5e}], 0x1, 0x40, 0x0)

229.669274ms ago: executing program 7 (id=2604):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
fanotify_init(0x40, 0x1000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]})
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

115.443767ms ago: executing program 6 (id=2605):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={r1, 0xff86}, &(0x7f0000000640)=0x8)

79.050518ms ago: executing program 6 (id=2606):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff}, 0x6)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000004c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

0s ago: executing program 6 (id=2607):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0)
syz_usb_disconnect(r0)

kernel console output (not intermixed with test programs):

][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.743962][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.759935][ T7514] ªªªªª»: renamed from vlan0 (while UP)
[  191.911631][ T7296] veth0_vlan: entered promiscuous mode
[  191.925912][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.937982][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.965570][ T5085] Bluetooth: hci1: command tx timeout
[  191.973454][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.019864][ T7296] veth1_vlan: entered promiscuous mode
[  192.278914][ T7455] hsr_slave_0: entered promiscuous mode
[  192.301201][ T7455] hsr_slave_1: entered promiscuous mode
[  192.320050][ T7455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.366378][ T7455] Cannot create hsr debugfs directory
[  192.663155][ T6672] hsr_slave_0: left promiscuous mode
[  192.671583][ T6672] hsr_slave_1: left promiscuous mode
[  192.683784][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.702997][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.711441][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.732417][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.751455][ T6672] bridge_slave_1: left allmulticast mode
[  192.762097][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.773176][ T6672] bridge_slave_0: left allmulticast mode
[  192.781529][ T6672] bridge_slave_0: left promiscuous mode
[  192.788704][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.835008][ T6672] veth1_macvtap: left promiscuous mode
[  192.843817][ T6672] veth0_macvtap: left promiscuous mode
[  192.861064][ T6672] veth1_vlan: left promiscuous mode
[  192.867884][ T6672] veth0_vlan: left promiscuous mode
[  193.556874][ T7534] loop2: detected capacity change from 0 to 32768
[  193.631568][ T7534] syz.2.580: attempt to access beyond end of device
[  193.631568][ T7534] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  193.677951][ T7534] lbmIODone: I/O error in JFS log
[  193.684104][ T7534] *** Log Format Error ! ***
[  193.711545][ T7534] lmLogInit: exit(-22)
[  193.716675][ T7534] lmLogOpen: exit(-22)
[  193.798103][ T7534] jfs_dirty_inode called on read-only volume
[  193.804997][ T7534] Is remount racy?
[  193.817768][ T7540] jfs_dirty_inode called on read-only volume
[  193.839676][ T7540] Is remount racy?
[  193.849478][ T7540] jfs_dirty_inode called on read-only volume
[  193.855729][ T7540] Is remount racy?
[  193.900834][ T7540] jfs_dirty_inode called on read-only volume
[  193.909606][ T7540] Is remount racy?
[  193.963761][ T5763] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  194.028293][ T5085] Bluetooth: hci1: command tx timeout
[  194.158652][ T5763] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  194.176748][ T5763] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  194.214975][ T5763] usb 1-1: config 220 has no interface number 2
[  194.230695][ T5763] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  194.264695][ T5763] usb 1-1: config 220 interface 0 has no altsetting 0
[  194.272515][ T5763] usb 1-1: config 220 interface 76 has no altsetting 0
[  194.290014][ T5763] usb 1-1: config 220 interface 1 has no altsetting 0
[  194.303255][ T7542] loop2: detected capacity change from 0 to 128
[  194.314905][ T5763] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  194.327858][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.336960][ T5763] usb 1-1: Product: syz
[  194.341207][ T5763] usb 1-1: Manufacturer: syz
[  194.345864][ T5763] usb 1-1: SerialNumber: syz
[  194.372529][ T7542] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.397753][ T7542] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.485642][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.513556][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.521621][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.640384][ T5763] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  194.659830][ T5763] usb 1-1: No valid video chain found.
[  194.665542][ T5763] usb 1-1: selecting invalid altsetting 0
[  194.695811][ T5763] usb 1-1: selecting invalid altsetting 0
[  194.702001][ T6672] team0 (unregistering): Port device team_slave_1 removed
[  194.712583][ T5763] usbtest: probe of 1-1:220.1 failed with error -22
[  194.751854][ T5763] usb 1-1: USB disconnect, device number 7
[  194.847824][ T6672] team0 (unregistering): Port device team_slave_0 removed
[  194.907500][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.983393][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.076443][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  195.306525][    T9] usb 3-1: Using ep0 maxpacket: 8
[  195.318093][    T9] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  195.350120][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  195.371851][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  195.388078][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  195.412972][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  195.440575][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.482943][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  195.501915][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.696261][ T6672] bond0 (unregistering): Released all slaves
[  195.744986][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  195.756433][    T9] usbtmc 3-1:16.0: can't read capabilities
[  195.839280][ T7296] veth0_macvtap: entered promiscuous mode
[  195.911784][ T7296] veth1_macvtap: entered promiscuous mode
[  195.990916][ T7556] syzkaller1: entered promiscuous mode
[  196.002216][    C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  196.014579][ T7556] syzkaller1: entered allmulticast mode
[  196.036935][ T7548] usbtmc 3-1:16.0: Unable to send data, error -71
[  196.055903][ T5861] usb 3-1: USB disconnect, device number 11
[  196.106769][ T5085] Bluetooth: hci1: command tx timeout
[  196.275457][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.293784][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.304408][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.315327][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.344128][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.383180][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.403027][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.413139][ T7296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.426154][ T7296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.439408][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.489601][ T7296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.517862][ T7296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.531223][ T7296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.540099][ T7296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.720832][ T7567] Invalid argument reading file caps for ./file0
[  196.766293][ T7455] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  196.812475][ T7455] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  196.844111][ T7455] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  196.895227][ T7455] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  196.978400][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.007080][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.142810][ T7109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.174723][ T7109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.305914][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.391976][ T7583] erspan0: entered promiscuous mode
[  197.420705][ T7455] 8021q: adding VLAN 0 to HW filter on device team0
[  197.472092][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.479380][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.528513][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.535800][ T6672] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.679728][ T7589] loop0: detected capacity change from 0 to 128
[  197.763812][ T7589] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.878476][ T7589] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.138810][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.190636][ T7600] loop4: detected capacity change from 0 to 2048
[  198.238847][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.372818][ T7600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  198.508905][ T7600] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  198.616296][ T7600] EXT4-fs (loop4): Remounting filesystem read-only
[  198.652201][ T7600] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -5)
[  198.833180][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  199.359468][ T7455] veth0_vlan: entered promiscuous mode
[  199.395761][ T7455] veth1_vlan: entered promiscuous mode
[  199.509143][ T7455] veth0_macvtap: entered promiscuous mode
[  199.542890][ T7455] veth1_macvtap: entered promiscuous mode
[  199.601507][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.633404][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.662139][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.694548][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.717609][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  199.734413][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.754323][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.785392][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.805741][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.817052][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.828191][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.838807][ T7455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  199.850890][ T7455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  199.870117][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  199.910471][ T7455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.946972][ T7455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.955771][ T7455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.966383][    T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  199.987669][ T7455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.178307][    T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  200.219176][    T9] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 169, setting to 64
[  200.267015][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  200.275121][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.303831][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  200.320082][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.336806][    T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  200.366218][    T9] usb 5-1: Product: syz
[  200.380768][    T9] usb 5-1: Manufacturer: syz
[  200.395657][    T9] usb 5-1: SerialNumber: syz
[  200.416987][    T9] usb 5-1: config 0 descriptor??
[  200.422971][ T7646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  200.443000][ T7603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.486160][ T7603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.498462][    T9] usb 5-1: selecting invalid altsetting 0
[  200.754494][ T7640] loop0: detected capacity change from 0 to 32768
[  200.855034][ T7640] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  200.881613][ T7646] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  200.897478][ T7640] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.927844][ T7651] usb 5-1: USB disconnect, device number 2
[  201.026210][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  201.084754][ T7640] XFS (loop0): Ending clean mount
[  201.126870][ T7640] XFS (loop0): Quotacheck needed: Please wait.
[  201.219461][ T7682] loop2: detected capacity change from 0 to 128
[  201.236426][   T23] usb 6-1: Using ep0 maxpacket: 32
[  201.253615][ T7640] XFS (loop0): Quotacheck: Done.
[  201.268412][   T23] usb 6-1: unable to get BOS descriptor or descriptor too short
[  201.278336][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.298127][   T23] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  201.309362][ T7682] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  201.345983][ T7682] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  201.379564][   T23] usb 6-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  201.402780][ T7682] syz.2.614 (pid 7682) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  201.420586][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.459659][   T23] usb 6-1: Product: syz
[  201.484915][   T23] usb 6-1: Manufacturer: syz
[  201.498412][   T23] usb 6-1: SerialNumber: syz
[  201.523132][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  201.635102][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  201.732244][ T7688] loop2: detected capacity change from 0 to 64
[  201.845354][   T23] usb 6-1: USB disconnect, device number 2
[  201.913941][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.776289][ T7651] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  202.843346][ T7717] loop5: detected capacity change from 0 to 512
[  202.858805][ T7717] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.965856][ T7717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.989420][ T7651] usb 3-1: Using ep0 maxpacket: 8
[  202.998192][ T7651] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  203.010633][ T7717] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.018486][ T7651] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  203.062307][ T7651] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  203.083059][ T7651] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  203.103531][ T7651] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  203.137583][ T7651] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  203.159533][ T7651] usb 3-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  203.178528][ T7651] usb 3-1: Product: syz
[  203.310066][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.445731][ T7651] usb 3-1: usb_control_msg returned -32
[  203.471856][ T7651] usbtmc 3-1:16.0: can't read capabilities
[  203.898159][ T7727] loop0: detected capacity change from 0 to 32768
[  204.045988][ T7748] loop5: detected capacity change from 0 to 512
[  204.060108][ T7651] usb 3-1: USB disconnect, device number 12
[  204.762260][ T7765] FAULT_INJECTION: forcing a failure.
[  204.762260][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  204.857555][ T7771] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  205.138245][ T7768] loop2: detected capacity change from 0 to 32768
[  205.163806][ T7765] CPU: 0 PID: 7765 Comm: syz.0.638 Not tainted syzkaller #0
[  205.171191][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  205.181321][ T7765] Call Trace:
[  205.184665][ T7765]  <TASK>
[  205.187661][ T7765]  dump_stack_lvl+0x18c/0x250
[  205.192414][ T7765]  ? show_regs_print_info+0x20/0x20
[  205.197686][ T7765]  ? load_image+0x420/0x420
[  205.202253][ T7765]  ? __might_fault+0xaa/0x120
[  205.206976][ T7765]  ? __lock_acquire+0x7eb0/0x7eb0
[  205.212082][ T7765]  ? __lock_acquire+0x7eb0/0x7eb0
[  205.217157][ T7765]  should_fail_ex+0x394/0x4c0
[  205.221888][ T7765]  set_fd_set+0x3a/0x90
[  205.226094][ T7765]  core_sys_select+0x8c9/0xa80
[  205.230978][ T7765]  ? poll_select_set_timeout+0x150/0x150
[  205.236695][ T7765]  ? sigprocmask+0x190/0x190
[  205.241341][ T7765]  __se_sys_pselect6+0x272/0x340
[  205.246332][ T7765]  ? __x64_sys_pselect6+0xf0/0xf0
[  205.251418][ T7765]  ? __x64_sys_pselect6+0x21/0xf0
[  205.256489][ T7765]  do_syscall_64+0x55/0xb0
[  205.260946][ T7765]  ? clear_bhb_loop+0x40/0x90
[  205.265661][ T7765]  ? clear_bhb_loop+0x40/0x90
[  205.270382][ T7765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.281836][ T7765] RIP: 0033:0x7fa5dbb9e559
[  205.286301][ T7765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.305975][ T7765] RSP: 002b:00007fa5dca76028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  205.314455][ T7765] RAX: ffffffffffffffda RBX: 00007fa5dbe25fa0 RCX: 00007fa5dbb9e559
[  205.322481][ T7765] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000020
[  205.330490][ T7765] RBP: 00007fa5dbc358b0 R08: 0000200000000280 R09: 0000200000000300
[  205.338501][ T7765] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  205.346505][ T7765] R13: 00007fa5dbe26038 R14: 00007fa5dbe25fa0 R15: 00007ffebd1100d8
[  205.354528][ T7765]  </TASK>
[  205.357677][    C0] vkms_vblank_simulate: vblank timer overrun
[  205.475645][ T7768] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.556610][ T7786] netlink: 27 bytes leftover after parsing attributes in process `syz.0.642'.
[  205.675071][ T7790] loop0: detected capacity change from 0 to 1024
[  205.720739][ T7790] EXT4-fs: Ignoring removed bh option
[  205.741427][ T7790] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  205.785528][ T7794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'.
[  205.820779][ T7790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.833671][ T7768] XFS (loop2): Ending clean mount
[  205.904696][ T7768] XFS (loop2): Quotacheck needed: Please wait.
[  205.960803][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.056722][ T7768] XFS (loop2): Quotacheck: Done.
[  206.143887][   T28] audit: type=1800 audit(1792035391.740:62): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.639" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  206.222490][ T7802] loop5: detected capacity change from 0 to 256
[  206.291063][ T5780] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  207.366563][ T5861] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  207.568329][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.591903][ T5861] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  207.627725][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.653487][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.680995][ T5861] usb 1-1: Product: syz
[  207.685265][ T5861] usb 1-1: Manufacturer: syz
[  207.704839][ T5861] usb 1-1: SerialNumber: syz
[  207.735730][ T5861] cdc_mbim 1-1:1.0: skipping garbage
[  207.976652][ T7823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.059195][ T7854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'.
[  208.172381][ T7830] loop5: detected capacity change from 0 to 32768
[  208.220036][ T7830] JBD2: Ignoring recovery information on journal
[  208.424262][ T7830] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  208.611858][ T7823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.628504][ T5861] cdc_mbim 1-1:1.0: setting rx_max = 16384
[  208.847298][ T5861] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  208.911837][ T5861] wwan wwan0: port wwan0mbim0 attached
[  209.013563][ T7455] ocfs2: Unmounting device (7,5) on (node local)
[  209.055903][ T5861] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, d2:f1:79:b8:4b:c1
[  209.119360][ T5861] usb 1-1: USB disconnect, device number 8
[  209.186957][ T5861] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  209.246750][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  209.377770][ T5861] wwan wwan0: port wwan0mbim0 disconnected
[  209.457915][ T5838] usb 5-1: Using ep0 maxpacket: 8
[  209.475560][ T5838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  209.509402][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.544813][ T5838] pvrusb2: Hardware description: Terratec Grabster AV400
[  209.576393][ T5838] pvrusb2: **********
[  209.588121][ T5838] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  209.622811][ T5838] pvrusb2: Important functionality might not be entirely working.
[  209.647828][ T5838] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  209.690660][ T5838] pvrusb2: **********
[  209.780770][ T2323] pvrusb2: Invalid write control endpoint
[  210.085660][ T2323] pvrusb2: Invalid write control endpoint
[  210.140565][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  210.175776][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  210.199976][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  210.234344][ T2323] pvrusb2: Device being rendered inoperable
[  210.269868][ T7870] pvrusb2: Attempted to execute control transfer when device not ok
[  210.286220][ T5861] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  210.302953][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  210.313524][ T5838] usb 5-1: USB disconnect, device number 3
[  210.341594][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  210.385520][ T2323] pvrusb2: Attached sub-driver cx25840
[  210.405943][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  210.421987][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  210.466443][ T5861] usb 1-1: Using ep0 maxpacket: 8
[  210.476411][ T5861] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  210.486618][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  210.536103][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  210.576113][ T5861] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  210.611299][ T5861] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  210.652981][ T5861] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.675649][ T7899] loop2: detected capacity change from 0 to 1024
[  210.692647][ T5861] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  210.716268][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.004224][ T5861] usb 1-1: GET_CAPABILITIES returned 0
[  211.036723][ T5861] usbtmc 1-1:16.0: can't read capabilities
[  211.272896][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  211.283001][ T7888] usbtmc 1-1:16.0: Unable to send data, error -71
[  211.311785][ T5834] usb 1-1: USB disconnect, device number 9
[  211.414848][ T7912] loop5: detected capacity change from 0 to 2048
[  211.498269][ T7912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.576241][ T7912] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.776810][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.858008][ T7909] loop2: detected capacity change from 0 to 32768
[  211.941298][ T7909] JBD2: Ignoring recovery information on journal
[  212.093335][ T7909] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  212.822727][ T5780] ocfs2: Unmounting device (7,2) on (node local)
[  213.014091][ T7951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.082789][ T7951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.100138][ T7960] loop5: detected capacity change from 0 to 256
[  213.159589][ T7960] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.192574][ T7951] bond0 (unregistering): Released all slaves
[  213.682262][ T7972] input: syz1 as /devices/virtual/input/input16
[  214.181573][ T7992] xt_hashlimit: size too large, truncated to 1048576
[  214.260002][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.698'.
[  214.347411][ T5861] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  214.583780][ T5861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.609621][ T5861] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.636389][ T5861] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  214.662846][ T5861] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.678130][ T5861] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  214.690482][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.585689][ T8017] maxtcpc: probe of 0-0022 failed with error -5
[  215.611391][ T8017] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22
[  215.744126][ T5861] gud 3-1:1.0: USB-1: Failed to add properties (ret=-71)
[  215.764874][ T5861] gud 3-1:1.0: Failed to get connectors (error=-71)
[  215.776398][ T5861] gud: probe of 3-1:1.0 failed with error -71
[  215.864077][ T5861] usb 3-1: USB disconnect, device number 13
[  216.674998][ T8046] syz_tun: entered allmulticast mode
[  216.881965][ T8049] loop2: detected capacity change from 0 to 128
[  217.736777][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  217.938438][ T5861] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.968102][ T5861] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  217.991628][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  218.016985][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.025056][ T5861] usb 3-1: Product: syz
[  218.056823][ T5861] usb 3-1: Manufacturer: syz
[  218.089680][ T5861] usb 3-1: SerialNumber: syz
[  218.101573][ T5861] cdc_mbim 3-1:1.0: skipping garbage
[  218.332551][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  218.593735][ T8089] i2c i2c-0: Failed to register i2c client maxtcpc at 0x22 (-16)
[  218.794125][ T8096] "syz.4.720" (8096) uses obsolete ecb(arc4) skcipher
[  218.822891][ T8096] trusted_key: syz.4.720 sent an empty control message without MSG_MORE.
[  218.982561][ T8065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  218.996575][ T5861] cdc_mbim 3-1:1.0: setting rx_max = 16384
[  219.110865][ T8101] ªªªªªª: renamed from vlan0 (while UP)
[  219.211066][ T5861] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device
[  219.262473][ T5861] wwan wwan0: port wwan0mbim0 attached
[  219.312512][ T5861] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 9a:4a:8d:b9:c7:c1
[  219.395242][ T5861] usb 3-1: USB disconnect, device number 14
[  219.444621][ T5861] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM
[  219.584731][ T5861] wwan wwan0: port wwan0mbim0 disconnected
[  219.808530][ T8095] loop0: detected capacity change from 0 to 32768
[  219.957845][ T8095] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  220.177312][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  223.048202][ T5861] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  223.103421][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.5.745'.
[  223.227064][ T8179] bond1: option mode: invalid value (69)
[  223.248193][ T5861] usb 3-1: not running at top speed; connect to a high speed hub
[  223.256762][ T8179] bond1 (unregistering): Released all slaves
[  223.267866][ T5861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.286404][ T5861] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  223.305744][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.343836][ T5861] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  223.417305][ T8185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.746'.
[  223.747730][ T5861] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  223.762612][ T5861] uvcvideo 3-1:1.1: No frame descriptor found for the default format.
[  223.781737][ T5861] uvcvideo 3-1:1.1: Failed to initialize the device (-22).
[  223.968698][ T5834] usb 3-1: USB disconnect, device number 15
[  223.986708][ T5838] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  224.125850][ T8202] rxe_eth0 speed is unknown, defaulting to 1000
[  224.216675][ T5838] usb 6-1: Using ep0 maxpacket: 16
[  224.232125][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  224.270096][ T5838] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  224.298349][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.318861][ T5838] usb 6-1: Product: syz
[  224.323108][ T5838] usb 6-1: Manufacturer: syz
[  224.344700][ T5838] usb 6-1: SerialNumber: syz
[  224.374871][ T5838] usb 6-1: config 0 descriptor??
[  224.404398][ T5838] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  224.457301][ T5838] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  224.665221][ T8225] loop4: detected capacity change from 0 to 7
[  224.684097][ T8225] Dev loop4: unable to read RDB block 7
[  224.695973][ T8225]  loop4: unable to read partition table
[  224.708992][ T8225] loop4: partition table beyond EOD, truncated
[  224.725061][ T8225] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5)
[  225.012044][ T5838] em28xx 6-1:0.0: chip ID is em2874
[  225.176389][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  225.385679][   T23] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  225.395870][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.420033][   T23] usb 5-1: config 0 descriptor??
[  225.434174][   T23] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  225.497133][ T5838] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  225.508814][ T5838] em28xx 6-1:0.0: board has no eeprom
[  225.586253][ T5838] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  225.594297][ T5838] em28xx 6-1:0.0: dvb set to bulk mode.
[  225.600923][   T27] em28xx 6-1:0.0: Binding DVB extension
[  225.621924][ T5838] usb 6-1: USB disconnect, device number 3
[  225.655658][ T5838] em28xx 6-1:0.0: Disconnecting em28xx
[  225.720407][   T27] em28xx 6-1:0.0: Registering input extension
[  225.850201][   T27] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  225.859988][   T27] Registered IR keymap rc-empty
[  225.882395][   T27] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  225.895609][   T27] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17
[  225.941412][   T27] em28xx 6-1:0.0: Input extension successfully initialized
[  225.949347][ T5838] em28xx 6-1:0.0: Closing input extension
[  225.976194][ T5834] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  226.165956][ T5838] em28xx 6-1:0.0: Freeing device
[  226.176233][ T5834] usb 3-1: Using ep0 maxpacket: 8
[  226.213873][ T5834] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  226.232530][ T5834] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.243207][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.253002][   T23] gspca_stv06xx: I2C: Read error writing address: -71
[  226.282548][   T23] usb 5-1: USB disconnect, device number 4
[  226.291957][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  226.320257][ T5834] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.340912][ T5834] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  226.368688][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.620544][ T5834] usb 3-1: usb_control_msg returned -32
[  226.626393][ T5834] usbtmc 3-1:16.0: can't read capabilities
[  226.965274][ T8261] (null): rxe_set_mtu: Set mtu to 256
[  226.972138][ T8261] rdma_rxe: rxe_newlink: failed to add syz_tun
[  226.978157][ T8258] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  227.004697][ T8263] usbtmc 3-1:16.0: usb_control_msg returned -32
[  227.029852][ T7651] usb 3-1: USB disconnect, device number 16
[  227.141360][ T8268] tap0: tun_chr_ioctl cmd 1074025677
[  227.150171][ T8268] tap0: linktype set to 516
[  227.158172][ T8268] tap0: tun_chr_ioctl cmd 1074812118
[  227.889105][ T8283] loop5: detected capacity change from 0 to 4096
[  227.897304][ T8283] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.930041][ T8283] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  227.975124][ T8283] EXT4-fs (loop5): Test dummy encryption mode enabled
[  228.020551][ T8283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.290030][ T8233] syz_tun (unregistering): left allmulticast mode
[  228.310921][ T8272] loop4: detected capacity change from 0 to 32768
[  228.320601][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.419748][ T8272] JBD2: Ignoring recovery information on journal
[  228.650313][ T8272] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  228.721426][ T8303] loop5: detected capacity change from 0 to 7
[  228.745750][ T8303] Dev loop5: unable to read RDB block 7
[  228.772709][ T8303]  loop5: unable to read partition table
[  228.803384][ T8303] loop5: partition table beyond EOD, truncated
[  228.840929][ T8303] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  229.001235][ T8301] loop5: detected capacity change from 0 to 32768
[  229.062845][ T8301] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  229.114507][ T8301] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  229.145996][   T28] audit: type=1800 audit(1792035414.750:63): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.776" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  229.300898][ T7455] ocfs2: Unmounting device (7,5) on (node local)
[  229.549108][ T7296] ocfs2: Unmounting device (7,4) on (node local)
[  229.818356][ T8323] input: syz0 as /devices/virtual/input/input18
[  230.160127][ T8331] loop4: detected capacity change from 0 to 1024
[  230.211695][ T8331] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  230.298260][ T8331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.444349][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.724055][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  230.747124][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  230.758114][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  230.767164][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  230.793353][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  230.810824][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  230.935475][ T8348] rxe_eth0 speed is unknown, defaulting to 1000
[  231.162795][ T8334] loop0: detected capacity change from 0 to 32768
[  231.233825][ T8334] (syz.0.785,8334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.277106][ T8334] (syz.0.785,8334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.348420][ T8334] (syz.0.785,8334,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  231.443213][ T8334] JBD2: Ignoring recovery information on journal
[  231.605444][ T8334] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  231.816977][ T8377] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22)
[  231.964843][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  232.705240][ T8348] chnl_net:caif_netlink_parms(): no params data found
[  232.902170][ T8410] loop4: detected capacity change from 0 to 8192
[  232.917664][ T5775] Bluetooth: hci3: command tx timeout
[  233.052065][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.059556][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.069373][ T8348] bridge_slave_0: entered allmulticast mode
[  233.077325][ T8348] bridge_slave_0: entered promiscuous mode
[  233.087494][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.095454][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.104004][ T8348] bridge_slave_1: entered allmulticast mode
[  233.113709][ T8348] bridge_slave_1: entered promiscuous mode
[  233.173474][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.233109][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.337959][ T8424] loop8: detected capacity change from 0 to 8
[  233.399460][ T8348] team0: Port device team_slave_0 added
[  233.412107][ T8348] team0: Port device team_slave_1 added
[  233.418563][ T8424]  loop8: [CUMANA/ADFS] p1 [ADFS] p1
[  233.435400][ T8424] loop8: partition table partially beyond EOD, truncated
[  233.467057][ T8424] loop8: p1 size 3004527350 extends beyond EOD, truncated
[  233.525948][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.566862][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.649718][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.672308][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  233.752056][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.788830][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.844589][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.009933][ T8348] hsr_slave_0: entered promiscuous mode
[  234.022743][ T8348] hsr_slave_1: entered promiscuous mode
[  234.045984][ T8348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.063547][ T8348] Cannot create hsr debugfs directory
[  234.528463][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.817'.
[  234.544767][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.817'.
[  234.705903][ T8348] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  234.745800][ T8348] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  234.781915][ T8348] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  234.824742][ T8348] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  234.987157][ T5775] Bluetooth: hci3: command tx timeout
[  235.160423][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.230100][ T8348] 8021q: adding VLAN 0 to HW filter on device team0
[  235.297292][ T8485] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  235.329158][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.336396][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.377244][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.384465][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.411668][ T8485] CIFS mount error: No usable UNC path provided in device string!
[  235.411668][ T8485] 
[  235.436471][ T8485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  235.481059][ T8490] loop0: detected capacity change from 0 to 4096
[  235.545636][ T8492] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.657938][   T28] audit: type=1800 audit(1792035421.260:64): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.826" name="bus" dev="loop0" ino=18 res=0 errno=0
[  235.685338][ T8496] loop4: detected capacity change from 0 to 512
[  235.759764][ T8496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  235.837854][ T8496] EXT4-fs (loop4): 1 truncate cleaned up
[  235.845047][ T8496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.142389][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.183743][ T8348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.070265][ T5775] Bluetooth: hci3: command tx timeout
[  237.264516][ T8348] veth0_vlan: entered promiscuous mode
[  237.314349][ T8348] veth1_vlan: entered promiscuous mode
[  237.407491][ T8517] loop4: detected capacity change from 0 to 32768
[  237.439954][ T8348] veth0_macvtap: entered promiscuous mode
[  237.452488][ T8348] veth1_macvtap: entered promiscuous mode
[  237.478762][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.492155][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.523216][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.561942][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.591227][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.613570][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.645737][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.660850][ T8517] ea_get: invalid extended attribute
[  237.675598][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.678623][ T8517] ffff88805ef33170: 04 00 00 00                                      ....
[  237.721085][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.765594][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.796399][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.813412][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.862462][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.903494][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.933645][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.956296][ T8348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.991215][ T8348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.014801][ T8348] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.060519][ T8545] netlink: 'syz.5.835': attribute type 13 has an invalid length.
[  238.068677][ T8545] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.835'.
[  238.100738][ T8348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.161018][ T8348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.206173][ T8348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.214965][ T8348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.554138][ T7603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.599494][ T7603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.719061][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.745840][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.052648][ T8566] vivid-002: =================  START STATUS  =================
[  239.092164][ T8566] vivid-002: Radio HW Seek Mode: Bounded
[  239.117250][ T8566] vivid-002: Radio Programmable HW Seek: false
[  239.123519][ T8566] vivid-002: RDS Rx I/O Mode: Block I/O
[  239.146531][ T5775] Bluetooth: hci3: command tx timeout
[  239.176702][ T8566] vivid-002: Generate RBDS Instead of RDS: false
[  239.183155][ T8566] vivid-002: RDS Reception: true
[  239.229984][ T8566] vivid-002: RDS Program Type: 0 inactive
[  239.255676][ T8566] vivid-002: RDS PS Name:  inactive
[  239.278288][ T8566] vivid-002: RDS Radio Text:  inactive
[  239.296570][ T8566] vivid-002: RDS Traffic Announcement: false inactive
[  239.327485][ T8566] vivid-002: RDS Traffic Program: false inactive
[  239.340548][ T8566] vivid-002: RDS Music: false inactive
[  239.358468][ T8566] vivid-002: ==================  END STATUS  ==================
[  239.542804][ T8584] loop6: detected capacity change from 0 to 128
[  239.575504][ T8584] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  239.623235][ T8584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.331902][   T28] audit: type=1326 audit(1792035425.940:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.4.850" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f241c39e559 code=0x0
[  240.506269][  T971] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  240.686447][  T971] usb 7-1: Using ep0 maxpacket: 8
[  240.702488][  T971] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  240.723917][  T971] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  240.741106][ T8621] mmap: syz.0.854 (8621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  240.764974][  T971] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  240.792073][  T971] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.819735][  T971] kobil_sct 7-1:1.0: KOBIL USB smart card terminal converter detected
[  240.853712][  T971] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  241.018448][ T8627] loop0: detected capacity change from 0 to 2048
[  241.062287][ T8627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.353776][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.632833][  T971] usb 7-1: USB disconnect, device number 2
[  241.677151][  T971] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  241.718161][  T971] kobil_sct 7-1:1.0: device disconnected
[  242.264262][ T8670] loop6: detected capacity change from 0 to 8
[  242.336736][ T8670] loop6: detected capacity change from 8 to 7
[  242.362692][ T8670] Dev loop6: unable to read RDB block 7
[  242.377922][ T8670]  loop6: unable to read partition table
[  242.388494][ T8670] loop6: partition table beyond EOD, truncated
[  242.402383][ T8670] loop_reread_partitions: partition scan of loop6 (ÛuêƒGŸ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð
[  242.402383][ T8670] å’�<l·k¨3"	[8­S~) failed (rc=-5)
[  242.418035][ T8676] loop4: detected capacity change from 0 to 1024
[  242.449566][ T5139] Dev loop6: unable to read RDB block 7
[  242.455291][ T5139]  loop6: unable to read partition table
[  242.467055][ T8676] EXT4-fs: Ignoring removed oldalloc option
[  242.467800][ T5139] loop6: partition table beyond EOD, 
[  242.473000][ T8676] EXT4-fs: Ignoring removed orlov option
[  242.484719][ T5139] truncated
[  242.508354][ T8676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  242.536485][ T8676] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.732297][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  243.027771][ T8697] loop5: detected capacity change from 0 to 16
[  243.074850][ T8697] erofs: (device loop5): mounted with root inode @ nid 36.
[  243.316597][ T7651] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  243.528775][ T7651] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  243.557704][ T7651] usb 1-1: config 1 has no interface number 0
[  243.574480][ T7651] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  243.601545][ T7651] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  243.606531][  T971] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  243.623157][ T7651] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  243.667463][ T7651] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40
[  243.686481][ T7651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.704840][ T7651] usb 1-1: Product: syz
[  243.717699][ T7651] usb 1-1: Manufacturer: syz
[  243.722382][ T7651] usb 1-1: SerialNumber: syz
[  243.826406][  T971] usb 5-1: Using ep0 maxpacket: 8
[  243.836879][  T971] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  243.864337][  T971] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.884795][  T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.902013][  T971] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  243.931045][  T971] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  243.962278][  T971] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  243.975357][ T7651] usb 1-1: 1:0 : does not exist
[  243.991686][  T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.002287][ T7651] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile
[  244.028011][ T7651] usb 1-1: 1:3 : does not exist
[  244.038074][ T7651] usb 1-1: 1:4 : does not exist
[  244.043005][ T7651] usb 1-1: 1:5 : does not exist
[  244.060650][ T7651] usb 1-1: incorrect wMaxPacketSize 0x200 for BADD profile
[  244.143382][ T7651] snd-usb-audio: probe of 1-1:1.1 failed with error -22
[  244.172820][ T7651] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  244.187866][ T7651] snd_usb_pod 1-1:1.1: set_interface failed
[  244.210409][ T7651] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  244.224392][ T7651] snd_usb_pod: probe of 1-1:1.1 failed with error -71
[  244.247164][  T971] usb 5-1: usb_control_msg returned -32
[  244.264421][ T7651] usb 1-1: USB disconnect, device number 10
[  244.269389][  T971] usbtmc 5-1:16.0: can't read capabilities
[  244.312981][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.856447][ T8749] loop5: detected capacity change from 0 to 256
[  244.914767][ T8751] netlink: 'syz.0.889': attribute type 12 has an invalid length.
[  244.918794][ T8749] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  244.932196][ T8751] netlink: 'syz.0.889': attribute type 29 has an invalid length.
[  244.950141][ T8751] netlink: 148 bytes leftover after parsing attributes in process `syz.0.889'.
[  244.972109][ T8751] netlink: 'syz.0.889': attribute type 1 has an invalid length.
[  245.007007][ T8751] netlink: 'syz.0.889': attribute type 2 has an invalid length.
[  245.839203][ T8786] loop5: detected capacity change from 0 to 512
[  245.892417][ T8786] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349)
[  245.945477][ T8786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  246.128320][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.448798][ T8805] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  246.455862][ T7651] usb 5-1: USB disconnect, device number 5
[  246.603608][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.906'.
[  246.956373][ T5838] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  247.000938][ T8821] rxe_eth0 speed is unknown, defaulting to 1000
[  247.156869][ T5838] usb 6-1: Using ep0 maxpacket: 16
[  247.174770][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.216132][ T5838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.241085][ T5838] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  247.266146][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.305046][ T5838] usb 6-1: config 0 descriptor??
[  247.502303][ T8832] loop0: detected capacity change from 0 to 8192
[  247.740399][ T5838] apple 0003:05AC:024B.000A: unknown main item tag 0x0
[  247.766175][ T5838] apple 0003:05AC:024B.000A: unknown main item tag 0x0
[  247.812236][ T5838] apple 0003:05AC:024B.000A: collection stack underflow
[  247.826192][ T5838] apple 0003:05AC:024B.000A: item 0 2 0 12 parsing failed
[  247.847438][ T5838] apple 0003:05AC:024B.000A: parse failed
[  247.853346][ T5838] apple: probe of 0003:05AC:024B.000A failed with error -22
[  247.955958][ T5838] usb 6-1: USB disconnect, device number 4
[  248.450052][ T8835] loop4: detected capacity change from 0 to 32768
[  248.480824][ T8835] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.915 (8835)
[  248.565631][ T8835] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  248.606209][ T8835] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  248.634640][ T8835] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  248.661605][ T8835] BTRFS info (device loop4): use zstd compression, level 3
[  248.693319][ T8835] BTRFS info (device loop4): using free space tree
[  248.745878][ T8842] loop0: detected capacity change from 0 to 32768
[  248.775294][ T8842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.916 (8842)
[  248.827441][ T8842] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.841332][ T8842] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  248.850383][ T8842] BTRFS info (device loop0): setting nodatasum
[  248.857623][ T8842] BTRFS info (device loop0): force zlib compression, level 3
[  248.869413][ T8842] BTRFS info (device loop0): metadata ratio 1
[  248.884306][ T8842] BTRFS info (device loop0): turning on flush-on-commit
[  248.894997][ T8842] BTRFS error (device loop0): unrecognized mount option 'rootcontext=sysadm_u'
[  248.900387][ T8835] BTRFS info (device loop4): enabling ssd optimizations
[  248.949874][ T8842] BTRFS error (device loop0): open_ctree failed: -22
[  248.956881][ T8835] BTRFS info (device loop4): auto enabling async discard
[  249.028440][ T5775] Bluetooth: hci0: unexpected event for opcode 0x080c
[  249.063804][ T5788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5788)
[  249.328946][ T7296] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  250.156183][    T8] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  250.405567][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  250.418617][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  250.428975][    T8] usb 6-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00
[  250.440726][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.454270][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.927'.
[  250.845853][ T8908] "syz.6.935" (8908) uses obsolete ecb(arc4) skcipher
[  250.926501][   T23] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  251.106444][ T7651] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  251.118875][   T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  251.135720][   T23] usb 5-1: config 0 has no interface number 0
[  251.146910][   T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  251.170564][   T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  251.196173][   T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  251.205336][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.239796][   T23] usb 5-1: config 0 descriptor??
[  251.246777][ T8899] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  251.269018][   T23] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  251.324428][ T7651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.348625][ T7651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  251.361131][ T7651] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  251.371574][ T7651] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.385351][ T7651] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  251.400822][ T7651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.494073][    T8] pegasus: probe of 6-1:1.0 failed with error -71
[  251.525547][    T8] usb 6-1: USB disconnect, device number 5
[  251.581857][   T23] usb 5-1: USB disconnect, device number 6
[  252.061773][ T7651] gud 1-1:1.0: Failed to get properties (error=-71)
[  252.083503][ T7651] gud: probe of 1-1:1.0 failed with error -71
[  252.114285][ T7651] usb 1-1: USB disconnect, device number 11
[  252.733415][ T8931] loop0: detected capacity change from 0 to 256
[  252.767558][ T8931] exfat: Deprecated parameter 'namecase'
[  252.775326][ T8931] exfat: Deprecated parameter 'namecase'
[  252.881039][ T8931] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[  253.797410][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  253.870656][ T8973] bridge0: port 3(bond0) entered blocking state
[  253.877821][ T8973] bridge0: port 3(bond0) entered disabled state
[  253.884845][ T8973] bond0: entered allmulticast mode
[  253.891743][ T8973] bond_slave_0: entered allmulticast mode
[  253.901169][ T8973] bond_slave_1: entered allmulticast mode
[  253.910974][ T8973] bond0: entered promiscuous mode
[  253.916504][ T8973] bond_slave_0: entered promiscuous mode
[  253.927790][ T8973] bond_slave_1: entered promiscuous mode
[  253.937805][ T8973] bridge0: port 3(bond0) entered blocking state
[  253.945882][ T8973] bridge0: port 3(bond0) entered forwarding state
[  253.978115][ T8976] bond0: left allmulticast mode
[  253.983188][ T8976] bond_slave_0: left allmulticast mode
[  253.995152][ T8976] bond_slave_1: left allmulticast mode
[  254.001919][ T5838] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.013469][ T8976] bond0: left promiscuous mode
[  254.019154][ T8976] bond_slave_0: left promiscuous mode
[  254.024910][ T8976] bond_slave_1: left promiscuous mode
[  254.036589][ T5838] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.055212][ T8976] bridge0: port 3(bond0) entered disabled state
[  254.061302][ T5838] usb 6-1: config 0 interface 0 has no altsetting 0
[  254.076170][ T5838] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00
[  254.096160][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.106364][ T7651] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  254.129034][ T5838] usb 6-1: config 0 descriptor??
[  254.318651][ T7651] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  254.344203][ T7651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.370328][ T7651] usb 1-1: config 0 descriptor??
[  254.390003][ T7651] cp210x 1-1:0.0: cp210x converter detected
[  254.544366][   T28] audit: type=1800 audit(1792035440.150:66): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.968" name="submit_queues" dev="configfs" ino=19407 res=0 errno=0
[  254.602373][ T5838] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:06A3:0CD0.000B/input/input20
[  254.751703][ T5838] saitek 0003:06A3:0CD0.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.5-1/input0
[  254.819860][ T7651] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  254.830616][ T5838] usb 6-1: USB disconnect, device number 6
[  254.870392][ T7651] usb 1-1: cp210x converter now attached to ttyUSB0
[  254.983352][ T8991] loop4: detected capacity change from 0 to 1024
[  254.995813][ T8989] fido_id[8989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  255.078579][ T7651] usb 1-1: USB disconnect, device number 12
[  255.107726][ T7651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  255.135862][ T8991] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  255.203249][ T7651] cp210x 1-1:0.0: device disconnected
[  255.841836][ T8991] hfsplus: filesystem is marked journaled, leaving read-only.
[  255.900052][ T9006] loop0: detected capacity change from 0 to 1024
[  255.944035][ T9006] hfsplus: failed to load catalog file
[  255.958943][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.965308][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.756199][ T7651] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  256.885031][ T9028] netlink: 'syz.0.988': attribute type 3 has an invalid length.
[  256.946368][ T7651] usb 6-1: Using ep0 maxpacket: 16
[  256.968329][ T7651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.018149][ T7651] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.047215][ T7651] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.064999][ T7651] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  257.092474][ T7651] usb 6-1: config 0 interface 0 has no altsetting 0
[  257.106383][ T7651] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  257.125666][ T7651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.176762][ T7651] usb 6-1: config 0 descriptor??
[  257.629972][ T7651] logitech-djreceiver 0003:046D:C53A.000C: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0
[  257.732542][ T9053] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  257.732542][ T9053] The task syz.0.998 (9053) triggered the difference, watch for misbehavior.
[  257.833910][ T5838] usb 6-1: USB disconnect, device number 7
[  258.331135][ T9061] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  258.616892][ T9068] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  258.836132][ T9075] netlink: 'syz.0.1009': attribute type 3 has an invalid length.
[  258.844733][ T9075] netlink: 'syz.0.1009': attribute type 7 has an invalid length.
[  258.866360][ T9075] netlink: 198368 bytes leftover after parsing attributes in process `syz.0.1009'.
[  259.335685][ T9093] loop5: detected capacity change from 0 to 2048
[  259.418327][ T9093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  259.507049][ T9102] loop0: detected capacity change from 0 to 2048
[  259.573022][ T9102] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.732464][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  260.005867][ T9112] loop4: detected capacity change from 0 to 128
[  260.359990][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  260.382240][ T9120] syz_tun: entered promiscuous mode
[  260.492051][ T9126] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21
[  260.758856][ T9139] "syz.4.1033" (9139) uses obsolete ecb(arc4) skcipher
[  260.888418][ T9142] rxe_eth0 speed is unknown, defaulting to 1000
[  261.197462][ T9156] loop4: detected capacity change from 0 to 512
[  261.501463][ T9156] EXT4-fs (loop4): Test dummy encryption mode enabled
[  261.527342][ T9156] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1041: inode has both inline data and extents flags
[  261.557762][ T9156] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1041: couldn't read orphan inode 15 (err -117)
[  261.581747][ T9156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.830965][ T9157] loop0: detected capacity change from 0 to 32768
[  261.918405][ T9156] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  261.941882][ T9166] EXT4-fs error (device loop4): ext4_check_dx_root:2268: inode #2: comm syz.4.1041: Corrupt dir, invalid name_len for '.', running e2fsck is recommended
[  261.961159][ T9157] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.057082][ T7296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.076833][ T9157] XFS (loop0): Ending clean mount
[  262.152503][   T28] audit: type=1800 audit(1792035447.760:67): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1040" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  262.493284][ T5773] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  262.869415][   T28] audit: type=1326 audit(1792035448.480:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.4.1050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f241c39e559 code=0x0
[  263.915605][ T9220] loop4: detected capacity change from 0 to 4096
[  263.977012][ T9220] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  264.057393][ T9226] loop5: detected capacity change from 0 to 512
[  264.312274][ T9220] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  265.059179][ T9254] loop0: detected capacity change from 0 to 128
[  265.089001][ T9254] FAT-fs (loop0): bogus number of reserved sectors
[  265.095600][ T9254] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  265.115460][ T9254] FAT-fs (loop0): Can't find a valid FAT filesystem
[  265.197567][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'.
[  265.426552][ T7651] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  265.647181][ T7651] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  265.657442][ T7651] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  265.686113][ T7651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 221, changing to 11
[  265.706575][ T7651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26333, setting to 1024
[  265.718564][ T7651] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  265.731364][ T7651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.754240][ T9254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  265.762634][ T9254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  265.780521][ T9254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  265.799554][ T7651] pl2303 1-1:1.0: pl2303 converter detected
[  265.818857][ T7651] usb 1-1: pl2303 converter now attached to ttyUSB0
[  266.118149][ T9254] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  266.134590][ T9254] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  266.142836][ T9254] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  266.156554][ T9254] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  266.217903][ T9254] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  266.489067][ T9283] FAULT_INJECTION: forcing a failure.
[  266.489067][ T9283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  266.512902][ T9283] CPU: 0 PID: 9283 Comm: syz.5.1085 Not tainted syzkaller #0
[  266.520371][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.530564][ T9283] Call Trace:
[  266.533895][ T9283]  <TASK>
[  266.536877][ T9283]  dump_stack_lvl+0x18c/0x250
[  266.541620][ T9283]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  266.547868][ T9283]  ? show_regs_print_info+0x20/0x20
[  266.553130][ T9283]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  266.559370][ T9283]  should_fail_ex+0x394/0x4c0
[  266.564121][ T9283]  _copy_to_user+0x2f/0xa0
[  266.568606][ T9283]  put_timespec64+0xc9/0x130
[  266.573287][ T9283]  ? get_timespec64+0x1b0/0x1b0
[  266.578225][ T9283]  poll_select_finish+0x472/0x5e0
[  266.583361][ T9283]  ? pollwake+0x210/0x210
[  266.587766][ T9283]  ? sigprocmask+0x190/0x190
[  266.592419][ T9283]  __se_sys_pselect6+0x289/0x340
[  266.597429][ T9283]  ? __x64_sys_pselect6+0xf0/0xf0
[  266.602525][ T9283]  ? __x64_sys_pselect6+0x21/0xf0
[  266.607873][ T9283]  do_syscall_64+0x55/0xb0
[  266.612327][ T9283]  ? clear_bhb_loop+0x40/0x90
[  266.617040][ T9283]  ? clear_bhb_loop+0x40/0x90
[  266.621847][ T9283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.627788][ T9283] RIP: 0033:0x7fee5539e559
[  266.632259][ T9283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.651899][ T9283] RSP: 002b:00007fee562fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  266.660352][ T9283] RAX: ffffffffffffffda RBX: 00007fee55625fa0 RCX: 00007fee5539e559
[  266.668358][ T9283] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000
[  266.676360][ T9283] RBP: 00007fee554358b0 R08: 0000200000000280 R09: 0000000000000000
[  266.684363][ T9283] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  266.692379][ T9283] R13: 00007fee55626038 R14: 00007fee55625fa0 R15: 00007ffe61be91d8
[  266.700419][ T9283]  </TASK>
[  266.769493][ T9253] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  266.851629][ T9253] pl2303 ttyUSB0: error sending break = -32
[  266.859089][    T9] usb 1-1: USB disconnect, device number 13
[  266.908096][    T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  266.935589][    T9] pl2303 1-1:1.0: device disconnected
[  267.456361][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  267.460650][ T9295] loop5: detected capacity change from 0 to 40427
[  267.474615][ T9295] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  267.482394][ T9295] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  267.494466][ T9295] F2FS-fs (loop5): invalid crc value
[  267.647668][ T9295] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  267.655256][ T9295] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  267.668566][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.690748][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.721328][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  267.754144][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  267.773788][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.796850][   T28] audit: type=1800 audit(1792035453.410:69): pid=9295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1091" name="file1" dev="loop5" ino=10 res=0 errno=0
[  267.838424][    T9] usb 5-1: config 0 descriptor??
[  267.910008][ T7455] syz-executor: attempt to access beyond end of device
[  267.910008][ T7455] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  267.932621][ T9310] loop0: detected capacity change from 0 to 512
[  267.942902][ T7455] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  268.035052][ T9310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.107000][ T9310] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.268155][    T9] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd
[  268.298901][    T9] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  268.329634][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.343936][    T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  268.556354][    T9] usb 5-1: USB disconnect, device number 7
[  268.620930][ T9322] fido_id[9322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  268.807560][ T9332] ip_tables: iptables: counters copy to user failed while replacing table
[  269.330155][ T9350] loop5: detected capacity change from 0 to 256
[  269.374358][ T9350] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  269.655552][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'.
[  269.823315][ T9365] loop5: detected capacity change from 0 to 512
[  269.839456][ T9365] EXT4-fs: Ignoring removed bh option
[  269.864959][ T9365] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1122: corrupted in-inode xattr: e_value size too large
[  269.900827][ T9365] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1122: couldn't read orphan inode 15 (err -117)
[  269.957887][ T9365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.991773][ T9344] loop0: detected capacity change from 0 to 32768
[  270.019118][ T9344] XFS: ikeep mount option is deprecated.
[  270.075160][ T9344] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  270.121620][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.275319][ T9344] XFS (loop0): Ending clean mount
[  270.345498][ T5773] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  270.377053][   T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  270.592436][ T9377] netlink: 'syz.4.1124': attribute type 11 has an invalid length.
[  270.665032][ T9392] loop0: detected capacity change from 0 to 1024
[  270.680113][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[  270.712284][   T27] usb 5-1: unable to read config index 0 descriptor/start: -71
[  270.735459][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1130'.
[  270.757018][   T27] usb 5-1: can't read configurations, error -71
[  270.915601][ T9392] hfsplus: xattr searching failed
[  271.124680][ T9402] netlink: 'syz.0.1133': attribute type 64 has an invalid length.
[  271.128874][  T971] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  271.148879][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.160055][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.232297][ T9403] netlink: 'syz.0.1133': attribute type 64 has an invalid length.
[  271.336278][  T971] usb 6-1: Using ep0 maxpacket: 8
[  271.344598][  T971] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  271.367808][  T971] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  271.399243][  T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  271.432967][  T971] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  271.463873][  T971] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.507757][  T971] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  271.539791][  T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.590523][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'.
[  271.681382][ T9417] loop0: detected capacity change from 0 to 128
[  271.753296][ T9417] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  271.800594][  T971] usb 6-1: usb_control_msg returned -32
[  271.800638][ T9417] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  271.843243][  T971] usbtmc 6-1:16.0: can't read capabilities
[  272.051328][ T5773] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  272.123765][ T9423] loop4: detected capacity change from 0 to 164
[  272.170616][ T9424] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  272.372509][  T971] usb 6-1: USB disconnect, device number 8
[  273.065203][ T9429] loop0: detected capacity change from 0 to 32768
[  273.135868][ T9429] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  273.293967][ T9429] XFS (loop0): Ending clean mount
[  273.337129][ T9429] XFS (loop0): User initiated shutdown received.
[  273.344199][ T9429] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  273.372716][ T9429] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  273.526927][ T5773] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  273.708430][ T9466] loop4: detected capacity change from 0 to 64
[  274.412420][ T6735] tipc: Subscription rejected, illegal request
[  275.766169][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  275.948635][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.969191][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00
[  275.986284][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  276.006439][    T9] usb 5-1: Product: syz
[  276.010714][    T9] usb 5-1: Manufacturer: syz
[  276.194872][ T9507] loop5: detected capacity change from 0 to 512
[  276.224466][ T9507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  276.317385][ T9507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.337978][ T9507] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  276.411934][   T28] audit: type=1800 audit(1792035462.020:70): pid=9507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1173" name="file2" dev="loop5" ino=16 res=0 errno=0
[  276.512687][    T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C299.000E/input/input23
[  276.612419][ T7455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.630304][    T9] logitech 0003:046D:C299.000E: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.4-1/input0
[  276.669187][    T9] logitech 0003:046D:C299.000E: Force feedback support for Logitech Gaming Wheels
[  276.837778][ T7651] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  276.909771][   T27] usb 5-1: USB disconnect, device number 10
[  277.032673][ T7651] usb 1-1: unable to get BOS descriptor or descriptor too short
[  277.056947][ T7651] usb 1-1: not running at top speed; connect to a high speed hub
[  277.078545][ T7651] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  277.089730][ T9522] fuse: Bad value for 'fd'
[  277.093911][ T7651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.109672][ T7651] usb 1-1: Product: syz
[  277.114147][ T7651] usb 1-1: Manufacturer: syz
[  277.119069][ T7651] usb 1-1: SerialNumber: syz
[  277.366772][ T7651] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  277.378024][ T7651] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  277.388712][ T7651] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  277.414774][ T7651] usb 1-1: USB disconnect, device number 14
[  277.471321][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.574225][ T9530] loop4: detected capacity change from 0 to 512
[  278.281544][ T9550] loop5: detected capacity change from 0 to 256
[  278.419284][ T7651] hid-generic 0005:0008:0009.000F: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa
[  278.651118][ T9558] fido_id[9558]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[  279.982793][ T9605] input: syz0 as /devices/virtual/input/input24
[  280.066155][  T971] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  280.246278][  T971] usb 6-1: Using ep0 maxpacket: 8
[  280.258183][  T971] usb 6-1: config index 0 descriptor too short (expected 8475, got 27)
[  280.276201][  T971] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  280.289874][  T971] usb 6-1: config 0 has no interface number 0
[  280.310367][  T971] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 118, setting to 64
[  280.345191][  T971] usb 6-1: config 0 interface 200 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  280.385541][  T971] usb 6-1: config 0 interface 200 has no altsetting 0
[  280.408852][  T971] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.5a
[  280.429410][  T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.459774][  T971] usb 6-1: Product: syz
[  280.464027][  T971] usb 6-1: Manufacturer: syz
[  280.486465][  T971] usb 6-1: SerialNumber: syz
[  280.501141][  T971] usb 6-1: config 0 descriptor??
[  280.778246][  T971] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input25
[  280.820313][  T971] usb 6-1: USB disconnect, device number 9
[  281.229077][ T9618] loop0: detected capacity change from 0 to 32768
[  281.323084][ T9618] JBD2: Ignoring recovery information on journal
[  281.465587][ T9618] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  281.867973][ T5773] ocfs2: Unmounting device (7,0) on (node local)
[  282.847389][   T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  283.026277][   T23] usb 6-1: Using ep0 maxpacket: 8
[  283.032451][ T9675] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1253'.
[  283.095941][   T23] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  283.121586][   T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.141803][   T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.162637][   T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.183633][   T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.226105][   T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  283.241387][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.476815][   T23] usb 6-1: usb_control_msg returned -32
[  283.496365][   T23] usbtmc 6-1:16.0: can't read capabilities
[  283.908302][ T9674] loop4: detected capacity change from 0 to 32768
[  284.027559][ T9693] batadv_slave_0: entered promiscuous mode
[  284.034870][ T9692] batadv_slave_0: left promiscuous mode
[  284.857739][ T9697] loop0: detected capacity change from 0 to 40427
[  284.883239][ T9697] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  284.917772][ T9697] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  284.983245][ T9697] F2FS-fs (loop0): Found nat_bits in checkpoint
[  285.160300][ T9697] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  285.167596][ T9697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  285.238938][ T9709] loop4: detected capacity change from 0 to 128
[  285.614980][   T23] usb 6-1: USB disconnect, device number 10
[  286.074982][ T9715] overlayfs: failed to clone upperpath
[  287.072609][   T23] IPVS: starting estimator thread 0...
[  287.166942][ T9742] IPVS: using max 16 ests per chain, 38400 per kthread
[  287.413794][ T9738] loop5: detected capacity change from 0 to 8192
[  288.675616][ T9771] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1286'.
[  289.123857][ T9784] batadv_slave_0: entered promiscuous mode
[  289.157839][ T9783] batadv_slave_0: left promiscuous mode
[  289.704074][ T9775] loop5: detected capacity change from 0 to 32768
[  289.787419][ T9775] JBD2: Ignoring recovery information on journal
[  289.976998][ T9775] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  290.602893][ T7455] ocfs2: Unmounting device (7,5) on (node local)
[  290.943532][    T9] IPVS: starting estimator thread 0...
[  291.046257][ T9801] IPVS: using max 20 ests per chain, 48000 per kthread
[  291.218811][ T9811] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1297'.
[  291.466904][ T9820] batadv_slave_0: entered promiscuous mode
[  291.547141][ T9818] batadv_slave_0: left promiscuous mode
[  293.662723][ T9874] hsr0: entered promiscuous mode
[  293.670265][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'.
[  293.679795][ T9874] hsr_slave_0: left promiscuous mode
[  293.686596][ T9874] hsr_slave_1: left promiscuous mode
[  293.797351][ T9874] hsr0 (unregistering): left promiscuous mode
[  293.975477][ T9877] input: syz1 as /devices/virtual/input/input26
[  294.332953][ T9895] CIFS mount error: No usable UNC path provided in device string!
[  294.332953][ T9895] 
[  294.345299][ T9895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  295.067548][ T9917] input: syz1 as /devices/virtual/input/input27
[  295.076232][ T5834] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  295.295744][ T5834] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  295.317342][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.342199][ T5834] usb 6-1: config 0 descriptor??
[  295.364985][ T5834] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  295.606436][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  295.796563][    T9] usb 1-1: Using ep0 maxpacket: 16
[  295.805244][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  295.819936][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  295.829219][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.837797][    T9] usb 1-1: Product: syz
[  295.842200][    T9] usb 1-1: Manufacturer: syz
[  295.847107][    T9] usb 1-1: SerialNumber: syz
[  295.855385][    T9] usb 1-1: config 0 descriptor??
[  295.869013][    T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  295.881643][    T9] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  296.177728][ T5834] gspca_stv06xx: I2C: Read error writing address: -71
[  296.193987][ T5834] usb 6-1: USB disconnect, device number 11
[  296.475235][    T9] em28xx 1-1:0.0: chip ID is em2874
[  296.851022][ T9934] "syz.6.1356" (9934) uses obsolete ecb(arc4) skcipher
[  296.972551][    T9] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  297.003098][    T9] em28xx 1-1:0.0: board has no eeprom
[  297.116617][    T9] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  297.124993][ T9944] netlink: 'syz.4.1353': attribute type 13 has an invalid length.
[  297.135384][    T9] em28xx 1-1:0.0: dvb set to bulk mode.
[  297.141640][ T9944] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1353'.
[  297.158477][ T7651] em28xx 1-1:0.0: Binding DVB extension
[  297.177269][    T9] usb 1-1: USB disconnect, device number 15
[  297.260736][    T9] em28xx 1-1:0.0: Disconnecting em28xx
[  297.351948][ T7651] em28xx 1-1:0.0: Registering input extension
[  297.466301][ T7651] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  297.474294][ T7651] Registered IR keymap rc-empty
[  297.506810][ T7651] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  297.525170][ T7651] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28
[  297.568287][ T7651] em28xx 1-1:0.0: Input extension successfully initialized
[  297.575841][    T9] em28xx 1-1:0.0: Closing input extension
[  297.678125][    T9] em28xx 1-1:0.0: Freeing device
[  298.063884][ T9950] loop5: detected capacity change from 0 to 32768
[  298.072618][ T9962] loop4: detected capacity change from 0 to 128
[  298.146633][ T9962] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  298.222614][ T9950] ea_get: invalid extended attribute
[  298.240593][ T9950] ffff88805ef31ef0: 04 00 00 00                                      ....
[  298.263440][ T9962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.378307][ T9968] "syz.0.1361" (9968) uses obsolete ecb(arc4) skcipher
[  298.732321][ T9974] netlink: 'syz.0.1364': attribute type 13 has an invalid length.
[  298.754855][ T9974] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1364'.
[  298.995447][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  299.245427][ T9987] rxe_eth0 speed is unknown, defaulting to 1000
[  299.793111][ T9991] loop0: detected capacity change from 0 to 32768
[  299.902851][ T9991] ea_get: invalid extended attribute
[  299.927217][ T9991] ffff88805edce8f0: 04 00 00 00                                      ....
[  301.058412][   T28] audit: type=1326 audit(1792035486.670:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.0.1388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5dbb9e559 code=0x0
[  301.211280][T10030] rxe_eth0 speed is unknown, defaulting to 1000
[  301.654732][T10040] loop6: detected capacity change from 0 to 8
[  301.726459][T10040] loop6: detected capacity change from 8 to 7
[  301.771133][T10040] Dev loop6: unable to read RDB block 7
[  301.804702][T10040]  loop6: unable to read partition table
[  301.835494][T10040] loop6: partition table beyond EOD, truncated
[  301.873662][T10040] loop_reread_partitions: partition scan of loop6 (ÛuêƒGŸ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð
[  301.873662][T10040] å’�<l·k¨3"	[8­S~) failed (rc=-5)
[  303.120979][   T28] audit: type=1326 audit(1792035488.730:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.6.1400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x0
[  304.026834][T10090] loop0: detected capacity change from 0 to 256
[  304.048071][T10092] netlink: 'syz.5.1403': attribute type 12 has an invalid length.
[  304.055973][T10092] netlink: 'syz.5.1403': attribute type 29 has an invalid length.
[  304.091064][T10090] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  304.145633][T10092] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1403'.
[  304.196459][T10092] netlink: 'syz.5.1403': attribute type 1 has an invalid length.
[  304.226518][T10092] netlink: 'syz.5.1403': attribute type 2 has an invalid length.
[  305.416626][T10119] overlayfs: failed to clone upperpath
[  306.858489][T10133] loop0: detected capacity change from 0 to 512
[  306.939133][T10133] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349)
[  307.065062][T10133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  307.157388][T10138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1422'.
[  307.199046][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.564345][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1426'.
[  307.910015][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1438'.
[  307.987440][T10155] bond0: option mode: invalid value (69)
[  308.098810][T10155] bond0 (unregistering): Released all slaves
[  309.267682][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  309.476617][   T23] usb 5-1: Using ep0 maxpacket: 8
[  309.498624][   T23] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  309.532512][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  309.584345][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  309.624668][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  309.663567][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  309.736523][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  309.782851][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.077852][   T23] usb 5-1: usb_control_msg returned -32
[  310.085825][   T23] usbtmc 5-1:16.0: can't read capabilities
[  310.400211][ T5773] infiniband syz1: set down
[  310.415250][    T8] syz1: rxe_query_port: returned err = -19
[  310.454101][    T8] infiniband syz1: ib_query_port failed (-19)
[  310.475135][    T8] syz1: rxe_query_port: returned err = -19
[  310.494531][ T5773] syz_tun (unregistering): left promiscuous mode
[  310.513059][T10195] usbtmc 5-1:16.0: usb_control_msg returned -32
[  310.538509][ T5838] usb 5-1: USB disconnect, device number 11
[  310.577565][  T752] smc: removing ib device syz1
[  311.890801][T10203] overlayfs: failed to clone upperpath
[  312.097238][  T752] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.299077][  T752] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.426384][  T752] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.655876][  T752] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.105315][  T752] tipc: Disabling bearer <udp:syz0>
[  313.154993][  T752] tipc: Left network mode
[  313.284456][T10218] loop4: detected capacity change from 0 to 16
[  313.375150][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  313.396766][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  313.418436][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  313.427798][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  313.442151][T10218] erofs: (device loop4): mounted with root inode @ nid 36.
[  313.451438][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  313.461331][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  313.884204][T10219] rxe_eth0 speed is unknown, defaulting to 1000
[  314.346323][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  314.811255][T10255] netlink: 'syz.6.1467': attribute type 12 has an invalid length.
[  314.844749][T10255] netlink: 'syz.6.1467': attribute type 29 has an invalid length.
[  314.884900][T10255] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1467'.
[  314.904321][T10255] netlink: 'syz.6.1467': attribute type 1 has an invalid length.
[  314.916660][T10255] netlink: 'syz.6.1467': attribute type 2 has an invalid length.
[  315.413505][T10273] overlayfs: failed to clone upperpath
[  315.547348][ T5085] Bluetooth: hci0: command tx timeout
[  316.018082][T10219] chnl_net:caif_netlink_parms(): no params data found
[  316.353891][  T752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.381527][  T752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.407214][  T752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.426352][  T752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.445112][  T752] bridge_slave_1: left allmulticast mode
[  316.454436][  T752] bridge_slave_1: left promiscuous mode
[  316.473267][  T752] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.505020][  T752] bridge_slave_0: left allmulticast mode
[  316.525847][  T752] bridge_slave_0: left promiscuous mode
[  316.541954][  T752] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.651259][  T752] veth1_macvtap: left promiscuous mode
[  316.661794][  T752] veth0_macvtap: left promiscuous mode
[  316.680964][  T752] veth1_vlan: left promiscuous mode
[  316.695000][  T752] veth0_vlan: left promiscuous mode
[  317.382360][T10313] overlayfs: failed to clone upperpath
[  317.414986][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.421891][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.636693][ T5085] Bluetooth: hci0: command tx timeout
[  318.825787][  T752] team0 (unregistering): Port device team_slave_1 removed
[  319.032064][  T752] team0 (unregistering): Port device team_slave_0 removed
[  319.183566][  T752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.325443][  T752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.706295][ T5085] Bluetooth: hci0: command tx timeout
[  320.682834][  T752] bond0 (unregistering): Released all slaves
[  320.982066][T10219] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.021287][T10219] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.039185][T10219] bridge_slave_0: entered allmulticast mode
[  321.063938][T10219] bridge_slave_0: entered promiscuous mode
[  321.092645][T10219] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.103232][T10219] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.115482][T10219] bridge_slave_1: entered allmulticast mode
[  321.132982][T10219] bridge_slave_1: entered promiscuous mode
[  321.203740][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.217001][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.319620][T10219] team0: Port device team_slave_0 added
[  321.332944][T10219] team0: Port device team_slave_1 added
[  321.389454][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.397165][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.424007][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.449134][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.456274][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.483689][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.545921][T10219] hsr_slave_0: entered promiscuous mode
[  321.553359][T10219] hsr_slave_1: entered promiscuous mode
[  321.560950][T10219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  321.568700][T10219] Cannot create hsr debugfs directory
[  321.584375][  T752] IPVS: stop unused estimator thread 0...
[  321.786295][ T5085] Bluetooth: hci0: command tx timeout
[  322.002712][T10219] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  322.015023][T10219] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  322.027773][T10219] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  322.039812][T10219] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  322.204931][T10219] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.244432][T10219] 8021q: adding VLAN 0 to HW filter on device team0
[  322.260092][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.267425][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.320062][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.327305][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.731538][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.119575][T10219] veth0_vlan: entered promiscuous mode
[  323.164172][T10219] veth1_vlan: entered promiscuous mode
[  323.259288][T10219] veth0_macvtap: entered promiscuous mode
[  323.291935][T10219] veth1_macvtap: entered promiscuous mode
[  323.324994][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.335889][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.346556][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.357115][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.367586][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.378636][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.391713][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.404260][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.415981][T10219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.438698][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.449735][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.461163][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.475575][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.485845][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.497129][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.509656][T10219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.521892][T10219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.534828][T10219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.548613][T10219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.558683][T10219] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.568119][T10219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.577619][T10219] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.750615][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.763975][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.843782][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.866144][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.094877][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1515'.
[  324.296584][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1452'.
[  325.851111][T10456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1522'.
[  327.033779][T10494] fuse: Bad value for 'fd'
[  327.048264][T10494] overlayfs: failed to clone lowerpath
[  328.147891][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1541'.
[  330.588607][T10604] rxe_eth0 speed is unknown, defaulting to 1000
[  330.934281][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1574'.
[  331.792627][   T28] audit: type=1326 audit(1792035517.400:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz.6.1583" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf7899e559 code=0x0
[  332.296922][T10653] "syz.4.1588" (10653) uses obsolete ecb(arc4) skcipher
[  332.530866][ T5085] Bluetooth: hci1: unexpected event for opcode 0x080c
[  332.582116][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1590'.
[  334.665484][ T5085] Bluetooth: hci2: unexpected event for opcode 0x080c
[  336.876691][T10751] ip_tables: iptables: counters copy to user failed while replacing table
[  337.260712][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1632'.
[  337.310887][T10766] bridge0: port 3(bond0) entered blocking state
[  337.332049][T10766] bridge0: port 3(bond0) entered disabled state
[  337.347295][T10766] bond0: entered allmulticast mode
[  337.352509][T10766] bond_slave_0: entered allmulticast mode
[  337.393333][T10766] bond_slave_1: entered allmulticast mode
[  337.413647][T10766] bond0: entered promiscuous mode
[  337.425366][T10766] bond_slave_0: entered promiscuous mode
[  337.434130][T10766] bond_slave_1: entered promiscuous mode
[  337.451672][T10766] bridge0: port 3(bond0) entered blocking state
[  337.458184][T10766] bridge0: port 3(bond0) entered forwarding state
[  337.487963][T10770] bond0: left allmulticast mode
[  337.508956][T10770] bond_slave_0: left allmulticast mode
[  337.528339][T10770] bond_slave_1: left allmulticast mode
[  337.545575][T10770] bond0: left promiscuous mode
[  337.553152][T10770] bond_slave_0: left promiscuous mode
[  337.559853][T10770] bond_slave_1: left promiscuous mode
[  337.567348][T10770] bridge0: port 3(bond0) entered disabled state
[  339.244770][T10804] bridge0: port 3(bond0) entered blocking state
[  339.252327][T10804] bridge0: port 3(bond0) entered disabled state
[  339.267507][T10804] bond0: entered allmulticast mode
[  339.292202][T10804] bond_slave_0: entered allmulticast mode
[  339.329182][T10804] bond_slave_1: entered allmulticast mode
[  339.347768][T10804] bond0: entered promiscuous mode
[  339.352907][T10804] bond_slave_0: entered promiscuous mode
[  339.405680][T10804] bond_slave_1: entered promiscuous mode
[  339.447269][T10804] bridge0: port 3(bond0) entered blocking state
[  339.453757][T10804] bridge0: port 3(bond0) entered forwarding state
[  339.489852][T10808] bond0: left allmulticast mode
[  339.495540][T10808] bond_slave_0: left allmulticast mode
[  339.503202][T10808] bond_slave_1: left allmulticast mode
[  339.524806][T10808] bond0: left promiscuous mode
[  339.530081][T10808] bond_slave_0: left promiscuous mode
[  339.535786][T10808] bond_slave_1: left promiscuous mode
[  339.543781][T10808] bridge0: port 3(bond0) entered disabled state
[  339.573447][T10811] netlink: 'syz.4.1653': attribute type 64 has an invalid length.
[  339.599780][T10811] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.608487][T10811] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.640363][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1652'.
[  339.788693][T10814] netlink: 'syz.4.1653': attribute type 64 has an invalid length.
[  340.225490][T10830] netlink: 'syz.4.1668': attribute type 3 has an invalid length.
[  343.359824][T10914] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  343.656290][T10918] netlink: 'syz.7.1685': attribute type 3 has an invalid length.
[  343.664113][T10918] netlink: 'syz.7.1685': attribute type 7 has an invalid length.
[  343.690730][T10918] netlink: 198368 bytes leftover after parsing attributes in process `syz.7.1685'.
[  344.628506][T10956] 9pnet_fd: Insufficient options for proto=fd
[  345.053965][T10968] fuse: Bad value for 'fd'
[  345.097821][T10968] overlayfs: failed to clone lowerpath
[  348.035819][   T28] audit: type=1326 audit(1792035533.640:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.5.1718" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee5539e559 code=0x0
[  348.575712][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'.
[  348.883630][T11061] rxe_eth0 speed is unknown, defaulting to 1000
[  349.113582][   T28] audit: type=1326 audit(1792035534.720:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11068 comm="syz.7.1733" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f20ecf9e559 code=0x0
[  351.365919][T11119] ip_tables: iptables: counters copy to user failed while replacing table
[  352.654253][T11164] netlink: 'syz.6.1760': attribute type 64 has an invalid length.
[  352.668059][T11164] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.676370][T11164] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.723481][T11165] netlink: 'syz.6.1760': attribute type 64 has an invalid length.
[  359.788915][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0c58
[  360.249636][T11318] mpoa:mpoad_close: (<unknown>) going down
[  362.013011][T11357] mpoa:mpoad_close: (<unknown>) going down
[  362.281122][   T23] Process accounting resumed
[  362.331230][T11370] Process accounting resumed
[  362.684531][T11382] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  363.163882][T11392] mpoa:mpoad_close: (<unknown>) going down
[  363.747496][T11411] overlayfs: failed to clone lowerpath
[  363.768465][T11411] overlayfs: failed to clone lowerpath
[  364.842232][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1871'.
[  366.491220][T11499] fuse: Bad value for 'fd'
[  366.513350][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1892'.
[  366.932907][T11494] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.940721][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.568844][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.654960][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.252102][T11494] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.262615][T11494] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.272524][T11494] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.292201][T11494] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.728451][T11533] bridge: RTM_NEWNEIGH with invalid ether address
[  368.740143][T11533] bridge: RTM_NEWNEIGH with invalid ether address
[  368.867713][T11537] raw_sendmsg: syz.5.1901 forgot to set AF_INET. Fix it!
[  368.952045][T11540] o2cb: This node has not been configured.
[  368.976474][T11540] o2cb: Cluster check failed. Fix errors before retrying.
[  368.983789][T11540] (syz.7.1902,11540,1):user_dlm_register:674 ERROR: status = -22
[  369.003311][T11540] (syz.7.1902,11540,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  369.219192][T11553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1909'.
[  369.731228][T11567] 9pnet_fd: Insufficient options for proto=fd
[  370.196729][T11580] process '/newroot/323/file0' started with executable stack
[  370.723504][T11600] xt_hashlimit: size too large, truncated to 1048576
[  370.731916][T11600] xt_hashlimit: max too large, truncated to 1048576
[  373.272305][T11659] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0
[  374.042431][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'.
[  374.053060][T11678] netlink: 'syz.4.1965': attribute type 3 has an invalid length.
[  378.065230][T11789] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2013'.
[  378.846403][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.853337][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  379.064912][T11827] openvswitch: netlink: Actions may not be safe on all matching packets
[  379.793000][T11859] fuse: Bad value for 'fd'
[  379.877737][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2047'.
[  380.702963][T11884] overlayfs: failed to clone upperpath
[  380.739902][T11884] overlayfs: failed to clone upperpath
[  381.091739][T11896] fuse: Bad value for 'fd'
[  381.108139][T11896] overlayfs: failed to clone lowerpath
[  381.567334][ T6735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.582282][ T6735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.221119][T11936] jffs2: notice: (11936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  382.338679][T11943] smc: net device lo applied user defined pnetid SYZ2
[  382.391501][T11943] smc: net device lo erased user defined pnetid SYZ2
[  383.541467][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2094'.
[  385.922009][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2117'.
[  387.996745][T12086] CIFS: Attempting to mount //127.0.0.1/share
[  388.332796][T12096] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  388.530612][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2146'.
[  388.546146][T12104] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2146'.
[  388.824277][T12086] CIFS: VFS: cifs_mount failed w/return code = -512
[  389.430261][   T12] tipc: Subscription rejected, illegal request
[  390.258350][T12154] vcan0: tx address claim with broadcast sa
[  390.746293][   T28] audit: type=1326 audit(1792035576.350:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12167 comm="syz.6.2177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x0
[  391.305689][T12181] netlink: 'syz.4.2182': attribute type 1 has an invalid length.
[  391.888519][T12202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'.
[  392.421347][   T28] audit: type=1326 audit(1792035578.030:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.488605][   T28] audit: type=1326 audit(1792035578.030:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.526382][   T28] audit: type=1326 audit(1792035578.080:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.560294][   T28] audit: type=1326 audit(1792035578.080:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.599053][   T28] audit: type=1326 audit(1792035578.080:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.631148][   T28] audit: type=1326 audit(1792035578.080:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.726362][   T28] audit: type=1326 audit(1792035578.080:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.791652][   T28] audit: type=1326 audit(1792035578.080:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  392.865196][   T28] audit: type=1326 audit(1792035578.090:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12217 comm="syz.6.2199" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcf7899e559 code=0x7ffc0000
[  395.300616][T12283] rxe_eth0 speed is unknown, defaulting to 1000
[  395.541514][T12293] overlayfs: failed to clone upperpath
[  395.571893][T12293] overlayfs: failed to clone upperpath
[  395.670194][T12297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.711047][T12297] bridge0: port 3(batadv_slave_0) entered blocking state
[  395.734223][T12297] bridge0: port 3(batadv_slave_0) entered disabled state
[  395.756477][T12297] batadv_slave_0: entered allmulticast mode
[  395.774541][T12297] batadv_slave_0: entered promiscuous mode
[  395.796975][T12297] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  397.176691][T12320] overlayfs: failed to clone upperpath
[  398.561592][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2254'.
[  398.574473][T12360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2254'.
[  398.609677][T12360] geneve0: entered promiscuous mode
[  398.615859][T12360] geneve0: entered allmulticast mode
[  399.124077][T12378] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2261'.
[  400.798810][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2275'.
[  401.387620][ T5783] Bluetooth: hci3: command 0x0406 tx timeout
[  402.223474][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2300'.
[  402.387143][T12455] 9pnet_fd: Insufficient options for proto=fd
[  402.611864][T12463] netlink: 3076 bytes leftover after parsing attributes in process `syz.4.2301'.
[  402.631476][T12463] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2301'.
[  403.212790][   T28] kauditd_printk_skb: 160 callbacks suppressed
[  403.212808][   T28] audit: type=1326 audit(1792035588.820:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12482 comm="syz.5.2308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5539e559 code=0x0
[  404.014339][ T5085] Bluetooth: hci2: unexpected event for opcode 0x202a
[  406.872817][T12585] veth0: entered promiscuous mode
[  406.883305][T12584] veth0: left promiscuous mode
[  408.061279][T12629] overlayfs: failed to clone lowerpath
[  410.217703][T12711] overlayfs: failed to clone upperpath
[  411.338247][T12730] overlayfs: failed to resolve './file0': -2
[  411.622511][T12738] netlink: 'syz.4.2426': attribute type 1 has an invalid length.
[  411.637329][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2426'.
[  412.779403][T12773] netlink: 'syz.7.2442': attribute type 29 has an invalid length.
[  412.831792][T12775] overlayfs: failed to clone upperpath
[  412.840699][T12773] netlink: 'syz.7.2442': attribute type 29 has an invalid length.
[  413.225834][T12793] netlink: 'syz.7.2451': attribute type 4 has an invalid length.
[  413.236432][T12793] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2451'.
[  413.440275][T12804] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  414.403525][T12850] fuse: Bad value for 'fd'
[  415.134131][T12880] batadv_slave_1: entered promiscuous mode
[  415.143091][T12879] batadv_slave_1: left promiscuous mode
[  416.196442][T12915] tipc: Started in network mode
[  416.201413][T12915] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  417.829615][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2521'.
[  417.844434][T12950] netlink: 'syz.7.2521': attribute type 30 has an invalid length.
[  417.866754][T12950] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.875562][T12950] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.884766][T12950] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.893618][T12950] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.903261][T12950] vxlan0: entered promiscuous mode
[  417.918543][T12950] vxlan0: entered allmulticast mode
[  417.934443][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2521'.
[  417.944858][T12951] netlink: 'syz.7.2521': attribute type 30 has an invalid length.
[  417.971884][T12951] vxlan1: entered promiscuous mode
[  417.996005][T12951] vxlan1: entered allmulticast mode
[  421.921126][T13081] ip_tables: iptables: counters copy to user failed while replacing table
[  422.134125][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0404
[  422.658393][T13111] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2588'.
[  424.556693][ T3428] ------------[ cut here ]------------
[  424.563117][ T3428] WARNING: CPU: 1 PID: 3428 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830
[  424.573083][ T3428] Modules linked in:
[  424.577168][ T3428] CPU: 1 PID: 3428 Comm: kworker/u4:8 Not tainted syzkaller #0
[  424.584804][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.595377][ T3428] Workqueue: iou_exit io_ring_exit_work
[  424.601566][ T3428] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  424.607631][ T3428] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  424.627444][ T3428] RSP: 0018:ffffc9000cb47a40 EFLAGS: 00010293
[  424.633603][ T3428] RAX: ffffffff8a8a8179 RBX: ffff88805d600000 RCX: ffff88802ea08000
[  424.641890][ T3428] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  424.650012][ T3428] RBP: ffffc9000cb47bb0 R08: ffffc9000cb479c7 R09: 1ffff92001968f38
[  424.658161][ T3428] R10: dffffc0000000000 R11: fffff52001968f39 R12: dffffc0000000000
[  424.666334][ T3428] R13: 0000000100002fdc R14: 0000000100002fdd R15: ffff88805d600510
[  424.674375][ T3428] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  424.683460][ T3428] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.690477][ T3428] CR2: 00007fcf789ebc40 CR3: 000000005b318000 CR4: 00000000003506e0
[  424.698593][ T3428] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  424.707206][ T3428] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  424.715371][ T3428] Call Trace:
[  424.718969][ T3428]  <TASK>
[  424.721963][ T3428]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  424.727950][ T3428]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.733221][ T3428]  ? process_scheduled_works+0x975/0x1600
[  424.739104][ T3428]  ? process_scheduled_works+0x975/0x1600
[  424.744902][ T3428]  process_scheduled_works+0xa60/0x1600
[  424.750943][ T3428]  ? worker_attach_to_pool+0x370/0x370
[  424.756656][ T3428]  ? assign_work+0x3cc/0x5d0
[  424.761328][ T3428]  worker_thread+0xa5e/0xfe0
[  424.766121][ T3428]  kthread+0x2fa/0x390
[  424.770250][ T3428]  ? pr_cont_work+0x550/0x550
[  424.774999][ T3428]  ? kthread_blkcg+0xd0/0xd0
[  424.779725][ T3428]  ret_from_fork+0x48/0x80
[  424.784205][ T3428]  ? kthread_blkcg+0xd0/0xd0
[  424.788940][ T3428]  ret_from_fork_asm+0x11/0x20
[  424.793835][ T3428]  </TASK>
[  424.796926][ T3428] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  424.804245][ T3428] CPU: 1 PID: 3428 Comm: kworker/u4:8 Not tainted syzkaller #0
[  424.811833][ T3428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.821927][ T3428] Workqueue: iou_exit io_ring_exit_work
[  424.827512][ T3428] Call Trace:
[  424.830824][ T3428]  <TASK>
[  424.833787][ T3428]  dump_stack_lvl+0x18c/0x250
[  424.838511][ T3428]  ? show_regs_print_info+0x20/0x20
[  424.843769][ T3428]  ? load_image+0x420/0x420
[  424.848347][ T3428]  panic+0x2ca/0x720
[  424.852305][ T3428]  ? bpf_jit_dump+0xd0/0xd0
[  424.856876][ T3428]  ? ret_from_fork_asm+0x11/0x20
[  424.861878][ T3428]  __warn+0x2e0/0x470
[  424.865918][ T3428]  ? io_ring_exit_work+0x3b9/0x830
[  424.871081][ T3428]  ? io_ring_exit_work+0x3b9/0x830
[  424.876230][ T3428]  report_bug+0x2be/0x4f0
[  424.880610][ T3428]  ? io_ring_exit_work+0x3b9/0x830
[  424.885806][ T3428]  ? io_ring_exit_work+0x3b9/0x830
[  424.890984][ T3428]  ? io_ring_exit_work+0x3bb/0x830
[  424.896177][ T3428]  handle_bug+0xcf/0x120
[  424.900457][ T3428]  exc_invalid_op+0x1a/0x50
[  424.904993][ T3428]  asm_exc_invalid_op+0x1a/0x20
[  424.909903][ T3428] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  424.915666][ T3428] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 01 04 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 41 0f fd f6 e9 b1 fd ff ff e8 37 0f fd f6 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  424.935311][ T3428] RSP: 0018:ffffc9000cb47a40 EFLAGS: 00010293
[  424.941413][ T3428] RAX: ffffffff8a8a8179 RBX: ffff88805d600000 RCX: ffff88802ea08000
[  424.949412][ T3428] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  424.957413][ T3428] RBP: ffffc9000cb47bb0 R08: ffffc9000cb479c7 R09: 1ffff92001968f38
[  424.965412][ T3428] R10: dffffc0000000000 R11: fffff52001968f39 R12: dffffc0000000000
[  424.973408][ T3428] R13: 0000000100002fdc R14: 0000000100002fdd R15: ffff88805d600510
[  424.981419][ T3428]  ? io_ring_exit_work+0x3b9/0x830
[  424.986610][ T3428]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  424.992461][ T3428]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.997690][ T3428]  ? process_scheduled_works+0x975/0x1600
[  425.003445][ T3428]  ? process_scheduled_works+0x975/0x1600
[  425.009206][ T3428]  process_scheduled_works+0xa60/0x1600
[  425.014833][ T3428]  ? worker_attach_to_pool+0x370/0x370
[  425.020335][ T3428]  ? assign_work+0x3cc/0x5d0
[  425.024966][ T3428]  worker_thread+0xa5e/0xfe0
[  425.029620][ T3428]  kthread+0x2fa/0x390
[  425.033715][ T3428]  ? pr_cont_work+0x550/0x550
[  425.038432][ T3428]  ? kthread_blkcg+0xd0/0xd0
[  425.043051][ T3428]  ret_from_fork+0x48/0x80
[  425.047500][ T3428]  ? kthread_blkcg+0xd0/0xd0
[  425.052116][ T3428]  ret_from_fork_asm+0x11/0x20
[  425.056949][ T3428]  </TASK>
[  425.060148][ T3428] Kernel Offset: disabled
[  425.064615][ T3428] Rebooting in 86400 seconds..