last executing test programs:

13m2.781514688s ago: executing program 4 (id=3091):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet(0x2, 0x800, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

13m2.049772215s ago: executing program 4 (id=3100):
r0 = syz_open_dev$mouse(&(0x7f0000000d00), 0x200000, 0x2001)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async, rerun: 64)
landlock_restrict_self(0xffffffffffffffff, 0x0) (rerun: 64)
landlock_restrict_self(r1, 0x0) (async)
landlock_restrict_self(r1, 0x0) (async)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x8000, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0xc) (async, rerun: 32)
landlock_restrict_self(r2, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async)
landlock_restrict_self(r1, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) (async)
r3 = landlock_create_ruleset(&(0x7f0000000200)={0x3915, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0) (async, rerun: 32)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async, rerun: 32)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x401}) (async)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000240)={{0x2, @name="968b17917077530d957652db590e53bdfddc2e81c624399a4588a83e1ab8e274"}, 0x8, 0xa, 0x6bf8})
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xa000000000000000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) (async)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000), 0x4) (async)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x60)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r6, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x101, &(0x7f0000000100)=0x9}) (async)
sendmsg$802154_dgram(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async)
r7 = io_uring_setup(0x7789, &(0x7f0000000280)={0x0, 0x3cb1, 0x4000, 0xa, 0x20002f7})
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13m1.80802467s ago: executing program 4 (id=3104):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYRES32, @ANYBLOB="400001801400020070696d36726567300000", @ANYRES8=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

13m1.646256869s ago: executing program 4 (id=3106):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf26000100000000280000000000000000000000070000000144140707"], 0x48}, 0x200040c4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)

13m1.370888232s ago: executing program 4 (id=3110):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$inet(0x2, 0x800, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

12m58.33986007s ago: executing program 4 (id=3141):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f62d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x194, &(0x7f0000000840)="$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") (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$FITHAW(r1, 0xc0045878)

12m57.751031571s ago: executing program 32 (id=3141):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f62d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x194, &(0x7f0000000840)="$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") (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") (async, rerun: 64)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
ioctl$FITHAW(r1, 0xc0045878)

6m48.050944019s ago: executing program 3 (id=5305):
creat(&(0x7f00000003c0)='./file0\x00', 0xb1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84040, 0x0)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "71d7cad9ce65227e", "fdc81b393808bf519d34fdc431d727bc3eaa90d1f574cb786da155253062c8a7", "d735033c", "cb2b7df64280cd4f"}, 0x38)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x427e}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

6m47.050912457s ago: executing program 3 (id=5309):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000400007012cbd7000fadbdf25037c00000400c280240009002000108014000c000000000000000000000100000000000108000b800400dc80040008"], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

6m46.990979359s ago: executing program 3 (id=5310):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

6m46.16964837s ago: executing program 3 (id=5314):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESHEX], 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a4", @ANYBLOB="d29940"], 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00')
exit(0x4)
open$dir(0x0, 0x1, 0x19d)
r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900})
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
wait4(r4, 0x0, 0x8, 0x0)
syz_pidfd_open(r4, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"})
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000200)={0x200001, 0x200003, 0x801, 0x5, 0x7, 0x5})
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2)
chdir(&(0x7f0000000400)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_usb_connect$cdc_ecm(0x5, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0xa, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "8e6058"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x3, 0x10, 0x7f}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd, 0xc, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x270, 0x5, 0x5, 0xb}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x86, 0x2, 0xa, 0x10, 0xfe}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x810}}, {0xdc, &(0x7f0000000140)=@string={0xdc, 0x3, "a242cbc234d4c53cf1ae1fc0fe599b83106781240b4c8da37414687a1ff01bac3f833f8ece94b8cfbb231e3feb3a864f9699ebe0e33e85834f3ad9f9ef92351a20ef7e03da4215d5ef82a3d7dd2726befc11282ce99a652a4dfefb8107725b47b408cb7f48687bbec758a101e90248676c9f7c62c04ce6cc1346065d44d5a43a86913397e06b6ff5211c872e6a4bc870448fc28f02ebc2ff6cce1c15f3ab918dcca883f22a0e01f4cab1080da6175150ad16fed86a73cc04547375136871956044766414ab07ce78722d1ed9ab73a47e6587f4463d140e6ebcb4"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42b}}]})

6m42.666777782s ago: executing program 3 (id=5327):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0)

6m42.554769047s ago: executing program 3 (id=5328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x9)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000380)="fa", 0x1, 0x6008092, &(0x7f0000000080)={0x11, 0x806, r5, 0x1, 0xda, 0x6, @remote}, 0x14)

6m25.830111803s ago: executing program 33 (id=5328):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x9)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000380)="fa", 0x1, 0x6008092, &(0x7f0000000080)={0x11, 0x806, r5, 0x1, 0xda, 0x6, @remote}, 0x14)

2m34.498651296s ago: executing program 1 (id=7150):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x481, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x5, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f00000000c0)=0x2, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}}], 0x1, 0x20000800)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x3, 0x602}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x692, 0x7d, 0x80006, 0x4000000010000e51, 0x102, 0x547a, 0x103d, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0xfffffffffffff9de, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0x6000, 0x194110})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m33.708382622s ago: executing program 1 (id=7157):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000005c0)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
close(0x3)

2m33.424832593s ago: executing program 1 (id=7159):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000042}, 0x40)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e)
r2 = syz_open_pts(r1, 0x80)
r3 = dup3(r2, r1, 0x80000)
read(r3, &(0x7f0000000100)=""/213, 0xd5)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)

2m31.786816893s ago: executing program 1 (id=7171):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
writev(r1, &(0x7f0000000940)=[{&(0x7f0000002ec0)="55088598312bf532d11fc63c9a47", 0xffbf}, {0x0, 0x46}], 0x2)
listen(r0, 0x3)
accept4(r0, 0x0, &(0x7f0000000140), 0x80000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000)=<r3=>0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
process_mrelease(r3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r4, 0x4bfa, 0x10000000000004)
syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00')
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
open(0x0, 0x14d142, 0x0)

2m30.29925544s ago: executing program 1 (id=7184):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)

2m27.632160292s ago: executing program 1 (id=7204):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x5, 0x7ff)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040), 0x12)

2m26.984727428s ago: executing program 34 (id=7204):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet(0x2, 0x5, 0x7ff)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000040), 0x12)

23.174302455s ago: executing program 5 (id=7902):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x1, 0x794, 0x4e20, 0x5, 0x0, 0x20, 0x0, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x9, 0xffffffff, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffa, 0x2}, {0xfffffffffff7ffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x10}, 0x70bd2a, 0x0, 0x2, 0x2, 0xfd, 0x49}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

22.102268129s ago: executing program 5 (id=7903):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x1, 0xf, 0x4, 0x300, 0xffffffffffffff2c, 0x9, 0x0})

21.72642381s ago: executing program 5 (id=7906):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = gettid()
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8)
tkill(r5, 0xb)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@private2, @in6=@private2, 0x4e20, 0x0, 0x4e23, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0x4d5, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@private2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

21.520500121s ago: executing program 5 (id=7909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
getpeername$packet(r3, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000019c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001e00)={'syztnl1\x00', &(0x7f0000001d80)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0xf6, 0x9, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x0, 0x4}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8, 0x3, r5}]}, 0x2c}}, 0x0)
write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b)
fdatasync(r3)

21.277487345s ago: executing program 5 (id=7912):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x82)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r2, 0xfffffffffffffffe, 0x29)

21.161189319s ago: executing program 5 (id=7914):
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
setuid(0xee00)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
r1 = syz_open_procfs(0x0, 0x0)
read$msr(r1, &(0x7f0000000040)=""/27, 0x1b)
io_setup(0x5, &(0x7f0000000300))
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

15.077353337s ago: executing program 0 (id=7926):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x202, 0x800000000000007d, 0x0, 0x8000, 0x14, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000006, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
fchdir(r0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

12.89826719s ago: executing program 6 (id=7933):
openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000005b00)={&(0x7f0000005ac0)={0x10, 0x453, 0x300, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x4)

12.706418732s ago: executing program 0 (id=7935):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
utime(0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
sendto(r2, &(0x7f0000000200)="ffdf5a0d07c90c2176e138309de1305e463e3419924a024351d21287e9c75d1ba768db24f940b42de28db4737035af5550860c4825788688d6ea7b726244e6d7df17287e25", 0x45, 0x40010, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
shutdown(r3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x25, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0xa, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x5, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0x0, 0x3, 0x84, 0x1, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff})

12.361783374s ago: executing program 6 (id=7938):
r0 = memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
r1 = fanotify_init(0x200, 0x1000)
r2 = dup(r0)
fanotify_mark(r1, 0x1, 0x8001009, r2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0)

10.468987896s ago: executing program 6 (id=7942):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
write$UHID_CREATE2(r0, 0x0, 0x118)

10.126707539s ago: executing program 6 (id=7943):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r3, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file0\x00', 0x88)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000540)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000240)=0x7, 0x3)

9.951248008s ago: executing program 2 (id=7944):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_init(0x1a, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001800010a000000003f00000004"], 0x28}}, 0x0)

9.888900273s ago: executing program 7 (id=7945):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file2\x00', 0x4008, &(0x7f00000006c0)=ANY=[], 0x1, 0x2ab, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x1)
getdents64(r0, 0x0, 0x22)

9.554276999s ago: executing program 0 (id=7946):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40800, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000180))
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRESHEX, @ANYBLOB="b4e7a6c20d6ffa3e4abf4a92acc2b135dccb6b977b03455c2bef966db79170a9c82d66f11b766206623a5a8fed", @ANYRESHEX, @ANYRES64, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$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")
r1 = socket$inet6(0xa, 0x2, 0xea60)
close(r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
shutdown(r2, 0x1)

8.107232038s ago: executing program 2 (id=7947):
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000080)={0x1, 0x100, 0x0, 0x4, 0x107, 0xff, 0x6, 0x5, 0xfffffffe, 0x6, 0x7, 0xfffffffe, 0x1, 0x54})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x890b, &(0x7f0000000080)={0xffffc0fe, 'erspan0\x00', {}, 0x20})

7.896247351s ago: executing program 6 (id=7948):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82", 0x2c, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082cc", 0x1d, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.716391046s ago: executing program 7 (id=7949):
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f00000003c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
rt_tgsigqueueinfo(r0, r0, 0x3b, &(0x7f0000000300)={0x20, 0x1, 0x4})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000019080)=0x30)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4)

7.547932619s ago: executing program 2 (id=7950):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x161140, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
link(0x0, &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.413643423s ago: executing program 2 (id=7951):
syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1c88a830008100490000047ed4c3"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
fsetxattr$trusted_overlay_origin(r0, 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40)
mount$bind(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000000, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='securityfs\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)={[&(0x7f0000000340)='pipefs\x00', &(0x7f0000000380)='\',\x00', &(0x7f00000004c0)='%+\\(*.\x00', &(0x7f0000000500)='%1B&\x00', &(0x7f0000000540)='{\x00', &(0x7f0000000580)='\x00', &(0x7f00000005c0)=',#$$%\x00', &(0x7f0000000600)='pipefs\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='\\\x84\'-%$(!\x13\"\x00', &(0x7f0000000700)='securityfs\x00']})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000240)}, 0x10)

5.228751995s ago: executing program 7 (id=7952):
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x3, 0x16, 0x2c, 0x65, 0x0, 0xd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, {[@ra={0x94, 0x4, 0x1}]}}, @timestamp={0xd, 0x0, 0x0, 0x1, 0xa8, 0xffffc000, 0x3, 0x400}}}}}, 0x0)

4.890488903s ago: executing program 7 (id=7953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
gettid()
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@private2, @in6=@private2, 0x4e20, 0x0, 0x4e23, 0x602, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0x4d5, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x743}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@private2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

4.855790676s ago: executing program 0 (id=7954):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x8d}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.513274366s ago: executing program 0 (id=7955):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
utime(0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
sendto(r2, &(0x7f0000000200)="ffdf5a0d07c90c2176e138309de1305e463e3419924a024351d21287e9c75d1ba768db24f940b42de28db4737035af5550860c4825788688d6ea7b726244e6d7df17287e25", 0x45, 0x40010, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
shutdown(r3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x25, 0x4, 0x5, 0x5, 0x2, 0x12, 0x7, 0xd, 0xb9, 0x3, 0xe, 0xa, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x5, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0x0, 0x3, 0x84, 0x1, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff})

2.838922573s ago: executing program 7 (id=7956):
symlink(0x0, 0x0)
r0 = syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000001280)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@grpjquota, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$eJzs3d9rXFkdAPDvvcn0Z2pS9KEWrMVWkqKdSRrbBh+qguhTQa3vNSaTEDLJhMykbULRFP8AQUQFn3zyRfAPEKR/gggFfReVXZbddvdhYXc7y9yZSdN0pknpZKZNPh84M+ecuXe+58wwZ+6593JvAIfW+Yi4EBFPa7XapYgYbtanzRSbjVRf7snj+zP1lEStduv9JCJp1NUXG9v2niebqx2LiJ/8MOLnyYtxK+sbi9OlUnG1WS5Ul1YKlfWNywtL0/PF+eLy5OTEtanrU1enxrvSz6GIuPH9///u13/+wY2/f/Puf26/O/aLpFkf8awf3dboei77LFoGI2J1P4L1yWDWQwAA3gat7fyvRcSlGI6BbGsOAAAAOEhq3xmKT5OI2g5Hd1YAAAAAb600Owc2SfPN8wCGIk3z+cY5vF+KE2mpXKl+Y668tjzbOFd2JHLp3EKpON48V3gkckm9PJHln5WvbJWTrDwZEacj4rfDx7NyfqZcmu33zg8AAAA4JE7umP9/NNyY/2/zSd8aBwAAAHTPSL8bAAAAAOw7838AAAA4+Mz/AQAA4ED70c2b9VRr3f969s762mL5zuXZYmUxv7Q2k58pr67k58vl+eyafUu7vV+pXF75Viyv3StUi5VqobK+cXupvLZcvb3w3C2wAQAAgB46/dWH/04iYvPbx7NUd6TfjQJ6YvBVFv7f/rUD6L2BfjcA6JtX+v8HDpRcvxsA9F2yy+sdT975R/fbAgAA7I/RL7c//p/uum9gM+1RE4F9Yv8fHF677fcDDi7H/+HwysVAmMjD4bbbJUBf//h/rfZKDQIAALpuKEtJmm8e8x+KNM3nI05lc4JcMrdQKo5HxBci4l/DuaP18kS2ZuLYAQAAAAAAAAAAAAAAAAAAAAAAAADsUa2WHK0BAAAAB1pE+k7SvA/w6PDFoZ37B44kHw9nzxFx94+3fn9vulpdnajXf7BVX/1Ds/5KP/ZgAAAAADu15umteTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNOTx/dnWqmXcd/7XkSMtIs/GMey52ORi4gTHyYxuG29JCIGuhB/80FEnGkXP6k3K0aarWgX/3gf46cRcbIL8eEwe1gff77b7veXxvnsuf3v71o2Qr2+zuNfujX+DbSJX687tccYZx/9tdAx/oOIs4Ptx59W/KTD+Hdhj/F/9tONjU6v1f4UMdr2/yd5LlahurRSqKxvXF5Ymp4vzheXJycnrk1dn7o6NV6YWygVm49tY/zmK397+rL+n+gQf2SX/l/cY/8/e3Tv8Rcb2dzW6smz+GMX2n//ZzrET5vf/9eb+frro638ZiO/3bm//PPcy/o/26H/u33/Y3vs/6Uf/+q/e1wUAOiByvrG4nSpVFw91JnX+jTqm0VvRC/ezEz9c30DmtE288t9eOf6lnm/+9WNTF+HJQAAYB+8OAcGAAAAAAAAAAAAAAAAAAAAeq0XlxPL7Yi5mT124+r5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd83kAAAD//7kT0VY=")
syz_open_procfs(0x0, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=r0], 0x2, 0x199, &(0x7f0000000400)="$eJzs0bFrE2EYx/Hv896b5CJUiYhIBXtg8bxS6eWqDk6HU4UcOLgIBg3p2RSvSjwHW1roIgWp9l9wER1V0EkEwbk4CA5al27SDMVBHCRyyRvBv8H3s/zufY57ePldJ+/mFeD3/mqbmAGHg3xE0MCEDGdKDfONOX83uTUMLprzpsnnJsfz5ZVbrSxL73oXPGr/DIAfXqUGf0f5S44qqkKMfN5fbbfkRkI/ZknNJ9QaTD3CadINHjOuxzhyHYe+v8klRVf8Bhyauecyky+vnFlcai2kC+ntKJo9H54Nw3PF/bM0fI0ED0XxhDWChBIQrFFq8mBbH2C6igQdtePIVI9yk61t5/TJ6R4q2KNPsaJH5avueOoKp3CvccxlDtd0MNmgqtDcXMzScA65rF5JXX/SP0sKd91x3PadbH7jqpJf5Wex7LlS36Xk14mA2aIaDvOejR3WzUJ2vzEhb4vaRr3qwbsX5nScEzwtc390gw/iJ0R+QtHq2GCdSpgsfjDvzDcm+DJ6sCzLsizLsizLsv4DfwIAAP//GXVZow==")
socket$inet_udp(0x2, 0x2, 0x0)
chmod(0x0, 0x23f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

2.766797308s ago: executing program 2 (id=7957):
pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000b00)="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", 0x20b}], 0x1, 0x3, 0x4217fb23, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="98020000400007012bbd7000fedbdf25037c00000c00c28008006300ac1e00017802018074"], 0x298}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

2.633510523s ago: executing program 6 (id=7958):
syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001000000208205160040000102010109026f000301008009090400000001a000000a24010f000a0002010209040100e400020000090401810101020000072401097c011008240201040414090905010910005e008cca4b7c3c4c963909040200002302000009040201010102000009058209080003221c8f7920cc43440cf20725010405070061"], 0x0)
fadvise64(0xffffffffffffffff, 0x1, 0x80000000, 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0)

2.410098847s ago: executing program 2 (id=7959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001})
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)

75.825541ms ago: executing program 7 (id=7960):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)

0s ago: executing program 0 (id=7961):
prctl$PR_SET_SECUREBITS(0x1c, 0x15)
setuid(0xee00)
r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r1)
r2 = syz_open_procfs(0x0, 0x0)
read$msr(r2, &(0x7f0000000040)=""/27, 0x1b)
io_setup(0x5, &(0x7f0000000300))
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00')
readlinkat(r3, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3)

kernel console output (not intermixed with test programs):

5c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input14
[ 1279.746338][T23398] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1279.781959][T11073] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:79> initialized
[ 1279.787312][T23031] usb 3-1: Using ep0 maxpacket: 8
[ 1279.793443][T23031] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1279.793493][T23031] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1279.793515][T23031] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1279.793539][T23031] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1279.793562][T23031] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1279.793601][T23031] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1279.793624][T23031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.963049][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.963084][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1279.963128][T23398] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1279.963152][T23398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.985017][T23398] usb 7-1: config 0 descriptor??
[ 1280.191141][T22062] Bluetooth: hci5: command 0x0406 tx timeout
[ 1280.237487][T23031] usb 3-1: usb_control_msg returned -32
[ 1280.237525][T23031] usbtmc 3-1:16.0: can't read capabilities
[ 1280.491387][T23398] usbhid 7-1:0.0: can't add hid device: -32
[ 1280.491504][T23398] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[ 1280.495120][T23398] usb 7-1: USB disconnect, device number 4
[ 1280.741714][T23031] usb 3-1: USB disconnect, device number 93
[ 1281.159278][T22062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1281.234445][T22062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1281.236714][T22062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1281.266519][T22062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1281.268150][T22062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1281.389691][T23398] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[ 1281.571111][T23398] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[ 1281.571161][T23398] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[ 1281.571190][T23398] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1281.571223][T23398] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[ 1281.571246][T23398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1281.627363][T23398] usb 1-1: config 0 descriptor??
[ 1281.860489][T23398] usbhid 1-1:0.0: can't add hid device: -71
[ 1281.860608][T23398] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1281.890302][T23398] usb 1-1: USB disconnect, device number 44
[ 1282.328017][T23031] usb 2-1: USB disconnect, device number 79
[ 1282.907706][T23800] binder: 23797:23800 ioctl c0306201 2000000003c0 returned -14
[ 1283.350965][T11073] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1283.420834][T17571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1283.452940][T23031] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1283.513458][T11073] usb 2-1: Using ep0 maxpacket: 32
[ 1283.516868][T11073] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1283.518007][T11073] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 1283.518030][T11073] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 1283.518051][T11073] usb 2-1: config 14 has no interface number 0
[ 1283.518068][T11073] usb 2-1: config 14 has no interface number 1
[ 1283.518138][T11073] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1283.518152][T11073] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1283.518166][T11073] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 1283.518180][T11073] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 1283.518200][T11073] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 1283.518215][T11073] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1283.518229][T11073] usb 2-1: config 14 interface 57 has no altsetting 0
[ 1283.518239][T11073] usb 2-1: config 14 interface 228 has no altsetting 0
[ 1283.523226][T11073] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1283.523242][T11073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.523253][T11073] usb 2-1: Product: syz
[ 1283.523261][T11073] usb 2-1: Manufacturer: syz
[ 1283.523269][T11073] usb 2-1: SerialNumber: syz
[ 1283.630976][T23031] usb 7-1: Using ep0 maxpacket: 8
[ 1283.637406][T23031] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1283.637437][T23031] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1283.637460][T23031] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1283.637550][T23031] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1283.637573][T23031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.670628][ T5636] Bluetooth: hci0: command tx timeout
[ 1283.693437][T23031] usb 7-1: config 0 descriptor??
[ 1284.046654][T11073] legousbtower 2-1:14.57: interrupt endpoints not found
[ 1284.164592][T23825] binder: 23824:23825 ioctl c0306201 2000000003c0 returned -14
[ 1284.223305][T23031] usbhid 7-1:0.0: can't add hid device: -71
[ 1284.223486][T23031] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1284.260058][T23031] usb 7-1: USB disconnect, device number 5
[ 1284.480784][T11073] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[ 1284.831025][T11073] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 1285.099276][T23835] binder: 23832:23835 ioctl c0306201 200000000000 returned -14
[ 1285.231605][T23834] usb 2-1: LEGO USB Tower reset control request failed
[ 1285.267831][T13088] usb 2-1: USB disconnect, device number 80
[ 1285.368449][T13088] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected
[ 1285.644712][T17571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.874885][T23398] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1285.918404][ T5636] Bluetooth: hci0: command tx timeout
[ 1286.070240][T23860] overlayfs: failed to resolve './bus': -2
[ 1286.080585][T23398] usb 1-1: Using ep0 maxpacket: 32
[ 1286.093896][T23398] usb 1-1: config 0 has no interfaces?
[ 1286.096807][T23398] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1286.096832][T23398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.096859][T23398] usb 1-1: Product: syz
[ 1286.096873][T23398] usb 1-1: Manufacturer: syz
[ 1286.096887][T23398] usb 1-1: SerialNumber: syz
[ 1286.113239][T23398] usb 1-1: config 0 descriptor??
[ 1286.345282][T17571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.497732][T16893] usb 1-1: USB disconnect, device number 45
[ 1287.116116][T23885] comedi comedi2: pcl816: I/O base address or length out of range
[ 1287.236171][T23888] overlayfs: failed to resolve './bus': -2
[ 1287.370091][T17571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.866172][T23763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1287.866421][T23763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1287.866613][T23763] bridge_slave_0: entered allmulticast mode
[ 1287.892587][T23763] bridge_slave_0: entered promiscuous mode
[ 1287.904171][T23763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.904385][T23763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1287.904537][T23763] bridge_slave_1: entered allmulticast mode
[ 1287.907662][T23763] bridge_slave_1: entered promiscuous mode
[ 1287.979196][T16893] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1288.041251][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1288.155158][T23763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1288.169794][T23763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1288.174755][T16893] usb 1-1: Using ep0 maxpacket: 8
[ 1288.174896][ T5636] Bluetooth: hci0: command tx timeout
[ 1288.176897][T16893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1288.176922][T16893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1288.176947][T16893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1288.176970][T16893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1288.177010][T16893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1288.177033][T16893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.217536][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1288.220625][   T10] usb 6-1: config 0 has no interfaces?
[ 1288.228145][   T10] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1288.228172][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.228193][   T10] usb 6-1: Product: syz
[ 1288.228207][   T10] usb 6-1: Manufacturer: syz
[ 1288.228222][   T10] usb 6-1: SerialNumber: syz
[ 1288.277910][   T10] usb 6-1: config 0 descriptor??
[ 1288.438444][T16893] usb 1-1: GET_CAPABILITIES returned 0
[ 1288.438472][T16893] usbtmc 1-1:16.0: can't read capabilities
[ 1288.665247][T13088] usb 6-1: USB disconnect, device number 13
[ 1288.715896][T16893] usb 1-1: USB disconnect, device number 46
[ 1289.085871][T23763] team0: Port device team_slave_0 added
[ 1289.092747][T23763] team0: Port device team_slave_1 added
[ 1289.456895][T23928] overlayfs: failed to resolve './bus': -2
[ 1289.523745][T23763] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1289.523762][T23763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1289.523787][T23763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1289.567525][T23763] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1289.567542][T23763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1289.567565][T23763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1290.175650][T17571] bridge_slave_1: left allmulticast mode
[ 1290.175683][T17571] bridge_slave_1: left promiscuous mode
[ 1290.175991][T17571] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1290.413348][ T5636] Bluetooth: hci0: command tx timeout
[ 1290.468925][T17571] bridge_slave_0: left allmulticast mode
[ 1290.468957][T17571] bridge_slave_0: left promiscuous mode
[ 1290.469225][T17571] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.517715][T23955] binder: 23947:23955 ioctl c0306201 200000000000 returned -14
[ 1292.002729][T23988] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1293.276915][T17571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1293.379992][T17571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1293.414968][T17571] bond0 (unregistering): Released all slaves
[ 1293.520678][T17571] bond1 (unregistering): Released all slaves
[ 1293.972038][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1294.005900][T23763] hsr_slave_0: entered promiscuous mode
[ 1294.014759][T23763] hsr_slave_1: entered promiscuous mode
[ 1294.018109][T23763] debugfs: 'hsr0' already exists in 'hsr'
[ 1294.018133][T23763] Cannot create hsr debugfs directory
[ 1294.073428][T17571] tipc: Left network mode
[ 1294.725894][T24053] binder: 24051:24053 ioctl c0306201 200000000080 returned -14
[ 1294.775036][T24053] binder: 24051:24053 ioctl c0306201 2000000003c0 returned -14
[ 1296.545243][T24094] binder: 24091:24094 ioctl c0306201 200000000080 returned -14
[ 1296.547116][T24094] binder: 24091:24094 ioctl c0306201 2000000003c0 returned -14
[ 1297.603741][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1299.490665][   T44] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1299.655098][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.655158][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1299.655209][   T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1299.655232][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.708946][   T44] usb 2-1: config 0 descriptor??
[ 1299.726669][   T44] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1300.703720][T16893] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1300.847829][T16893] usb 6-1: device descriptor read/64, error -71
[ 1301.223876][T16893] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1301.375233][T16893] usb 6-1: device descriptor read/64, error -71
[ 1301.422308][T17571] hsr_slave_0: left promiscuous mode
[ 1301.463062][T17571] hsr_slave_1: left promiscuous mode
[ 1301.466845][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1301.466869][T17571] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1301.505733][T16893] usb usb6-port1: attempt power cycle
[ 1301.508463][T17571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1301.508495][T17571] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1301.893590][T17571] veth1_macvtap: left promiscuous mode
[ 1301.893691][T17571] veth0_macvtap: left promiscuous mode
[ 1302.008328][T17571] veth1_vlan: left promiscuous mode
[ 1302.036011][T16893] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1302.072056][T16893] usb 6-1: device descriptor read/8, error -71
[ 1302.093568][T17571] veth0_vlan: left promiscuous mode
[ 1302.328466][T16893] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1302.352852][T16893] usb 6-1: device descriptor read/8, error -71
[ 1302.489529][T16893] usb usb6-port1: unable to enumerate USB device
[ 1302.512814][T23031] usb 2-1: USB disconnect, device number 81
[ 1304.593878][T17571] team0 (unregistering): Port device team_slave_1 removed
[ 1304.696361][T17571] team0 (unregistering): Port device team_slave_0 removed
[ 1304.915153][   T37] kauditd_printk_skb: 4 callbacks suppressed
[ 1304.915169][   T37] audit: type=1326 audit(1780408458.792:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24403 comm="syz.1.5908" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x0
[ 1306.142437][T24454] binder: 24447:24454 ioctl c0306201 200000000000 returned -14
[ 1307.531807][T23031] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1307.705998][T23031] usb 7-1: Using ep0 maxpacket: 32
[ 1307.710030][T23031] usb 7-1: config 0 has no interfaces?
[ 1307.713349][T23031] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1307.713378][T23031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.713397][T23031] usb 7-1: Product: syz
[ 1307.713411][T23031] usb 7-1: Manufacturer: syz
[ 1307.713425][T23031] usb 7-1: SerialNumber: syz
[ 1307.764724][T23031] usb 7-1: config 0 descriptor??
[ 1308.387978][T23763] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1308.453942][T23763] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1308.597655][T23763] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1308.711225][T23763] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1308.734769][T23763] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1308.882850][T23763] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1308.886421][T23763] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1308.992290][T23763] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1309.000045][T23398] usb 7-1: USB disconnect, device number 6
[ 1309.880111][T23763] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1309.937823][T23763] 8021q: adding VLAN 0 to HW filter on device team0
[ 1309.990929][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1309.991092][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1310.180384][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1310.180603][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.230077][T24593] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5982'.
[ 1312.220279][T23763] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1313.609547][T23763] veth0_vlan: entered promiscuous mode
[ 1313.670690][T23763] veth1_vlan: entered promiscuous mode
[ 1313.836702][T23763] veth0_macvtap: entered promiscuous mode
[ 1313.883602][T23763] veth1_macvtap: entered promiscuous mode
[ 1314.051160][T23763] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1314.118102][T23763] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1314.156195][T17571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.162849][T17571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.173886][T17571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1314.175058][T17571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1315.666296][ T1467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1315.666313][ T1467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1315.803963][   T44] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1315.932102][T24696] loop5: detected capacity change from 0 to 7
[ 1315.965843][   T44] usb 7-1: Using ep0 maxpacket: 8
[ 1316.007368][   T44] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1316.007423][   T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1316.007446][   T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1316.007485][   T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1316.007509][   T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1316.007551][   T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1316.007574][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1316.012581][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1316.012599][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1316.084237][T24696] Dev loop5: unable to read RDB block 7
[ 1316.084274][T24696]  loop5: AHDI p1 p2 p3
[ 1316.084297][T24696] loop5: partition table partially beyond EOD, truncated
[ 1316.090101][T24696] loop5: p1 start 1818582900 is beyond EOD, truncated
[ 1316.090125][T24696] loop5: p3 start 335544320 is beyond EOD, truncated
[ 1316.383283][   T44] usb 7-1: usb_control_msg returned -32
[ 1316.383331][   T44] usbtmc 7-1:16.0: can't read capabilities
[ 1316.551220][T23031] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1316.713163][T23031] usb 2-1: Using ep0 maxpacket: 32
[ 1316.737530][T23031] usb 2-1: config 0 has no interfaces?
[ 1316.752833][T23031] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[ 1316.752863][T23031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1316.752882][T23031] usb 2-1: Product: syz
[ 1316.752889][T23031] usb 2-1: Manufacturer: syz
[ 1316.752897][T23031] usb 2-1: SerialNumber: syz
[ 1316.795503][T23031] usb 2-1: config 0 descriptor??
[ 1316.854907][T10533] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1317.017625][T10533] usb 3-1: Using ep0 maxpacket: 8
[ 1317.021552][T10533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1317.021607][T10533] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1317.021632][T10533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.068996][T10533] usb 3-1: config 0 descriptor??
[ 1317.309994][T10533] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1317.365741][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1317.365827][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1317.528268][T10533] usb 3-1: USB disconnect, device number 94
[ 1317.599248][   T44] usb 2-1: USB disconnect, device number 82
[ 1317.893955][T13088] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1318.099692][T13088] usb 6-1: Using ep0 maxpacket: 32
[ 1318.102672][T13088] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1318.102697][T13088] usb 6-1: config 0 has no interface number 0
[ 1318.102743][T13088] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1318.106881][T13088] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1318.106908][T13088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.107812][T13088] usb 6-1: Product: syz
[ 1318.107830][T13088] usb 6-1: Manufacturer: syz
[ 1318.107845][T13088] usb 6-1: SerialNumber: syz
[ 1318.123092][T13088] usb 6-1: config 0 descriptor??
[ 1318.641182][T10533] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1318.806183][T23031] usb 7-1: USB disconnect, device number 7
[ 1318.806250][T10533] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1318.806438][T10533] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1318.806462][T10533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.958644][T10533] usb 2-1: config 0 descriptor??
[ 1318.975896][T10533] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1319.459787][T24822] fuse: Bad value for 'fd'
[ 1319.535669][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[ 1319.535698][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[ 1319.537646][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1319.537674][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1319.537694][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1319.537712][T13088] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1319.537999][T13088] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1319.601298][T13088] usb 6-1: USB disconnect, device number 18
[ 1319.767811][T16924] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1319.930208][T16924] usb 7-1: Using ep0 maxpacket: 8
[ 1319.932447][T16924] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1319.932502][T16924] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1319.932525][T16924] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1319.932551][T16924] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1319.932575][T16924] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1319.932616][T16924] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1319.932640][T16924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.172402][T16924] usb 7-1: usb_control_msg returned -32
[ 1320.172447][T16924] usbtmc 7-1:16.0: can't read capabilities
[ 1320.306501][T24858] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6098'.
[ 1320.513802][T24870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'.
[ 1321.210211][   T44] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1321.375116][   T44] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1321.376765][   T44] usb 6-1: not running at top speed; connect to a high speed hub
[ 1321.377928][   T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.377951][   T44] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1321.378012][   T44] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1321.452744][   T44] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[ 1321.452773][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.452792][   T44] usb 6-1: Product: syz
[ 1321.452806][   T44] usb 6-1: Manufacturer: syz
[ 1321.452819][   T44] usb 6-1: SerialNumber: syz
[ 1321.691388][T23031] usb 2-1: USB disconnect, device number 83
[ 1321.755646][   T44] usb 6-1: 1:1 : invalid UAC_AS_GENERAL desc
[ 1321.771320][T24910] binder: 24909:24910 ioctl c0306201 200000000080 returned -14
[ 1321.774975][   T44] usb 6-1: unit 250 not found!
[ 1321.775020][   T44] usb 6-1: unit 245 not found!
[ 1321.800304][T24910] binder: 24909:24910 ioctl 4018620d 0 returned -22
[ 1321.800528][T24910] binder: 24909:24910 ioctl c0306201 2000000003c0 returned -14
[ 1321.940523][T24916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6127'.
[ 1322.081661][T24916] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1322.162918][T24916] bond1 (unregistering): Released all slaves
[ 1322.620291][T11073] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[ 1322.765452][T11073] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1322.768115][   T10] usb 7-1: USB disconnect, device number 8
[ 1322.802386][   T44] usb 6-1: USB disconnect, device number 19
[ 1322.964444][T10533] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1323.177840][T10533] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1323.177890][T10533] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1323.177915][T10533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1323.230693][T10533] usb 2-1: config 0 descriptor??
[ 1323.263633][T10533] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1323.526462][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1323.710552][   T10] usb 7-1: Using ep0 maxpacket: 8
[ 1323.715920][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1323.720383][   T10] usb 7-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40
[ 1323.720403][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.720414][   T10] usb 7-1: Product: syz
[ 1323.720422][   T10] usb 7-1: Manufacturer: syz
[ 1323.720430][   T10] usb 7-1: SerialNumber: syz
[ 1323.833555][T24878] syz.2.6107 (24878) used greatest stack depth: 17224 bytes left
[ 1324.087573][   T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1324.088032][   T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1324.270539][   T10] usb 7-1: selecting invalid altsetting 1
[ 1324.270563][   T10] snd-usb-caiaq 7-1:1.0: can't set alt interface.
[ 1324.270642][   T10] usb 7-1: unable to init card! (ret=-5)
[ 1324.271661][   T10] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -5
[ 1324.281697][   T10] usb 7-1: USB disconnect, device number 9
[ 1324.407537][T22581] udevd[22581]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1324.807955][T24987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1324.948682][  T149] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1325.981330][  T821] usb 2-1: USB disconnect, device number 84
[ 1326.573112][T25072] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1326.573179][T25072] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1327.072222][ T5636] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1327.415317][T24984] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1329.747629][T25166] fuse: Bad value for 'fd'
[ 1329.748893][T25166] fuse: Bad value for 'fd'
[ 1330.243002][T16924] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1330.415404][T16924] usb 6-1: Using ep0 maxpacket: 16
[ 1330.417953][T16924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.417976][T16924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1330.458544][T16924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1330.458573][T16924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.458593][T16924] usb 6-1: Product: syz
[ 1330.458606][T16924] usb 6-1: Manufacturer: syz
[ 1330.458621][T16924] usb 6-1: SerialNumber: syz
[ 1330.554189][T16924] usb 6-1: 0:2 : does not exist
[ 1330.769537][T16924] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1330.882972][T16924] usb 6-1: USB disconnect, device number 20
[ 1330.943506][T22581] udevd[22581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1331.401229][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1331.456185][   T44] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1331.574023][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.574049][   T10] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1331.600751][   T10] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[ 1331.600790][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.600812][   T10] usb 7-1: Product: syz
[ 1331.600827][   T10] usb 7-1: Manufacturer: syz
[ 1331.600843][   T10] usb 7-1: SerialNumber: syz
[ 1331.642714][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1331.642745][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1331.642782][   T44] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1331.642804][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.702160][   T44] usb 2-1: config 0 descriptor??
[ 1331.870136][T25244] binder: 25243:25244 ioctl c0306201 200000000080 returned -14
[ 1331.876082][   T10] usb 7-1: 0:2 : does not exist
[ 1331.882802][T25244] binder: 25243:25244 ioctl c0306201 2000000003c0 returned -14
[ 1331.883029][T25244] binder: 25243:25244 ioctl c0306201 0 returned -14
[ 1332.071543][   T10] usb 7-1: USB disconnect, device number 10
[ 1332.175564][   T44] usbhid 2-1:0.0: can't add hid device: -32
[ 1332.175683][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 1332.224887][   T44] usb 2-1: USB disconnect, device number 85
[ 1332.299624][T22581] udevd[22581]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1334.369542][T25366] fuse: Bad value for 'fd'
[ 1335.170697][T11073] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1335.336227][T11073] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.336256][T11073] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1335.359601][T11073] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[ 1335.359628][T11073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.359649][T11073] usb 7-1: Product: syz
[ 1335.359664][T11073] usb 7-1: Manufacturer: syz
[ 1335.359680][T11073] usb 7-1: SerialNumber: syz
[ 1335.778771][T11073] usb 7-1: 0:2 : does not exist
[ 1335.960053][T11073] usb 7-1: USB disconnect, device number 11
[ 1336.071828][T16924] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1336.158005][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1336.267584][T16924] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1336.267603][T16924] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1336.267615][T16924] usb 2-1: config 220 has no interface number 2
[ 1336.267660][T16924] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1336.267675][T16924] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1336.267685][T16924] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1336.267695][T16924] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1336.311040][T16924] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1336.311071][T16924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.311091][T16924] usb 2-1: Product: syz
[ 1336.311105][T16924] usb 2-1: Manufacturer: syz
[ 1336.311119][T16924] usb 2-1: SerialNumber: syz
[ 1336.351774][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1336.355468][   T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1336.355493][   T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1336.355514][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1336.355620][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1336.355643][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1336.355667][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1336.355707][   T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1336.355786][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.393103][   T10] usb 6-1: config 0 descriptor??
[ 1336.653329][   T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1336.666908][T16924] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1336.666946][T16924] uvcvideo 2-1:220.0: No valid video chain found.
[ 1336.667005][T16924] usb 2-1: selecting invalid altsetting 0
[ 1336.800310][T16924] usb 2-1: selecting invalid altsetting 0
[ 1336.800332][T16924] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1336.833982][T16924] usb 2-1: USB disconnect, device number 86
[ 1336.979927][T11073] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1336.988862][    C0] usblp0: nonzero read bulk status received: -71
[ 1336.990226][T10533] usb 6-1: USB disconnect, device number 21
[ 1337.147558][T11073] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1337.147603][T11073] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1337.151007][T11073] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1337.151034][T11073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1337.151054][T11073] usb 7-1: Product: syz
[ 1337.151068][T11073] usb 7-1: Manufacturer: syz
[ 1337.151081][T11073] usb 7-1: SerialNumber: syz
[ 1337.226054][T11073] cdc_mbim 7-1:1.0: skipping garbage
[ 1337.430498][T25476] binder: 25469:25476 ioctl c0306201 200000000000 returned -14
[ 1337.451613][T25448] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1338.113821][T25448] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1338.115610][T11073] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1338.115625][T11073] cdc_mbim 7-1:1.0: setting rx_max = 2048
[ 1338.340324][T11073] cdc_mbim 7-1:1.0: setting tx_max = 184
[ 1338.343617][T11073] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[ 1338.658163][T11073] wwan wwan0: port wwan0mbim0 attached
[ 1338.720606][T11073] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, ea:9c:58:e5:86:9b
[ 1338.743192][T11073] usb 7-1: USB disconnect, device number 12
[ 1338.788971][T11073] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[ 1339.085190][T25434] usblp0: removed
[ 1339.223411][T11073] wwan wwan0: port wwan0mbim0 disconnected
[ 1339.297775][T25545] fuse: fd is not a fuse device
[ 1339.717276][T25560] binder: 25557:25560 ioctl c018620c 200000000040 returned -22
[ 1340.151677][T25578] binder: 25577:25578 ioctl 4018620d 0 returned -22
[ 1340.554603][T23031] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1340.719299][T23031] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1340.722696][T23031] usb 7-1: config 0 has no interfaces?
[ 1340.744383][T23031] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1340.744415][T23031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.744436][T23031] usb 7-1: Product: syz
[ 1340.744452][T23031] usb 7-1: Manufacturer: syz
[ 1340.744468][T23031] usb 7-1: SerialNumber: syz
[ 1340.831318][T23031] usb 7-1: config 0 descriptor??
[ 1341.147458][T10533] usb 7-1: USB disconnect, device number 13
[ 1341.204088][T23031] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1341.382292][T23031] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1341.382324][T23031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1341.382345][T23031] usb 2-1: Product: syz
[ 1341.382361][T23031] usb 2-1: Manufacturer: syz
[ 1341.382377][T23031] usb 2-1: SerialNumber: syz
[ 1341.392068][T23031] usb 2-1: config 0 descriptor??
[ 1341.401321][T23031] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1341.812398][ T5636] Bluetooth: hci3: command 0x0406 tx timeout
[ 1341.937009][T21866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1342.035679][T21866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1342.064964][T21866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1342.080107][T21866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1342.088031][T21866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1342.192993][T23031] gspca_sunplus: reg_w_riv err -110
[ 1342.193178][T23031] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[ 1343.165010][T10533] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1343.348789][T10533] usb 7-1: Using ep0 maxpacket: 32
[ 1343.351634][T10533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1343.351665][T10533] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1343.351704][T10533] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1343.351728][T10533] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.408231][T10533] usb 7-1: config 0 descriptor??
[ 1343.860785][T10533] usbhid 7-1:0.0: can't add hid device: -71
[ 1343.860894][T10533] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1343.894793][T10533] usb 7-1: USB disconnect, device number 14
[ 1344.330546][T16924] usb 2-1: USB disconnect, device number 87
[ 1344.527227][T25700] loop1: detected capacity change from 0 to 164
[ 1344.591851][T25700] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 1344.660245][T22062] Bluetooth: hci1: command tx timeout
[ 1344.674219][T25367] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1346.457601][T10533] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1346.594482][   T44] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1346.639004][T10533] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1346.639037][T10533] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.639058][T10533] usb 7-1: Product: syz
[ 1346.639072][T10533] usb 7-1: Manufacturer: syz
[ 1346.639088][T10533] usb 7-1: SerialNumber: syz
[ 1346.685642][T10533] usb 7-1: config 0 descriptor??
[ 1346.691405][T10533] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1346.785257][   T44] usb 2-1: Using ep0 maxpacket: 32
[ 1346.792750][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1346.792782][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1346.792821][   T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1346.792845][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1346.799985][   T44] usb 2-1: config 0 descriptor??
[ 1346.912522][T22062] Bluetooth: hci1: command tx timeout
[ 1347.248403][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[ 1347.251942][   T44] usbhid 2-1:0.0: can't add hid device: -71
[ 1347.252056][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1347.262170][T25367] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.282278][   T44] usb 2-1: USB disconnect, device number 88
[ 1347.465316][T10533] gspca_sunplus: reg_w_riv err -110
[ 1347.465419][T10533] sunplus 7-1:0.0: probe with driver sunplus failed with error -110
[ 1348.003919][T25367] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.761217][T25367] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1349.165600][T22062] Bluetooth: hci1: command tx timeout
[ 1349.291443][T25641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.291903][T25641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1349.292174][T25641] bridge_slave_0: entered allmulticast mode
[ 1349.296680][T25641] bridge_slave_0: entered promiscuous mode
[ 1349.308329][T25641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.308768][T25641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1349.309008][T25641] bridge_slave_1: entered allmulticast mode
[ 1349.312420][T25641] bridge_slave_1: entered promiscuous mode
[ 1349.433568][T16924] usb 7-1: USB disconnect, device number 15
[ 1349.474404][T25641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1349.522610][T25641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1349.794303][T25641] team0: Port device team_slave_0 added
[ 1349.805259][T25641] team0: Port device team_slave_1 added
[ 1349.855810][T25641] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1349.855827][T25641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1349.855852][T25641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1349.876776][T25641] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1349.876789][T25641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1349.876814][T25641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1349.923774][T16924] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1350.062875][T25835] fuse: fd is not a fuse device
[ 1350.065468][T25835] fuse: fd is not a fuse device
[ 1350.105186][T16924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1350.105217][T16924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1350.105241][T16924] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1350.105282][T16924] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1350.105305][T16924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.187617][T16924] usb 7-1: config 0 descriptor??
[ 1350.876997][T16924] usbhid 7-1:0.0: can't add hid device: -71
[ 1350.877115][T16924] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1350.900367][T25641] hsr_slave_0: entered promiscuous mode
[ 1350.935576][T25641] hsr_slave_1: entered promiscuous mode
[ 1350.937583][T25641] debugfs: 'hsr0' already exists in 'hsr'
[ 1350.937608][T25641] Cannot create hsr debugfs directory
[ 1350.965400][T16924] usb 7-1: USB disconnect, device number 16
[ 1351.422378][T22062] Bluetooth: hci1: command tx timeout
[ 1351.943451][T25889] loop6: detected capacity change from 0 to 128
[ 1352.208058][T25889] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[ 1354.017755][T25367] bond0 (unregistering): Released all slaves
[ 1354.070256][T25367] bond1 (unregistering): Released all slaves
[ 1354.204380][   T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1354.214086][T25367] bond2 (unregistering): Released all slaves
[ 1354.380878][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1354.380911][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1354.380933][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1354.380974][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1354.380998][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1354.447592][   T10] usb 7-1: config 0 descriptor??
[ 1354.654354][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1355.203949][   T10] usbhid 7-1:0.0: can't add hid device: -71
[ 1355.204067][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1355.229315][   T10] usb 7-1: USB disconnect, device number 17
[ 1355.482126][T26006] loop1: detected capacity change from 0 to 128
[ 1355.540063][T26006] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1355.568762][T26006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1356.463462][T26032] loop1: detected capacity change from 0 to 512
[ 1356.541239][T26032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1356.541365][T26032] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1356.973245][T22805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1358.117144][T26093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6639'.
[ 1358.437945][ T5636] Bluetooth: hci4: command 0x0406 tx timeout
[ 1358.928890][T25367] hsr_slave_0: left promiscuous mode
[ 1358.969306][T25367] hsr_slave_1: left promiscuous mode
[ 1359.316556][T26126] loop6: detected capacity change from 0 to 512
[ 1359.421662][T26126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1359.547079][T25367] veth1_macvtap: left promiscuous mode
[ 1359.547179][T25367] veth0_macvtap: left promiscuous mode
[ 1359.547490][T25367] veth1_vlan: left promiscuous mode
[ 1359.563368][T25367] veth0_vlan: left promiscuous mode
[ 1359.744772][T26137] syz.2.6657 uses obsolete (PF_INET,SOCK_PACKET)
[ 1359.786465][T26141] loop1: detected capacity change from 0 to 256
[ 1359.817786][T26139] Bluetooth: MGMT ver 1.23
[ 1359.828500][T26141] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1360.703520][   T37] audit: type=1800 audit(1780408510.295:544): pid=26141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6659" name="file1" dev="loop1" ino=1048702 res=0 errno=0
[ 1361.652422][T26189] fuse: fd is not a fuse device
[ 1361.921604][T26196] 9p: Bad value for 'rfdno'
[ 1362.438696][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1364.817726][   T44] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1364.979457][T26297] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6724'.
[ 1364.985057][   T44] usb 7-1: Using ep0 maxpacket: 32
[ 1364.987323][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1364.987352][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1364.987388][   T44] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1364.987410][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.993255][   T44] usb 7-1: config 0 descriptor??
[ 1365.004021][T26296] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1365.331660][T26297] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1365.432324][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 1365.432727][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 1365.433116][    C1] raw-gadget.0 gadget.6: ignoring, device is not running
[ 1365.433284][   T44] usbhid 7-1:0.0: can't add hid device: -32
[ 1365.433397][   T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[ 1365.465682][   T44] usb 7-1: USB disconnect, device number 18
[ 1366.507369][T16924] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1366.692943][T16924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1366.692963][T16924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1366.692975][T16924] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1366.692998][T16924] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1366.693015][T16924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1366.696285][T16924] usb 7-1: config 0 descriptor??
[ 1367.363188][T16924] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1367.421695][T16924] usb 7-1: USB disconnect, device number 19
[ 1367.685019][T26361] fido_id[26361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1368.210738][T26376] loop6: detected capacity change from 0 to 512
[ 1368.421019][T26376] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5
[ 1368.421203][T26376] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[ 1368.421259][T26376] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.6748: Failed to acquire dquot type 1
[ 1368.421314][T26376] loop6: lost filesystem error report for type 5 error -117
[ 1368.426166][    C1] EXT4-fs (loop6): error count since last fsck: 1
[ 1368.426188][    C1] EXT4-fs (loop6): last error at time 1780408517: ext4_acquire_dquot:7034
[ 1368.713140][T25641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1368.737375][T26376] EXT4-fs (loop6): 1 truncate cleaned up
[ 1368.749630][T26376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1368.749756][T26376] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1368.849602][T25641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1368.850941][T25641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1369.600161][  T821] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1369.779957][T25641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1369.808113][T25641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1369.814675][  T821] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1369.816633][  T821] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1369.831899][  T821] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1369.831926][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.831947][  T821] usb 2-1: Product: syz
[ 1369.831962][  T821] usb 2-1: Manufacturer: syz
[ 1369.831976][  T821] usb 2-1: SerialNumber: syz
[ 1370.041836][T25641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1370.057759][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1370.184926][T25641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1370.345857][  T821] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1370.347080][  T821] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1370.447463][T25641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1370.458209][  T821] usb 2-1: USB disconnect, device number 89
[ 1370.633380][T22581] udevd[22581]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1370.917844][T23398] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1371.134596][T23398] usb 7-1: Using ep0 maxpacket: 32
[ 1371.137643][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1371.137676][T23398] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1371.137712][T23398] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1371.137736][T23398] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.153371][T23398] usb 7-1: config 0 descriptor??
[ 1371.327525][  T821] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1371.517321][  T821] usb 2-1: config index 0 descriptor too short (expected 1051, got 27)
[ 1371.517352][  T821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.517372][  T821] usb 2-1: config 0 has no interfaces?
[ 1371.521819][  T821] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[ 1371.521847][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.521867][  T821] usb 2-1: Product: syz
[ 1371.521881][  T821] usb 2-1: Manufacturer: syz
[ 1371.521895][  T821] usb 2-1: SerialNumber: syz
[ 1371.591130][T25641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1371.607226][  T821] usb 2-1: config 0 descriptor??
[ 1371.625474][T23398] usbhid 7-1:0.0: can't add hid device: -71
[ 1371.625590][T23398] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1371.653383][T23398] usb 7-1: USB disconnect, device number 20
[ 1371.692671][T25641] 8021q: adding VLAN 0 to HW filter on device team0
[ 1371.742939][T25377] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1371.743151][T25377] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1371.837475][T25374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1371.840287][T25374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1371.888706][T26440] binder: 26439:26440 ioctl c0306201 0 returned -14
[ 1371.899156][  T821] usb 2-1: USB disconnect, device number 90
[ 1372.636582][T26487] loop1: detected capacity change from 0 to 128
[ 1372.673795][T26487] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1372.701912][T26487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1372.719293][T26487] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1373.195978][T26496] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[ 1373.331406][  T821] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1373.504222][  T821] usb 7-1: Using ep0 maxpacket: 32
[ 1373.507782][  T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1373.507814][  T821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1373.507850][  T821] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1373.507872][  T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.530879][  T821] usb 7-1: config 0 descriptor??
[ 1373.973881][  T821] usbhid 7-1:0.0: can't add hid device: -71
[ 1373.973999][  T821] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1374.009687][  T821] usb 7-1: USB disconnect, device number 21
[ 1374.206706][T25641] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1374.279281][T22805] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1374.589415][T25641] veth0_vlan: entered promiscuous mode
[ 1374.617924][T25641] veth1_vlan: entered promiscuous mode
[ 1374.861430][T25641] veth0_macvtap: entered promiscuous mode
[ 1374.874360][T25641] veth1_macvtap: entered promiscuous mode
[ 1375.047120][T25641] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1375.076491][T21866] Bluetooth: hci2: command 0x0406 tx timeout
[ 1375.122541][T25641] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1375.288849][T10842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.289124][T10842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.289779][T10842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1375.290433][T10842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.896504][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1376.896523][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.079206][T11073] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1377.107497][T25375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1377.107513][T25375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.299433][T11073] usb 2-1: Using ep0 maxpacket: 8
[ 1377.316275][T11073] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1377.316307][T11073] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1377.316327][T11073] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1377.316346][T11073] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1377.316358][T11073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.358204][T11073] usb 2-1: config 0 descriptor??
[ 1377.465967][T26589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6450'.
[ 1377.556179][T26591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6819'.
[ 1378.236387][T11073] usbhid 2-1:0.0: can't add hid device: -71
[ 1378.236506][T11073] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1378.263757][T11073] usb 2-1: USB disconnect, device number 91
[ 1379.015365][T26612] fuse: Bad value for 'fd'
[ 1379.101977][T26614] fuse: fd is not a fuse device
[ 1379.440970][T24681] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1380.318331][T24681] usb 1-1: Using ep0 maxpacket: 32
[ 1380.438036][T24681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.438071][T24681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.438111][T24681] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1380.438135][T24681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.625078][T24681] usb 1-1: config 0 descriptor??
[ 1380.651902][T24681] hub 1-1:0.0: USB hub found
[ 1381.570800][T24681] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1381.645299][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6840'.
[ 1381.973092][T24681] hid-generic 0003:046D:C31C.001D: unknown main item tag 0x0
[ 1382.058910][T24681] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[ 1382.427114][T26665] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1383.053782][T26668] loop0: detected capacity change from 0 to 512
[ 1383.110298][T26668] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[ 1384.552561][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1384.552660][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1384.693134][T10533] usb 1-1: USB disconnect, device number 47
[ 1386.121751][T26705] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 1390.674515][T26758] loop6: detected capacity change from 0 to 32768
[ 1391.171827][T10533] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1391.280091][T26758] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1391.622272][T10533] usb 1-1: Using ep0 maxpacket: 8
[ 1391.624490][T10533] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1391.624516][T10533] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1391.624562][T10533] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1391.624604][T10533] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1391.624628][T10533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.763870][T10533] usbtmc 1-1:16.0: bulk endpoints not found
[ 1391.783505][T26758] XFS (loop6): Ending clean mount
[ 1391.796824][T26758] XFS (loop6): Quotacheck needed: Please wait.
[ 1392.386512][T26758] XFS (loop6): Quotacheck: Done.
[ 1393.240507][T24681] IPVS: starting estimator thread 0...
[ 1393.349442][T26798] IPVS: using max 8 ests per chain, 19200 per kthread
[ 1393.395883][T22531] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1394.425874][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6895'.
[ 1394.425895][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6895'.
[ 1394.688466][  T821] usb 1-1: USB disconnect, device number 48
[ 1395.309297][T24681] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1395.482711][T24681] usb 1-1: Using ep0 maxpacket: 32
[ 1395.484854][T24681] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1395.484919][T24681] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1395.484947][T24681] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1395.484974][T24681] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1395.487462][T24681] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1395.487490][T24681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1395.487509][T24681] usb 1-1: Product: syz
[ 1395.487523][T24681] usb 1-1: Manufacturer: syz
[ 1395.487537][T24681] usb 1-1: SerialNumber: syz
[ 1395.587290][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1395.809716][T24681] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input16
[ 1395.907460][T24681] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1395.907481][T24681]  (id 0x00)
[ 1396.035011][T24681] rc_core: IR keymap rc-imon-pad not found
[ 1396.035031][T24681] Registered IR keymap rc-empty
[ 1396.035110][T24681] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1396.035129][T24681] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1396.102945][T24681] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[ 1396.106130][T24681] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input17
[ 1396.204781][T24681] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:49> initialized
[ 1397.188710][T24681] usb 1-1: USB disconnect, device number 49
[ 1397.272746][T26871] imon:send_packet: packet tx failed (-71)
[ 1397.291926][T26871] imon:vfd_write: send packet #2 failed
[ 1399.473445][T26889] netlink: 'syz.1.6929': attribute type 12 has an invalid length.
[ 1402.258866][T26935] tmpfs: Unsupported parameter 'huge'
[ 1402.273048][T26935] support for the xor transformation has been removed.
[ 1402.391735][T26941] loop0: detected capacity change from 0 to 512
[ 1402.542964][T26951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6951'.
[ 1402.542988][T26951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6951'.
[ 1402.577046][T26941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1402.577193][T26941] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1403.399312][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1404.281821][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6963'.
[ 1404.303964][T26986] loop0: detected capacity change from 0 to 128
[ 1404.305999][T26986] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[ 1410.836632][T27017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'.
[ 1410.935408][T27024] loop0: detected capacity change from 0 to 512
[ 1411.000405][T27024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1411.000546][T27024] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1411.216434][T27036] loop6: detected capacity change from 0 to 512
[ 1411.567620][T27036] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1411.803368][T27036] EXT4-fs (loop6): invalid journal inode
[ 1411.803594][T27036] EXT4-fs (loop6): can't get journal size
[ 1411.904677][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1411.964934][T27036] EXT4-fs (loop6): 1 truncate cleaned up
[ 1412.111554][T27036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1412.614831][T27057] loop1: detected capacity change from 0 to 256
[ 1413.048144][T27080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7006'.
[ 1413.056157][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1413.694844][T27101] loop0: detected capacity change from 0 to 512
[ 1413.785018][T27101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1413.785164][T27101] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1414.186463][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1414.269196][T23031] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[ 1414.465265][T23031] usb 2-1: config 0 has an invalid interface number: 237 but max is 0
[ 1414.465294][T23031] usb 2-1: config 0 has no interface number 0
[ 1414.465337][T23031] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[ 1414.465362][T23031] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1414.465386][T23031] usb 2-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1414.499248][T23031] usb 2-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6
[ 1414.499278][T23031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.499377][T23031] usb 2-1: Product: syz
[ 1414.499393][T23031] usb 2-1: Manufacturer: syz
[ 1414.499407][T23031] usb 2-1: SerialNumber: syz
[ 1414.511768][T23031] usb 2-1: config 0 descriptor??
[ 1414.739886][T23031] usb 2-1: USB disconnect, device number 92
[ 1417.326031][T27148] loop1: detected capacity change from 0 to 4096
[ 1417.337887][T27148] EXT4-fs: Ignoring removed orlov option
[ 1417.392422][T27150] loop6: detected capacity change from 0 to 128
[ 1417.402118][T27150] vfat: Unknown parameter 'ÿÿ00000000000000000000000184467440737095516151844674407370955161518446744073709551615¡£íu‡I£[ñžs
q
[ 1417.402118][T27150] Š|^é·Ä•‰&kÕ_ñ�ÌN NêÃðß7¸¾®¯Â*Z¡§'
[ 1417.619071][T27148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1417.619136][T27148] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1418.371575][T27148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1420.308878][T23031] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[ 1420.336859][T23031] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1420.550764][T22805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1420.706662][T27162] fido_id[27162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1420.758247][T27164] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7035'.
[ 1421.267114][   T37] audit: type=1326 audit(1780408566.213:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1421.268774][   T37] audit: type=1326 audit(1780408566.213:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1421.306264][   T37] audit: type=1326 audit(1780408566.222:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47f14fd68e code=0x7ffc0000
[ 1421.306326][   T37] audit: type=1326 audit(1780408566.222:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1421.306419][   T37] audit: type=1326 audit(1780408566.222:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1421.306460][   T37] audit: type=1326 audit(1780408566.222:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f47f14fd68e code=0x7ffc0000
[ 1421.390454][T27189] loop0: detected capacity change from 0 to 1024
[ 1421.391573][T27189] EXT4-fs: Ignoring removed orlov option
[ 1421.496796][   T37] audit: type=1326 audit(1780408566.416:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47f14fd68e code=0x7ffc0000
[ 1421.566065][T27189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1421.713910][   T37] audit: type=1326 audit(1780408566.619:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1421.713952][   T37] audit: type=1326 audit(1780408566.619:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27185 comm="syz.1.7046" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47f153ce59 code=0x7ffc0000
[ 1422.905382][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1423.753782][T23398] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[ 1423.892892][T27245] loop1: detected capacity change from 0 to 128
[ 1424.486549][T27255] loop6: detected capacity change from 0 to 256
[ 1424.566047][T27255] vfat: Bad value for 'dmask'
[ 1425.690541][T27272] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7079'.
[ 1425.940078][T27277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7083'.
[ 1426.468671][T27285] loop1: detected capacity change from 0 to 4096
[ 1426.473763][T27285] ext4: Unknown parameter 'noacl'
[ 1426.498521][T27285] overlayfs: failed to resolve './file0': -2
[ 1428.098263][T27307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7093'.
[ 1428.470167][T24681] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1428.715069][T24681] usb 2-1: Using ep0 maxpacket: 32
[ 1428.717475][T24681] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1428.717527][T24681] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1428.717555][T24681] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1428.717582][T24681] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1428.728468][T24681] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1428.728497][T24681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.728518][T24681] usb 2-1: Product: syz
[ 1428.728533][T24681] usb 2-1: Manufacturer: syz
[ 1428.728548][T24681] usb 2-1: SerialNumber: syz
[ 1428.845269][    C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1428.877136][T24681] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input18
[ 1429.257533][T24681] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1429.257554][T24681]  (id 0x00)
[ 1431.253150][T24681] rc_core: IR keymap rc-imon-pad not found
[ 1431.253173][T24681] Registered IR keymap rc-empty
[ 1431.253252][T24681] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1431.253271][T24681] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1431.296823][T24681] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[ 1431.368220][T24681] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input19
[ 1431.440998][T24681] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:93> initialized
[ 1432.353620][T27367] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7115'.
[ 1432.707288][ T5890] usb 2-1: USB disconnect, device number 93
[ 1433.101953][T16924] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1433.264224][T16924] usb 7-1: Using ep0 maxpacket: 8
[ 1433.267660][T16924] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1433.274231][T16924] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[ 1433.274261][T16924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.274282][T16924] usb 7-1: Product: syz
[ 1433.274297][T16924] usb 7-1: Manufacturer: syz
[ 1433.274312][T16924] usb 7-1: SerialNumber: syz
[ 1433.395853][ T5890] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1433.568458][ T5890] usb 2-1: Using ep0 maxpacket: 32
[ 1433.576172][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 200, changing to 11
[ 1433.576272][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8813, setting to 1024
[ 1433.576311][ T5890] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1433.576334][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1433.711374][ T5890] usb 2-1: config 0 descriptor??
[ 1434.032147][ T5890] usbhid 2-1:0.0: can't add hid device: -71
[ 1434.032262][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1434.082510][ T5890] usb 2-1: USB disconnect, device number 94
[ 1434.084194][T16924] usb 7-1: 1:1 : bogus bTerminalLink 2
[ 1434.084873][T16924] usb 7-1: unit 4 not found!
[ 1434.084892][T16924] usb 7-1: unit 11 not found!
[ 1434.084910][T16924] usb 7-1: unit 6 not found!
[ 1434.244500][T16924] usb 7-1: USB disconnect, device number 23
[ 1434.411797][T23416] udevd[23416]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1434.825792][T27415] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7136'.
[ 1436.199788][ T5890] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1436.225882][T27441] batadv_slave_0: entered promiscuous mode
[ 1436.227462][T27440] batadv_slave_0: left promiscuous mode
[ 1436.372954][ T5890] usb 7-1: Using ep0 maxpacket: 32
[ 1436.389803][ T5890] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1436.389868][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1436.389896][ T5890] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1436.389923][ T5890] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1436.394131][ T5890] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1436.394158][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.394179][ T5890] usb 7-1: Product: syz
[ 1436.394194][ T5890] usb 7-1: Manufacturer: syz
[ 1436.394209][ T5890] usb 7-1: SerialNumber: syz
[ 1436.534223][    C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1436.556368][ T5890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input20
[ 1436.795386][ T5890] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1436.795406][ T5890]  (id 0x00)
[ 1436.925384][T16924] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1436.993795][ T5890] rc_core: IR keymap rc-imon-pad not found
[ 1436.993817][ T5890] Registered IR keymap rc-empty
[ 1436.993896][ T5890] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1436.993914][ T5890] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1437.078822][ T5890] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[ 1437.081988][ T5890] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input21
[ 1437.146545][T16924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1437.146578][T16924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1437.146614][T16924] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1437.146897][T16924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.192828][ T5890] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:24> initialized
[ 1437.205008][T16924] usb 1-1: config 0 descriptor??
[ 1437.597245][T13088] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1437.706965][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707002][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707029][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707055][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707079][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707117][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.707143][T16924] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[ 1437.777724][T13088] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1437.777752][T13088] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1437.777770][T13088] usb 2-1: Product: syz
[ 1437.777784][T13088] usb 2-1: Manufacturer: syz
[ 1437.777797][T13088] usb 2-1: SerialNumber: syz
[ 1437.831065][T16924] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1437.838603][T13088] usb 2-1: config 0 descriptor??
[ 1437.872732][T13088] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1437.901364][T16924] cp2112 0003:10C4:EA90.001F: error requesting version
[ 1437.948291][T16924] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -5
[ 1438.063074][T13088] gspca_sunplus: reg_r err -32
[ 1438.143888][T23031] usb 2-1: USB disconnect, device number 95
[ 1438.918205][T27500] loop1: detected capacity change from 0 to 1024
[ 1438.921143][T27500] EXT4-fs: Ignoring removed bh option
[ 1438.923270][T27500] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1438.996513][T27500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1439.136654][T23031] usb 7-1: USB disconnect, device number 24
[ 1439.505532][   T37] audit: type=1326 audit(1780408583.006:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27498 comm="syz.1.7171" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47f153ce59 code=0x0
[ 1440.174488][T27500] overlayfs: failed index dir cleanup (-512)
[ 1440.174505][T27500] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1440.378260][T22805] EXT4-fs error (device loop1): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /173/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1440.450319][T22805] EXT4-fs (loop1): Remounting filesystem read-only
[ 1440.489426][T11073] usb 1-1: USB disconnect, device number 50
[ 1440.583703][T27541] support for the xor transformation has been removed.
[ 1440.742360][T27546] netlink: 'syz.0.7189': attribute type 12 has an invalid length.
[ 1440.880402][T27549] loop6: detected capacity change from 0 to 1024
[ 1441.095409][T27549] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.7191: bad orphan inode 204996608
[ 1441.095450][T27549] loop6: lost filesystem error report for type 5 error -117
[ 1441.095644][    C0] EXT4-fs (loop6): error count since last fsck: 1
[ 1441.095675][    C0] EXT4-fs (loop6): initial error at time 1780408584: ext4_orphan_get:1423
[ 1441.095697][    C0] EXT4-fs (loop6): last error at time 1780408584: ext4_orphan_get:1423
[ 1441.129498][T27549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1441.129625][T27549] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1441.170360][T27549] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.7191: inode has both inline data and extents flags
[ 1441.257536][T23564] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1441.342158][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1444.241637][T21866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1444.305861][T21866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1444.319024][T21866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1444.339184][T21866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1444.357125][T21866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1446.415564][T25374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.652562][T21866] Bluetooth: hci4: command tx timeout
[ 1446.899853][T27590] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7207'.
[ 1446.899878][T27590] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[ 1447.641816][T25374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.905590][T21866] Bluetooth: hci4: command tx timeout
[ 1450.630864][T25374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1450.956585][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1450.956776][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1451.158600][T21866] Bluetooth: hci4: command tx timeout
[ 1451.371765][T27699] loop0: detected capacity change from 0 to 1024
[ 1451.372780][T27699] EXT4-fs: Ignoring removed oldalloc option
[ 1451.641558][T27699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1451.641698][T27699] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1452.208959][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1452.712678][T27720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7259'.
[ 1453.230351][T25374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1453.251897][T27728] loop6: detected capacity change from 0 to 256
[ 1453.411503][T21866] Bluetooth: hci4: command tx timeout
[ 1453.549422][T27728] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x416ae761, utbl_chksum : 0xe619d30d)
[ 1458.601050][T27775] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7278'.
[ 1460.326641][T27780] loop6: detected capacity change from 0 to 256
[ 1460.879373][T27782] gre1: entered allmulticast mode
[ 1461.046244][T27797] loop0: detected capacity change from 0 to 512
[ 1461.069335][T27797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1461.142926][T27797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7286: bg 0: block 384: padding at end of block bitmap is not set
[ 1461.143047][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.145405][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 1461.145443][    C1] EXT4-fs (loop0): initial error at time 1780408603: ext4_validate_block_bitmap:441
[ 1461.145464][    C1] EXT4-fs (loop0): last error at time 1780408603: ext4_validate_block_bitmap:441
[ 1461.163086][T27797] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1461.163174][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.213060][T27797] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.7286: attempt to clear invalid blocks 983260 len 1
[ 1461.213161][T27797] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1461.352998][T27797] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.7286: Invalid inode table block 0 in block_group 0
[ 1461.353099][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.521858][T27797] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1461.521953][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.528093][T27797] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[ 1461.528120][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.563676][T27797] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.7286: Invalid inode table block 0 in block_group 0
[ 1461.563712][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.584447][T27797] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[ 1461.584480][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.609866][T27797] EXT4-fs error (device loop0): ext4_truncate:4690: inode #11: comm syz.0.7286: mark_inode_dirty error
[ 1461.609897][T27797] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1461.616161][T27797] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[ 1461.616186][T27797] loop0: lost filesystem error report for type 5 error -117
[ 1461.638959][T27797] EXT4-fs (loop0): 1 truncate cleaned up
[ 1461.667272][T27797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1461.754503][T25374] bridge_slave_1: left allmulticast mode
[ 1461.754534][T25374] bridge_slave_1: left promiscuous mode
[ 1461.754789][T25374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1461.938879][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.059747][T25374] bridge_slave_0: left allmulticast mode
[ 1462.059780][T25374] bridge_slave_0: left promiscuous mode
[ 1462.060083][T25374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1462.104276][T27826] loop6: detected capacity change from 0 to 16
[ 1462.190832][T27826] erofs (device loop6): mounted with root inode @ nid 36.
[ 1462.341642][T27831] netlink: 992 bytes leftover after parsing attributes in process `syz.0.7292'.
[ 1466.888842][T25374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1466.985767][T25374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1467.074364][T25374] bond0 (unregistering): Released all slaves
[ 1467.186255][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1467.216018][T27597] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1467.216338][T27597] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1467.216615][T27597] bridge_slave_0: entered allmulticast mode
[ 1467.240221][T27597] bridge_slave_0: entered promiscuous mode
[ 1467.257271][T27597] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1467.257680][T27597] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1467.257955][T27597] bridge_slave_1: entered allmulticast mode
[ 1467.261295][T27597] bridge_slave_1: entered promiscuous mode
[ 1467.602553][T27597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1467.632336][T27597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1467.972339][T27597] team0: Port device team_slave_0 added
[ 1467.998774][T27597] team0: Port device team_slave_1 added
[ 1468.088345][T27597] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1468.088359][T27597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.088379][T27597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1468.214169][T27597] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1468.214188][T27597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.214215][T27597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1469.943824][T27597] hsr_slave_0: entered promiscuous mode
[ 1469.980842][T27597] hsr_slave_1: entered promiscuous mode
[ 1469.990973][T27597] debugfs: 'hsr0' already exists in 'hsr'
[ 1469.990997][T27597] Cannot create hsr debugfs directory
[ 1471.473892][T27983] Invalid argument reading file caps for ./file0
[ 1472.414208][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1472.670360][T27977] loop6: detected capacity change from 0 to 40427
[ 1472.705206][T28010] loop0: detected capacity change from 0 to 2048
[ 1472.762065][T27977] f2fs: Unknown parameter 'whint_mode'
[ 1473.053179][T28010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1473.053312][T28010] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1473.703949][   T37] audit: type=1800 audit(1780408614.506:555): pid=28010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7367" name="file0" dev="loop0" ino=13 res=0 errno=0
[ 1473.846299][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1474.912786][ T5636] Bluetooth: hci1: command 0x0406 tx timeout
[ 1474.940616][T25374] hsr_slave_0: left promiscuous mode
[ 1474.959454][T28018] loop6: detected capacity change from 0 to 40427
[ 1474.964644][T28018] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[ 1474.964666][T28018] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1475.019807][T25374] hsr_slave_1: left promiscuous mode
[ 1475.020911][T25374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1475.020936][T25374] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1475.209346][T25374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1475.209374][T25374] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1475.671732][T25374] veth1_macvtap: left promiscuous mode
[ 1475.671836][T25374] veth0_macvtap: left promiscuous mode
[ 1475.672115][T25374] veth1_vlan: left promiscuous mode
[ 1475.672290][T25374] veth0_vlan: left promiscuous mode
[ 1475.895296][T28018] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1475.961383][T28078] loop0: detected capacity change from 0 to 512
[ 1476.004331][T28078] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[ 1476.079718][T28078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1476.079866][T28078] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1476.426304][T28083] overlay: Unknown parameter './file0'
[ 1476.728729][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1478.546052][T25374] team0 (unregistering): Port device team_slave_1 removed
[ 1478.729028][T25374] team0 (unregistering): Port device team_slave_0 removed
[ 1479.704468][T28147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7417'.
[ 1479.895814][ T5293] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1479.897546][T28123] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7403'.
[ 1480.246473][T28155] loop0: detected capacity change from 0 to 1024
[ 1480.255316][T28155] EXT4-fs: Ignoring removed bh option
[ 1480.267369][T28155] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1480.541500][T28155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1483.072896][T28185] loop6: detected capacity change from 0 to 256
[ 1483.081820][T28185] vfat: Unknown parameter '0x0000000000000007'
[ 1484.713799][T28155] overlayfs: failed index dir cleanup (-512)
[ 1484.713815][T28155] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1486.170133][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1486.319655][T27597] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1486.375442][T27597] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1486.412115][T27597] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1486.594845][T27597] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1486.602407][T27597] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1487.976800][T27597] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1487.981401][T28219] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7433'.
[ 1488.096561][T27597] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1489.382162][T27597] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1490.443795][ T5293] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1491.142473][T28290] loop6: detected capacity change from 0 to 128
[ 1491.225259][T28290] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1491.333741][T28290] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1491.495798][T27597] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1492.554943][T27597] 8021q: adding VLAN 0 to HW filter on device team0
[ 1492.610594][T25372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1492.610757][T25372] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1492.769279][T25373] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1492.769458][T25373] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1494.063290][ T1319] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1498.243816][T27597] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1500.710035][T27597] veth0_vlan: entered promiscuous mode
[ 1500.848853][T27597] veth1_vlan: entered promiscuous mode
[ 1501.195055][T27597] veth0_macvtap: entered promiscuous mode
[ 1501.233230][T27597] veth1_macvtap: entered promiscuous mode
[ 1501.366295][T27597] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1501.449733][T27597] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.523201][ T1332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.524688][ T1332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.540861][ T1332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.551612][ T1332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1504.454661][T25371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1504.454681][T25371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1504.859661][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1504.859681][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1509.871882][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1509.894899][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1509.938715][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1509.963455][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1510.000094][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1510.788882][T10533] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1510.967573][T10533] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.967627][T10533] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1510.967670][T10533] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1510.967694][T10533] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.025403][T10533] usb 1-1: config 0 descriptor??
[ 1511.064710][T10533] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1511.532436][T28606] loop6: detected capacity change from 0 to 512
[ 1511.671547][T28606] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1511.705857][T28606] EXT4-fs error (device loop6): __ext4_iget:5481: inode #11: block 1: comm syz.6.7560: invalid block
[ 1511.705891][T28606] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1511.714779][T28606] EXT4-fs (loop6): Remounting filesystem read-only
[ 1511.717665][T28606] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1511.874252][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1512.223409][T28625] loop6: detected capacity change from 0 to 1024
[ 1512.268814][T28625] hfsplus: failed to load extents file
[ 1512.436100][ T5636] Bluetooth: hci5: command tx timeout
[ 1513.800708][T10533] usb 1-1: USB disconnect, device number 51
[ 1514.084867][T28651] loop0: detected capacity change from 0 to 512
[ 1514.158954][T28651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1514.158980][T28651] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[ 1514.676694][ T5636] Bluetooth: hci5: command tx timeout
[ 1514.728618][ T1332] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1515.653145][T28685] loop0: detected capacity change from 0 to 512
[ 1515.654197][T28685] EXT4-fs: Ignoring removed orlov option
[ 1515.654224][T28685] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1515.732766][T28685] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.7586: corrupted in-inode xattr: e_value size too large
[ 1515.732885][T28685] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1515.781482][T28684] netlink: 'syz.6.7585': attribute type 12 has an invalid length.
[ 1515.943781][    C1] EXT4-fs (loop0): error count since last fsck: 1
[ 1515.943818][    C1] EXT4-fs (loop0): initial error at time 1780408653: ext4_iget_extra_inode:5128: inode 15
[ 1515.943870][    C1] EXT4-fs (loop0): last error at time 1780408653: ext4_iget_extra_inode:5128: inode 15
[ 1515.993977][T28685] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.7586: couldn't read orphan inode 15 (err -117)
[ 1515.994013][T28685] loop0: lost filesystem error report for type 5 error -117
[ 1516.021145][T28685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1516.107152][T28685] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 12: comm syz.0.7586: lblock 3 mapped to illegal pblock 12 (length 1)
[ 1516.304732][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1516.820463][ T1332] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1516.929710][ T5636] Bluetooth: hci5: command tx timeout
[ 1517.042947][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1517.043039][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1517.137737][T28719] loop6: detected capacity change from 0 to 2048
[ 1517.138756][T28719] EXT4-fs: Ignoring removed i_version option
[ 1517.168040][T23031] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1517.190713][T28719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1517.190819][T28719] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1517.316348][T28547] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1517.318426][T28547] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1517.318712][T28547] bridge_slave_0: entered allmulticast mode
[ 1517.325707][T28547] bridge_slave_0: entered promiscuous mode
[ 1517.339089][T23031] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1517.339117][T23031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.339137][T23031] usb 1-1: Product: syz
[ 1517.339151][T23031] usb 1-1: Manufacturer: syz
[ 1517.339168][T23031] usb 1-1: SerialNumber: syz
[ 1517.343079][T28547] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1517.343360][T28547] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1517.343728][T28547] bridge_slave_1: entered allmulticast mode
[ 1517.367349][T28547] bridge_slave_1: entered promiscuous mode
[ 1517.425639][T23031] usb 1-1: config 0 descriptor??
[ 1517.438525][T23031] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1518.203419][T23031] gspca_sunplus: reg_w_riv err -110
[ 1518.203515][T23031] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[ 1518.437584][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1518.530875][ T1332] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1518.921676][T28547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1518.960388][T28547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1519.062641][T28547] team0: Port device team_slave_0 added
[ 1519.083083][T28547] team0: Port device team_slave_1 added
[ 1519.392636][ T5636] Bluetooth: hci5: command tx timeout
[ 1520.453240][T23398] usb 1-1: USB disconnect, device number 52
[ 1520.574552][T28749] loop6: detected capacity change from 0 to 128
[ 1520.611354][T28749] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1520.628955][T28749] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1521.237710][ T1332] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.616587][T22531] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1521.845526][T28753] netlink: 'syz.0.7613': attribute type 12 has an invalid length.
[ 1522.030323][T28547] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1522.030340][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1522.030364][T28547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1522.035175][T28547] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1522.035189][T28547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1522.035213][T28547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1522.328551][T28547] hsr_slave_0: entered promiscuous mode
[ 1522.333831][T28547] hsr_slave_1: entered promiscuous mode
[ 1522.343992][T28547] debugfs: 'hsr0' already exists in 'hsr'
[ 1522.344015][T28547] Cannot create hsr debugfs directory
[ 1523.048917][T28810] netlink: 'syz.2.7635': attribute type 12 has an invalid length.
[ 1523.919525][   T10] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1524.067307][T28835] netlink: 'syz.2.7647': attribute type 12 has an invalid length.
[ 1524.080744][   T10] usb 1-1: Using ep0 maxpacket: 32
[ 1524.091544][   T10] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[ 1524.091572][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.091592][   T10] usb 1-1: Product: syz
[ 1524.091606][   T10] usb 1-1: Manufacturer: syz
[ 1524.091621][   T10] usb 1-1: SerialNumber: syz
[ 1524.474704][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1524.509803][   T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1524.807402][   T10] usb 1-1: USB disconnect, device number 53
[ 1525.408225][   T32] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1525.938076][   T32] usb 7-1: Using ep0 maxpacket: 16
[ 1526.135155][ T1332] bridge_slave_1: left allmulticast mode
[ 1526.135187][ T1332] bridge_slave_1: left promiscuous mode
[ 1526.135440][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1526.192163][   T32] usb 7-1: config index 0 descriptor too short (expected 47123, got 10)
[ 1526.192191][   T32] usb 7-1: config 170 has too many interfaces: 83, using maximum allowed: 32
[ 1526.192212][   T32] usb 7-1: config 170 descriptor has 1 excess byte, ignoring
[ 1526.192231][   T32] usb 7-1: config 170 has 0 interfaces, different from the descriptor's value: 83
[ 1526.205622][T28876] loop0: detected capacity change from 0 to 256
[ 1526.243381][   T32] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1526.243409][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.243428][   T32] usb 7-1: Product: syz
[ 1526.243444][   T32] usb 7-1: Manufacturer: syz
[ 1526.243459][   T32] usb 7-1: SerialNumber: syz
[ 1526.426102][T28876] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[ 1526.426131][T28876] FAT-fs (loop0): Filesystem has been set read-only
[ 1526.447963][ T1332] bridge_slave_0: left allmulticast mode
[ 1526.447996][ T1332] bridge_slave_0: left promiscuous mode
[ 1526.450616][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1526.905866][T13088] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1527.176670][T13088] usb 1-1: Using ep0 maxpacket: 32
[ 1527.179736][T13088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1527.179755][T13088] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1527.179776][T13088] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1527.179788][T13088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1527.241091][T13088] usb 1-1: config 0 descriptor??
[ 1527.285093][T13088] hub 1-1:0.0: USB hub found
[ 1527.475958][T13088] hub 1-1:0.0: 1 port detected
[ 1528.274630][   T32] usb 7-1: USB disconnect, device number 25
[ 1528.503003][T28924] loop6: detected capacity change from 0 to 164
[ 1528.773605][T13088] hub 1-1:0.0: activate --> -90
[ 1529.333708][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1530.148928][T13088] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1530.150925][T13088] usb 1-1-port1: cannot reset (err = -71)
[ 1530.150945][T13088] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[ 1530.151284][T13088] usb 1-1-port1: cannot disable (err = -71)
[ 1530.151737][T13088] usb 1-1-port1: cannot reset (err = -71)
[ 1530.152060][T13088] usb 1-1-port1: cannot reset (err = -71)
[ 1530.152096][T13088] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[ 1530.152429][T13088] usb 1-1-port1: cannot disable (err = -71)
[ 1530.152489][T13088] usb 1-1-port1: attempt power cycle
[ 1530.152984][T10533] usb 1-1: USB disconnect, device number 54
[ 1530.233119][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1530.278637][ T1332] bond0 (unregistering): Released all slaves
[ 1530.389360][T28951] gre1: left allmulticast mode
[ 1530.481754][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1530.481912][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1531.023451][T28970] loop0: detected capacity change from 0 to 512
[ 1531.040414][T28970] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1532.719854][T28970] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.7702: Allocating blocks 41-42 which overlap fs metadata
[ 1532.719964][T28970] loop0: lost filesystem error report for type 5 error -117
[ 1532.732838][    C0] EXT4-fs (loop0): initial error at time 1780408669: ext4_mb_mark_diskspace_used:4222
[ 1532.732869][    C0] EXT4-fs (loop0): last error at time 1780408669: ext4_mb_mark_diskspace_used:4222
[ 1534.138064][T28970] Quota error (device loop0): write_blk: dquota write failed
[ 1534.138087][T28970] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[ 1534.518616][T28970] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1534.518767][T28970] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7702: Failed to acquire dquot type 1
[ 1534.518792][T28970] loop0: lost filesystem error report for type 5 error -117
[ 1534.588214][T28970] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[ 1534.631669][T28970] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7702: corrupted inode contents
[ 1534.631702][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.642149][T28970] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.7702: mark_inode_dirty error
[ 1534.642180][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.666361][T28970] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7702: corrupted inode contents
[ 1534.666383][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.667077][T28970] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.7702: mark_inode_dirty error
[ 1534.667106][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.669931][T28970] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7702: corrupted inode contents
[ 1534.669963][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.679592][T28970] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[ 1534.679615][T28970] loop0: lost filesystem error report for type 5 error -117
[ 1534.681477][T28970] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.7702: corrupted inode contents
[ 1534.681505][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.685694][T28970] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.7702: mark_inode_dirty error
[ 1534.685722][T28970] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[ 1534.687693][T28970] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[ 1534.687716][T28970] loop0: lost filesystem error report for type 5 error -117
[ 1534.717979][T28970] EXT4-fs (loop0): 1 truncate cleaned up
[ 1534.728431][T28970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1534.966715][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1535.113057][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1535.432904][T29050] loop6: detected capacity change from 0 to 164
[ 1535.467550][T29050] ISOFS: unable to read i-node block
[ 1535.467615][T29050] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1535.481145][T29051] loop0: detected capacity change from 0 to 2048
[ 1535.482302][T29051] udf: Bad value for 'volume'
[ 1538.799309][T29109] loop0: detected capacity change from 0 to 512
[ 1538.830051][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7747'.
[ 1539.242576][T29109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1539.242706][T29109] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1540.181355][T29133] loop6: detected capacity change from 0 to 512
[ 1540.188468][T29133] ext4: Bad value for 'sb'
[ 1540.601362][T25641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1542.272190][ T1332] hsr_slave_0: left promiscuous mode
[ 1542.334757][ T1332] hsr_slave_1: left promiscuous mode
[ 1542.335821][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1542.335845][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1542.385878][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1542.385902][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1542.553644][T29196] loop0: detected capacity change from 0 to 512
[ 1542.822301][T29205] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1543.926477][ T1332] veth1_macvtap: left promiscuous mode
[ 1543.926582][ T1332] veth0_macvtap: left promiscuous mode
[ 1543.930473][ T1332] veth1_vlan: left promiscuous mode
[ 1543.930712][ T1332] veth0_vlan: left promiscuous mode
[ 1550.053184][T29231] loop6: detected capacity change from 0 to 256
[ 1551.123276][T29231] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1551.123629][T29231] exFAT-fs (loop6): failed to load alloc-bitmap
[ 1551.123642][T29231] exFAT-fs (loop6): failed to recognize exfat type
[ 1551.771362][T29255] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1552.406082][ T1332] team0 (unregistering): Port device team_slave_1 removed
[ 1552.591934][ T1332] team0 (unregistering): Port device team_slave_0 removed
[ 1554.704801][T29332] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1555.435547][T29338] loop6: detected capacity change from 0 to 4096
[ 1555.734864][T29338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1556.348425][   T37] audit: type=1800 audit(1780408690.910:556): pid=29338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7830" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1556.482457][   T37] audit: type=1800 audit(1780408690.919:557): pid=29353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7830" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1556.828254][T22531] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1557.310250][T28547] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1557.411819][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7841'.
[ 1557.427169][T28547] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1557.471307][T28547] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1557.536605][T28547] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1557.555615][T28547] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1557.724995][T28547] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1557.801050][T28547] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1557.850047][T28547] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1558.132162][T29413] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1558.923238][T28547] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1559.289694][T28547] 8021q: adding VLAN 0 to HW filter on device team0
[ 1559.324290][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1559.328937][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1559.366583][T25376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1559.368806][T25376] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1560.127667][T10533] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1560.313936][T10533] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1560.313989][T10533] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1560.314032][T10533] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1560.314055][T10533] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.433089][T10533] usb 7-1: config 0 descriptor??
[ 1560.446473][T10533] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1561.506989][   T44] usb 7-1: USB disconnect, device number 26
[ 1562.193686][T28547] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1564.141592][T28547] veth0_vlan: entered promiscuous mode
[ 1564.215049][T28547] veth1_vlan: entered promiscuous mode
[ 1565.047749][T28547] veth0_macvtap: entered promiscuous mode
[ 1565.063318][T28547] veth1_macvtap: entered promiscuous mode
[ 1565.148401][T28547] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1565.210704][T28547] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1565.341509][T25371] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.341764][T25371] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.341810][T25371] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.341844][T25371] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1565.941710][T29537] Bluetooth: hci0: invalid len left 7, exp >= 86
[ 1566.666427][T29545] loop6: detected capacity change from 0 to 8
[ 1566.770443][T29545] squashfs: Unknown parameter 'ÿÿÿÿ01777777777777777777777'
[ 1567.293082][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1567.293103][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1568.852676][T29574] cgroup: Unknown subsys name 'cpuset'
[ 1568.951193][   T37] audit: type=1326 audit(1780408702.551:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29575 comm="syz.2.7905" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6c3bfce59 code=0x0
[ 1569.027218][T25369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1569.027238][T25369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1570.129402][T21866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1570.849942][T21866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1570.869685][T21866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1570.891447][T29598] binder: 29596:29598 ioctl c0306201 200000001a80 returned -14
[ 1570.891591][T21866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1570.907257][T21866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1571.707406][T29624] loop7: detected capacity change from 0 to 2048
[ 1573.226518][T29624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1573.501413][ T5636] Bluetooth: hci4: command tx timeout
[ 1575.320995][T29640] loop6: detected capacity change from 0 to 256
[ 1575.441361][T29640] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[ 1575.651553][T29644] fuse: fd is not a fuse device
[ 1575.655080][T29640] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff)
[ 1575.681850][ T5636] Bluetooth: hci4: command tx timeout
[ 1575.788053][   T37] audit: type=1326 audit(1780408708.857:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29647 comm="syz.0.7926" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f372689ce59 code=0x0
[ 1577.633178][T29671] loop7: detected capacity change from 0 to 512
[ 1577.748101][T29671] EXT4-fs (loop7): 1 truncate cleaned up
[ 1577.788594][T29671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1577.890503][T28547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1577.951522][ T5636] Bluetooth: hci4: command tx timeout
[ 1578.313336][T29689] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1578.375849][T29687] loop7: detected capacity change from 0 to 256
[ 1580.198794][ T5636] Bluetooth: hci4: command tx timeout
[ 1580.429434][ T1554] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1580.986544][T29711] loop7: detected capacity change from 0 to 256
[ 1582.113065][T29717] cgroup: Unknown subsys name 'cpuset'
[ 1583.018224][T29726] loop0: detected capacity change from 0 to 256
[ 1583.019292][T29726] exfat: Bad value for 'uid'
[ 1583.019309][T29726] exfat: Bad value for 'uid'
[ 1585.371914][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1585.372021][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1585.936900][ T1554] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1587.939402][T29760] netlink: 'syz.2.7957': attribute type 1 has an invalid length.
[ 1587.994677][T29761] loop7: detected capacity change from 0 to 16
[ 1588.017020][T29762] kvm: requested 31009 ns i8254 timer period limited to 200000 ns
[ 1588.373638][T29761] erofs (device loop7): invalid ishare xattr prefix id 0
[ 1588.409420][T23398] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1589.711618][T23398] usb 7-1: Using ep0 maxpacket: 32
[ 1589.717109][T23398] usb 7-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config
[ 1589.717135][T23398] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1589.717179][T23398] usb 7-1: too many endpoints for config 1 interface 1 altsetting 0: 228, using maximum allowed: 30
[ 1589.717224][T23398] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 228
[ 1589.717263][T23398] usb 7-1: config 1 interface 1 altsetting 129 endpoint 0x1 has an invalid bInterval 94, changing to 7
[ 1589.717290][T23398] usb 7-1: config 1 interface 1 has no altsetting 1
[ 1589.809559][T23398] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[ 1589.809590][T23398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1589.809611][T23398] usb 7-1: Product: syz
[ 1589.809626][T23398] usb 7-1: Manufacturer: syz
[ 1589.809641][T23398] usb 7-1: SerialNumber: syz
[ 1590.052300][T29773] loop7: detected capacity change from 0 to 512
[ 1590.052976][T29773] EXT4-fs: inline encryption not supported
[ 1590.056310][T29773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1590.056331][T29773] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1590.170183][T29773] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 1
[ 1590.174090][T29773] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota
[ 1590.174133][T29773] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7956: Failed to acquire dquot type 1
[ 1590.174157][T29773] loop7: lost filesystem error report for type 5 error -5
[ 1590.174817][T29773] EXT4-fs (loop7): Remounting filesystem read-only
[ 1590.174932][T29773] EXT4-fs (loop7): 1 truncate cleaned up
[ 1590.180338][T23398] usb 7-1: 1:129 : no or invalid class specific endpoint descriptor
[ 1590.180439][T23398] usb 7-1: 1:129: invalid format type 0x1001 is detected, processed as PCM
[ 1590.180489][T23398] usb 7-1: 1:129 : invalid UAC_FORMAT_TYPE desc
[ 1590.182606][T29773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1590.528723][T28547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1590.715067][T29772] =========================[ 1590.715067][T29772] ==================================================================
[ 1590.715086][T29772] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380
[ 1590.715226][T29772] Read of size 8 at addr ffff888037a39668 by task syz.2.7959/29772
[ 1590.715246][T29772] 
[ 1590.715268][T29772] CPU: 1 UID: 0 PID: 29772 Comm: syz.2.7959 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1590.715301][T29772] Tainted: [L]=SOFTLOCKUP
[ 1590.715310][T29772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1590.715323][T29772] Call Trace:
[ 1590.715363][T29772]  <TASK>
[ 1590.715428][T29772]  dump_stack_lvl+0xe8/0x150
[ 1590.715549][T29772]  print_address_description+0x55/0x1e0
[ 1590.715574][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.715618][T29772]  print_report+0x58/0x70
[ 1590.715643][T29772]  kasan_report+0x117/0x150
[ 1590.715672][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.715703][T29772]  clear_tfile_check_list+0x114/0x380
[ 1590.715722][T29772]  ? clear_tfile_check_list+0x22/0x380
[ 1590.715744][T29772]  do_epoll_ctl_file+0x8fd/0xed0
[ 1590.715774][T29772]  ? do_epoll_ctl_file+0xac3/0xed0
[ 1590.715801][T29772]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[ 1590.715831][T29772]  ? __fget_files+0x3a6/0x420
[ 1590.715857][T29772]  ? __fget_files+0x2a/0x420
[ 1590.715889][T29772]  __se_sys_epoll_ctl+0x14e/0x210
[ 1590.715921][T29772]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[ 1590.715954][T29772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.715976][T29772]  do_syscall_64+0x174/0x580
[ 1590.715997][T29772]  ? trace_irq_disable+0x3b/0x140
[ 1590.716022][T29772]  ? clear_bhb_loop+0x40/0x90
[ 1590.716045][T29772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.716066][T29772] RIP: 0033:0x7ff6c3bfce59
[ 1590.716115][T29772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1590.716135][T29772] RSP: 002b:00007ff6c1e0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 1590.716186][T29772] RAX: ffffffffffffffda RBX: 00007ff6c3e76180 RCX: 00007ff6c3bfce59
[ 1590.716202][T29772] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007
[ 1590.716216][T29772] RBP: 00007ff6c3c92d6f R08: 0000000000000000 R09: 0000000000000000
[ 1590.716229][T29772] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1590.716244][T29772] R13: 00007ff6c3e76218 R14: 00007ff6c3e76180 R15: 00007ffebd04dc28
[ 1590.716269][T29772]  </TASK>
[ 1590.716277][T29772] 
[ 1590.716281][T29772] Allocated by task 29770:
[ 1590.716324][T29772]  kasan_save_track+0x3e/0x80
[ 1590.716349][T29772]  __kasan_slab_alloc+0x6c/0x80
[ 1590.716373][T29772]  kmem_cache_alloc_noprof+0x33b/0x680
[ 1590.716396][T29772]  ep_insert+0x512/0x1820
[ 1590.716420][T29772]  do_epoll_ctl_file+0x8bb/0xed0
[ 1590.716447][T29772]  __se_sys_epoll_ctl+0x14e/0x210
[ 1590.716474][T29772]  do_syscall_64+0x174/0x580
[ 1590.716492][T29772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.716510][T29772] 
[ 1590.716515][T29772] Freed by task 29769:
[ 1590.716525][T29772]  kasan_save_track+0x3e/0x80
[ 1590.716547][T29772]  kasan_save_free_info+0x46/0x50
[ 1590.716565][T29772]  __kasan_slab_free+0x5c/0x80
[ 1590.716588][T29772]  kmem_cache_free+0x187/0x6c0
[ 1590.716611][T29772]  eventpoll_release_file+0xc2/0x240
[ 1590.716637][T29772]  __fput+0x83c/0xa70
[ 1590.716657][T29772]  task_work_run+0x1d9/0x270
[ 1590.716681][T29772]  exit_to_user_mode_loop+0x193/0x680
[ 1590.716715][T29772]  do_syscall_64+0x353/0x580
[ 1590.716733][T29772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.716751][T29772] 
[ 1590.716757][T29772] The buggy address belongs to the object at ffff888037a39660
[ 1590.716757][T29772]  which belongs to the cache ep_head of size 16
[ 1590.716776][T29772] The buggy address is located 8 bytes inside of
[ 1590.716776][T29772]  freed 16-byte region [ffff888037a39660, ffff888037a39670)
[ 1590.716799][T29772] 
[ 1590.716805][T29772] The buggy address belongs to the physical page:
[ 1590.716859][T29772] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888037a39680 pfn:0x37a39
[ 1590.716881][T29772] memcg:ffff888033c4c801
[ 1590.716891][T29772] flags: 0x80000000000200(workingset|node=0|zone=1)
[ 1590.716908][T29772] page_type: f5(slab)
[ 1590.716927][T29772] raw: 0080000000000200 ffff888140eafb40 ffffea0000e25850 ffffea0000d3cd90
[ 1590.716947][T29772] raw: ffff888037a39680 0000000800800021 00000000f5000000 ffff888033c4c801
[ 1590.716958][T29772] page dumped because: kasan: bad access detected
[ 1590.716974][T29772] page_owner tracks the page as allocated
[ 1590.716982][T29772] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5007, tgid 5007 (udevd), ts 33865419465, free_ts 33825993892
[ 1590.717019][T29772]  post_alloc_hook+0x1f9/0x250
[ 1590.717043][T29772]  get_page_from_freelist+0x265c/0x26e0
[ 1590.717071][T29772]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1590.717098][T29772]  allocate_slab+0x74/0x5e0
[ 1590.717116][T29772]  refill_objects+0x33c/0x3d0
[ 1590.717133][T29772]  __pcs_replace_empty_main+0x373/0x720
[ 1590.717152][T29772]  kmem_cache_alloc_noprof+0x433/0x680
[ 1590.717177][T29772]  ep_insert+0x512/0x1820
[ 1590.717202][T29772]  do_epoll_ctl_file+0x8bb/0xed0
[ 1590.717229][T29772]  __se_sys_epoll_ctl+0x14e/0x210
[ 1590.717258][T29772]  do_syscall_64+0x174/0x580
[ 1590.717275][T29772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.717294][T29772] page last free pid 29 tgid 29 stack trace:
[ 1590.717306][T29772]  __free_frozen_pages+0x10af/0x1190
[ 1590.717332][T29772]  tlb_remove_table_rcu+0x85/0x100
[ 1590.717361][T29772]  rcu_cpu_kthread+0x99e/0x1470
[ 1590.717387][T29772]  smpboot_thread_fn+0x541/0xa50
[ 1590.717407][T29772]  kthread+0x388/0x470
[ 1590.717442][T29772]  ret_from_fork+0x514/0xb70
[ 1590.717468][T29772]  ret_from_fork_asm+0x1a/0x30
[ 1590.717495][T29772] 
[ 1590.717501][T29772] Memory state around the buggy address:
[ 1590.717553][T29772]  ffff888037a39500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1590.717569][T29772]  ffff888037a39580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1590.717581][T29772] >ffff888037a39600: 00 00 fc fc fa fb fc fc 00 00 fc fc fa fb fc fc
[ 1590.717591][T29772]                                                           ^
[ 1590.717602][T29772]  ffff888037a39680: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc
[ 1590.717615][T29772]  ffff888037a39700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[ 1590.717625][T29772] ==================================================================
[ 1590.725564][T29772] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1590.725590][T29772] CPU: 1 UID: 0 PID: 29772 Comm: syz.2.7959 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1590.725621][T29772] Tainted: [L]=SOFTLOCKUP
[ 1590.725630][T29772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1590.725643][T29772] Call Trace:
[ 1590.725651][T29772]  <TASK>
[ 1590.725659][T29772]  vpanic+0x56c/0xa60
[ 1590.725701][T29772]  ? __pfx_vpanic+0x10/0x10
[ 1590.725730][T29772]  ? __pfx___schedule+0x10/0x10
[ 1590.725764][T29772]  panic+0xc5/0xd0
[ 1590.725791][T29772]  ? __pfx_panic+0x10/0x10
[ 1590.725818][T29772]  ? preempt_schedule_thunk+0x16/0x40
[ 1590.725845][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.725866][T29772]  check_panic_on_warn+0x89/0xb0
[ 1590.725892][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.725912][T29772]  end_report+0x73/0x170
[ 1590.725941][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.725959][T29772]  kasan_report+0x128/0x150
[ 1590.725988][T29772]  ? clear_tfile_check_list+0x114/0x380
[ 1590.726011][T29772]  clear_tfile_check_list+0x114/0x380
[ 1590.726032][T29772]  ? clear_tfile_check_list+0x22/0x380
[ 1590.726052][T29772]  do_epoll_ctl_file+0x8fd/0xed0
[ 1590.726083][T29772]  ? do_epoll_ctl_file+0xac3/0xed0
[ 1590.726113][T29772]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[ 1590.726145][T29772]  ? __fget_files+0x3a6/0x420
[ 1590.726170][T29772]  ? __fget_files+0x2a/0x420
[ 1590.726199][T29772]  __se_sys_epoll_ctl+0x14e/0x210
[ 1590.726231][T29772]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[ 1590.726265][T29772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.726286][T29772]  do_syscall_64+0x174/0x580
[ 1590.726306][T29772]  ? trace_irq_disable+0x3b/0x140
[ 1590.726332][T29772]  ? clear_bhb_loop+0x40/0x90
[ 1590.726355][T29772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1590.726375][T29772] RIP: 0033:0x7ff6c3bfce59
[ 1590.726394][T29772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1590.726412][T29772] RSP: 002b:00007ff6c1e0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 1590.726435][T29772] RAX: ffffffffffffffda RBX: 00007ff6c3e76180 RCX: 00007ff6c3bfce59
[ 1590.726451][T29772] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007
[ 1590.726465][T29772] RBP: 00007ff6c3c92d6f R08: 0000000000000000 R09: 0000000000000000
[ 1590.726478][T29772] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1590.726493][T29772] R13: 00007ff6c3e76218 R14: 00007ff6c3e76180 R15: 00007ffebd04dc28
[ 1590.726517][T29772]  </TASK>
[ 1590.726777][T29772] Kernel Offset: disabled