last executing test programs:

10m52.090600105s ago: executing program 0 (id=184):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000400)={[{@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@fmask={'fmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@errors_continue}, {}]}, 0x1, 0x1535, &(0x7f0000001380)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x6000)

10m49.700472045s ago: executing program 0 (id=188):
mknod$loop(0x0, 0xfff, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
sendmsg$NFT_BATCH(r1, 0x0, 0x20040014)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})

10m46.835751195s ago: executing program 0 (id=193):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x1, 0x200001, 0x1032, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x911, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x2, 0x5, 0x18, 0x2, 0x2000006, 0x5]})

10m43.824862012s ago: executing program 0 (id=196):
mknod$loop(0x0, 0xfff, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
sendmsg$NFT_BATCH(r1, 0x0, 0x20040014)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x80000)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_FM_LOAD_INSTR(r3, 0x40285107)
socket$inet_sctp(0x2, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r5, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})

10m39.112471095s ago: executing program 0 (id=206):
syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x1002}})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x9, 0x0, 0x0, 0x0, 0x784d, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'])
read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x6ac)
pread64(r3, &(0x7f0000004200)=""/236, 0xec, 0x0)
r4 = socket$inet(0x2, 0x3, 0x81)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)}, 0x20004810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r3, {0xe}}, './file0\x00'})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}, @exit_looper, @release={0x40046306, 0x2}], 0x42, 0x0, &(0x7f00000001c0)="dddc7b9a8ff7016c038b327dfb004193d12c410624447ec2e95eaaac249b482275f9a8054f14432ea8bb4302de1e51c57edf73aef277d7ea9203f7705255f09e378f"})
write$FUSE_INIT(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0)

10m37.503754702s ago: executing program 0 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0)
shutdown(r3, 0x1)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', &(0x7f0000000100)='./file1\x00', r4)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x10)
fcntl$setlease(r6, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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")

10m22.120766159s ago: executing program 32 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0)
shutdown(r3, 0x1)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x9d13, 0x4)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x486180, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='\x8d@}/\x00', &(0x7f0000000100)='./file1\x00', r4)
ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12)
fcntl$setlease(r5, 0x400, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x10)
fcntl$setlease(r6, 0x400, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==")

7m36.763422031s ago: executing program 4 (id=605):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000d03000000000000000000000105000000200000000000000000000003000000000200000002000000fdffffffddff02b6dddc0c4741830f6446bcd789ff5e7352ed9adc2c2d2daba95fe2a08bd5ab38c65bf126be075582aac92b0f23fa50982e8a828c123682d1134d5a5e75f148a2351d26faf1b91a62c3"], 0x0, 0x4e}, 0x28)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/19)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)

7m35.574254797s ago: executing program 4 (id=609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f00)={0x200c, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1fe5, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="89180400bf79e4e72962443f230b95b8a8a7c29db70bc108bd225f20ad5b1894d6e46cb1edac42a94b42b46be6f096ff5ef2a2bd306ef8eb94b92d99a2e02638afd942a4fae3329d9d9901e57b6f7ef8cb", @nested={0x11e1, 0xae, 0x0, 0x1, [@nested={0xad, 0x23, 0x0, 0x1, [@typed={0x8, 0x14c, 0x0, 0x0, @pid}, @generic="290bc434778edb853e53cd75544cecf5ca6415417f99d82732c8117ee4fb644095b086343bb93931619ad1c24cf83916f17035d2036e558fcda67120840607eac04b2accab42be9c86486c44d635f67315408b97339383bc12f517e1c9da4cb6d8564e3fab64742fd15f34c72d8bcd009a4952670ebf00e64bddb92aabe029d9cb7ea3391de2f26e1c959fac06600f94d1999ae7a049561409bbe0f3b744a7c9fd"]}, @nested={0x1085, 0x75, 0x0, 0x1, [@generic="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", @generic="0db236a17d03e937c7dae117b08ee628ba56ef8b88211b1f9b696acc7f8c3078928f1733bd98f9c7ac0f37021de04811e833aca88912cb15381d8465d767dfa201fc7f4de9bb68738580e3181d0e93641f443d3b0b06f16193a5366b5518aca2b63860018e7991edafd292175b6d4ada3bdeab776044166ae90affefd9ef0152b4"]}, @typed={0xc, 0x1a, 0x0, 0x0, @u64=0x2}, @generic="89a017c2b5402806cdaf7004686612af5159562a81ee390ce67bda2285d55ce06939d59741e1360b8add7c3b402ec15e57af02d230e23f7bf9267c2990c848a0a648f16484188bbe2a6fd03dbc248f175c1c2274cb3855cb6d118356258505cbd7bd5314e4b5518a6467fad20cedd49809871b97c8dbe6ff16879c9461a25c2dabbfa018955133297f55d0e06005c85abe3f368adc", @nested={0x4, 0xc8}]}, @nested={0xda8, 0xdc, 0x0, 0x1, [@nested={0xda4, 0xb3, 0x0, 0x1, [@nested={0x4, 0x37}, @nested={0xd9c, 0xd0, 0x0, 0x1, [@typed={0xc, 0xa2, 0x0, 0x0, @u64=0x4}, @nested={0xd8c, 0x341, 0x0, 0x1, [@nested={0xd85, 0x10c, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x101, 0x14c, 0x0, 0x0, @binary="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"}, @generic="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"]}]}]}]}]}]}]}, 0x200c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)

7m35.202470634s ago: executing program 4 (id=611):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000540)='./file1\x00', 0xa00010, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/361, @ANYRESHEX=0xee01, @ANYRES16, @ANYRES64=0x0, @ANYRESOCT, @ANYRES64, @ANYRES32], 0xd, 0x643, &(0x7f0000001380)="$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")
lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000004c0))

7m32.884705841s ago: executing program 4 (id=616):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x1458}, 0x20048811)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008666dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xd9}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x2000c000)

7m29.043001729s ago: executing program 4 (id=626):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x8810)
gettid()
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r4, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2'])
r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r5)

7m27.039135589s ago: executing program 4 (id=627):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
listen(r0, 0x10001)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffd, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x207)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000540)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@resgid}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")

7m11.734398104s ago: executing program 33 (id=627):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
listen(r0, 0x10001)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffd, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x207)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000540)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@resgid}, {@minixdf}, {@stripe={'stripe', 0x3d, 0x5}}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")

14.083233659s ago: executing program 7 (id=1839):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x8810)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404'])
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r6)

12.076426088s ago: executing program 7 (id=1840):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, @in6={0xa, 0x4e23, 0xfffff660, @remote, 0x6b5}, @in6={0xa, 0x4e24, 0x4a, @mcast1, 0xe88}], 0x64)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/19)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414"], 0xfdef)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)

11.479375233s ago: executing program 2 (id=1844):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x8102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x2c, "", [{{0x9, 0x4, 0x0, 0xd8, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffe, 0xe9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7e7, 0x0, 0x89, 0x81}}}}}]}}]}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x0, 0x23, {0x23, 0x36, "970b9fb819fb0da4bdac1d0d5a5bd51f02e133a359e7e397aca6c11b6768607f64"}}, 0x0}, 0x0)

11.30267966s ago: executing program 6 (id=1847):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x16, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)

11.030577562s ago: executing program 5 (id=1848):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000bac"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x3, "6aa181"}, 0x0})

7.422141863s ago: executing program 7 (id=1852):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x8810)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404'])
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r6)

7.348522295s ago: executing program 6 (id=1854):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd29, 0x25dfcbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4048004)

7.292638804s ago: executing program 2 (id=1855):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f0000000180)=""/236, 0xec)

7.11472248s ago: executing program 5 (id=1856):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x604000)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407e04ffff0000000000010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)=0x18)

7.077424989s ago: executing program 6 (id=1857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1c5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814)

5.173389638s ago: executing program 7 (id=1859):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl$Q_GETFMT(0xffffffff80000406, 0x0, 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0x45025415}, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="635a0b4200a4060000000000000000000000000000000000fc0200000000000000000000000000010002011600000000fe88000017481430af496200000000000000000000010133000000000000002f090000000000b45f030000000730e34237d00a040200030000000000000000000000000000000c000000000000007f000000000000000200000200000000c910200100000000000000000000000000421f02b6841b9c90e1f9b34f2e092dbe0a04ebd8dc39c2b9f75e98d400000000000000000000000000000000000000000000000a00004e20"], 0xcc)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}], 0x3}, 0x100)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fed000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r7, 0x6145, 0x7721, 0x17, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0})
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf010004, 0x101, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}})
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000400))

4.490614506s ago: executing program 3 (id=1860):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
write$P9_RWALK(r1, &(0x7f0000000000)={0x9, 0x6f, 0x2}, 0x9)

4.44323212s ago: executing program 6 (id=1862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100b20004fcdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000050034006e000000080026006c0900000400518004000801"], 0x40}}, 0x240448d0)

4.230556988s ago: executing program 2 (id=1863):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)

4.158031176s ago: executing program 3 (id=1864):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x3c}}, 0x0)

4.037530732s ago: executing program 2 (id=1866):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x24, r1, 0x1, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8854)

3.945344101s ago: executing program 6 (id=1867):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x101}, {0xfffd, 0x5, 0x1, 0x42, 0x2}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

3.772749523s ago: executing program 3 (id=1868):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x44050)

3.737452708s ago: executing program 1 (id=1869):
syz_read_part_table(0x613, &(0x7f00000000c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000440)=""/135, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

3.670943469s ago: executing program 2 (id=1870):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="20170800000037"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

3.421514658s ago: executing program 6 (id=1871):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x8810)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2'])
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f00000002c0)={'fscrypt:', @desc1}, 0x0, 0x0, r6)

3.334619227s ago: executing program 3 (id=1872):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='1', 0x1}], 0x1)

3.272757702s ago: executing program 7 (id=1873):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x24, 0x0, &(0x7f0000000240)="4a460640b083dcc1010f3efc8864505113c1dc3af14514c75cd6056ee97f36c5b7011ffe", 0x0, 0x2fc, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)

3.239138382s ago: executing program 5 (id=1874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r1, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0)

3.10322432s ago: executing program 5 (id=1875):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x10044090)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

2.368920866s ago: executing program 1 (id=1876):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000dc0)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @random="909728ac2b87"}, 0x14)

1.988889441s ago: executing program 1 (id=1877):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x44, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0)

1.84495992s ago: executing program 1 (id=1878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @broadcast}, {0x100, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xc0, 0x100, @void}}}}}}}, 0x0)

1.683942634s ago: executing program 1 (id=1879):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8, 0x3, 0x10000000}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)

1.683458076s ago: executing program 7 (id=1880):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='ky', 0x2)

1.573834264s ago: executing program 3 (id=1881):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)={0x8c, r2, 0x401, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@broadcast, {0x8, 0x9}}, 0x84e7, @default, 0x8040, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x55, 0xe, 0x9842}}, @void, @val={0x5, 0x3, {0x3, 0x94, 0x3}}, @val={0x25, 0x3, {0x0, 0x5, 0xf3}}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x1, 0x0, {0x10001, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x6, 0x7f}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xef, 0xfe, 0xffffffffffffffff, 0x2, 0x2, 0x41}}, @val={0x76, 0x6, {0xa0, 0x4, 0x5, 0xe049}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

1.553996875s ago: executing program 5 (id=1882):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

251.17674ms ago: executing program 2 (id=1883):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd3000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000300051802c000080050002000200000004000600090001009e1f50cc3c000000050009"], 0x64}, 0x1, 0x0, 0x0, 0xf041}, 0x0)

172.955013ms ago: executing program 1 (id=1884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x54, r1, 0xc01, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dbca080014"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080)

15.248152ms ago: executing program 5 (id=1885):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)

0s ago: executing program 3 (id=1886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl$Q_GETFMT(0xffffffff80000406, 0x0, 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0x45025415}, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="635a0b4200a4060000000000000000000000000000000000fc0200000000000000000000000000010002011600000000fe88000017481430af496200000000000000000000010133000000000000002f090000000000b45f030000000730e34237d00a040200030000000000000000000000000000000c000000000000007f000000000000000200000200000000c910200100000000000000000000000000421f02b6841b9c90e1f9b34f2e092dbe0a04ebd8dc39c2b9f75e98d400000000000000000000000000000000000000000000000a00004e20"], 0xcc)
recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x1000}, {0x0}], 0x3}, 0x100)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fed000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r7, 0x6145, 0x7721, 0x17, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0})
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xf010004, 0x101, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}})
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000400))

kernel console output (not intermixed with test programs):

1: SerialNumber: syz
[  699.136149][   T30] usb 8-1: config 0 descriptor??
[  699.157851][   T30] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  699.160979][   T30] dvb-usb: bulk message failed: -22 (3/0)
[  699.180377][   T30] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  699.191147][   T30] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  699.191209][   T30] usb 8-1: media controller created
[  699.203659][ T5728] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-110)
[  699.215488][ T5728] corsair-psu 0003:1B1C:1C09.000D: probe with driver corsair-psu failed with error -110
[  699.218108][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  699.258553][   T30] dvb-usb: bulk message failed: -22 (6/0)
[  699.258645][   T30] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  699.261131][ T5728] usb 6-1: USB disconnect, device number 12
[  699.289655][   T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14
[  699.305116][   T30] dvb-usb: schedule remote query interval to 150 msecs.
[  699.305142][   T30] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  699.380457][    C0] usb 4-1: yurex_control_callback - control failed: -2
[  699.421540][   T30] usb 8-1: USB disconnect, device number 14
[  699.431776][   T10] usb 3-1: USB disconnect, device number 9
[  699.551146][   T10] ldusb 3-1:0.55: LD USB Device #1 now disconnected
[  699.560148][ T5728] usb 4-1: USB disconnect, device number 9
[  699.598726][ T5728] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  699.664592][   T30] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  700.423108][T10712] loop6: detected capacity change from 0 to 512
[  700.434128][T10712] EXT4-fs: Ignoring removed nobh option
[  700.932209][T10712] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  700.963241][T10712] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.1459: attempt to clear invalid blocks 1 len 1
[  700.963295][T10712] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  700.968720][T10712] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  700.968923][T10712] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.1459: invalid indirect mapped block 1819239214 (level 0)
[  700.968976][T10712] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  700.969429][T10712] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.1459: invalid indirect mapped block 1819239214 (level 1)
[  700.969501][T10712] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  700.971322][    C1] EXT4-fs (loop6): error count since last fsck: 4
[  700.971353][    C1] EXT4-fs (loop6): initial error at time 1789797164: ext4_clear_blocks:874: inode 13
[  700.971408][    C1] EXT4-fs (loop6): last error at time 1789797164: ext4_free_branches:1020: inode 13
[  700.987429][T10712] EXT4-fs (loop6): 1 truncate cleaned up
[  700.989652][T10712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.151391][ T5728] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  701.219698][T10700] loop1: detected capacity change from 0 to 32768
[  701.272248][T10700] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  701.281192][ T7105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  701.315181][ T5728] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  701.336498][ T5728] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  701.336552][ T5728] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  701.336616][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.376281][ T5728] usb 6-1: config 0 descriptor??
[  701.396499][   T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  701.436771][T10700] XFS (loop1): Ending clean mount
[  701.514901][ T8952] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  701.569617][   T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  701.573030][   T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.573079][   T30] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  701.573133][   T30] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  701.578187][   T30] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  701.578226][   T30] usb 4-1: Manufacturer: syz
[  701.596875][   T30] usb 4-1: config 0 descriptor??
[  701.628505][   T30] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  701.672227][ T8952] usb 3-1: Using ep0 maxpacket: 32
[  701.675566][ T8952] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  701.684462][ T8952] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  701.684505][ T8952] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  701.684548][ T8952] usb 3-1: config 0 interface 0 has no altsetting 0
[  701.692064][ T8952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.692102][ T8952] usb 3-1: Product: syz
[  701.692127][ T8952] usb 3-1: Manufacturer: syz
[  701.692153][ T8952] usb 3-1: SerialNumber: syz
[  701.710227][ T8952] usb 3-1: config 0 descriptor??
[  701.773028][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  701.809883][ T5629] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  701.866394][ T5728] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0
[  701.866435][ T5728] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0
[  701.866470][ T5728] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0
[  701.866504][ T5728] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0
[  701.866537][ T5728] lenovo 0003:17EF:6067.000E: unknown main item tag 0x0
[  701.926858][ T5728] lenovo 0003:17EF:6067.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0
[  701.933664][   T10] usb 7-1: Using ep0 maxpacket: 16
[  701.950319][   T10] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  701.969606][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.969645][   T10] usb 7-1: Product: syz
[  701.969672][   T10] usb 7-1: Manufacturer: syz
[  701.969699][   T10] usb 7-1: SerialNumber: syz
[  702.026662][   T25] usb 4-1: USB disconnect, device number 10
[  702.050962][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1468'.
[  702.188243][ T8952] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  702.201134][   T30] usb 6-1: USB disconnect, device number 13
[  702.274381][T10737] fido_id[10737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  702.349074][T10735] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  702.450340][T10354] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  702.450946][T10735] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  703.113457][ T8952] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  703.384315][   T10] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  704.328244][   T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  704.346570][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  704.346638][   T10] usb 7-1: media controller created
[  704.352508][ T8952] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  704.361688][ T8952] usb 3-1: USB disconnect, device number 10
[  704.434993][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  704.542259][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[  704.657407][   T10] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  704.679735][   T10] usb 7-1: USB disconnect, device number 10
[  704.825549][ T4928] Bluetooth: hci6: unexpected event 0x04 length: 11 > 10
[  704.864252][ T5812] hid_parser_main: 25 callbacks suppressed
[  704.864287][ T5812] wiimote 0005:057E:0306.000F: unknown main item tag 0x0
[  704.897024][T10749] netlink: 'syz.3.1472': attribute type 1 has an invalid length.
[  704.970703][ T5812] wiimote 0005:057E:0306.000F: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  704.973218][ T5812] wiimote 0005:057E:0306.000F: New device registered
[  704.988780][T10739] wiimote 0005:057E:0306.000F: Device removed
[  705.049914][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1474'.
[  705.118830][T10754] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1472'.
[  705.118904][T10754] netlink: 'syz.3.1472': attribute type 9 has an invalid length.
[  705.118929][T10754] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1472'.
[  705.118954][T10754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1472'.
[  705.345761][T10755] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  705.699169][ T6404] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  705.699831][T10755] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  706.196591][T10749] 8021q: adding VLAN 0 to HW filter on device bond6
[  706.375429][T10752] bond6: (slave veth9): Enslaving as an active interface with a down link
[  706.516702][T10757] fido_id[10757]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  706.881395][   T52] Bluetooth: hci6: command 0x2016 tx timeout
[  706.881536][   T10] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  707.123379][T10771] loop3: detected capacity change from 0 to 512
[  707.135022][T10771] EXT4-fs: Ignoring removed nobh option
[  707.687682][T10770] loop6: detected capacity change from 0 to 512
[  707.719015][T10770] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  707.748791][T10771] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  707.764375][   T10] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  707.766313][   T10] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.766364][   T10] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  707.766414][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[  707.766471][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.769279][T10771] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.1478: attempt to clear invalid blocks 1 len 1
[  707.769330][T10771] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  707.770124][T10771] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  707.770297][T10771] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1478: invalid indirect mapped block 1819239214 (level 0)
[  707.770350][T10771] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  707.770761][T10771] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1478: invalid indirect mapped block 1819239214 (level 1)
[  707.770814][T10771] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  707.771312][    C1] EXT4-fs (loop3): error count since last fsck: 4
[  707.771342][    C1] EXT4-fs (loop3): initial error at time 1789797171: ext4_clear_blocks:874: inode 13
[  707.771390][    C1] EXT4-fs (loop3): last error at time 1789797171: ext4_free_branches:1020: inode 13
[  707.793614][T10771] EXT4-fs (loop3): 1 truncate cleaned up
[  707.927665][T10770] syz.6.1476: attempt to access beyond end of device
[  707.927665][T10770] loop6: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  707.943118][T10770] syz.6.1476: attempt to access beyond end of device
[  707.943118][T10770] loop6: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  707.943446][   T31] audit: type=1800 audit(1789797171.318:31): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1476" name="file2" dev="loop6" ino=1048704 res=0 errno=0
[  707.997266][T10771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.033012][   T10] usb 8-1: config 0 descriptor??
[  708.304486][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.377677][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  708.377804][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  708.409160][   T10] usb 8-1: USB disconnect, device number 15
[  708.471636][ T9598] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  708.494226][T10786] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  708.621358][ T9598] usb 2-1: Using ep0 maxpacket: 8
[  708.622802][ T9598] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  708.624138][ T9598] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  708.624178][ T9598] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  708.624214][ T9598] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  708.624253][ T9598] usb 2-1: config 250 has no interface number 0
[  708.624308][ T9598] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  708.624358][ T9598] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  708.624402][ T9598] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36
[  708.624447][ T9598] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  708.624497][ T9598] usb 2-1: config 250 interface 228 has no altsetting 0
[  708.626495][ T9598] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  708.626534][ T9598] usb 2-1: Product: syz
[  708.626559][ T9598] usb 2-1: SerialNumber: syz
[  708.777510][ T9598] hub 2-1:250.228: bad descriptor, ignoring hub
[  708.777550][ T9598] hub 2-1:250.228: probe with driver hub failed with error -5
[  708.931480][   T52] Bluetooth: hci6: command 0x2016 tx timeout
[  708.976304][ T9598] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  709.653014][    C0] usblp0: nonzero read bulk status received: -71
[  709.747850][ T9598] usb 2-1: USB disconnect, device number 14
[  709.805380][ T9598] usblp0: removed
[  710.553347][T10804] loop2: detected capacity change from 0 to 512
[  710.554578][T10804] EXT4-fs: Ignoring removed nobh option
[  710.606619][T10804] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  710.607981][T10804] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #13: comm syz.2.1488: attempt to clear invalid blocks 1 len 1
[  710.608032][T10804] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  710.608808][T10804] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  710.608974][T10804] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1488: invalid indirect mapped block 1819239214 (level 0)
[  710.609024][T10804] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  710.609426][T10804] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1488: invalid indirect mapped block 1819239214 (level 1)
[  710.609478][T10804] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  710.611016][T10804] EXT4-fs (loop2): 1 truncate cleaned up
[  710.782930][T10804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  710.841776][   T30] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  711.011633][   T52] Bluetooth: hci6: command 0x2016 tx timeout
[  711.075611][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.162718][   T30] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  711.165124][   T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.165190][   T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.170038][   T30] usb 8-1: config 0 descriptor??
[  711.188095][   T30] pwc: Askey VC010 type 2 USB webcam detected.
[  711.216519][T10812] loop1: detected capacity change from 0 to 1024
[  711.217788][T10812] EXT4-fs: Ignoring removed orlov option
[  711.288929][T10812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  711.385332][   T30] pwc: send_video_command error -71
[  711.385356][   T30] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  711.385474][   T30] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  711.391134][   T30] usb 8-1: USB disconnect, device number 16
[  711.654335][T10825] netlink: 'syz.6.1494': attribute type 1 has an invalid length.
[  711.717764][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  711.794551][T10831] loop2: detected capacity change from 0 to 128
[  711.818528][T10831] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  711.818596][T10831] hpfs: filesystem error: improperly stopped
[  711.818620][T10831] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  711.818645][T10831] hpfs: You really don't want any checks? You are crazy...
[  711.819606][T10831] hpfs: hpfs_map_sector(): read error
[  711.819625][T10831] hpfs: code page support is disabled
[  711.827507][T10831] hpfs: hpfs_map_4sectors(): unaligned read
[  711.827596][T10831] hpfs: hpfs_map_4sectors(): unaligned read
[  711.836308][T10831] hpfs: filesystem error: unable to find root dir
[  711.870154][T10832] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1494'.
[  711.870216][T10832] netlink: 'syz.6.1494': attribute type 9 has an invalid length.
[  711.870240][T10832] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1494'.
[  711.870263][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1494'.
[  711.873225][T10829] loop3: detected capacity change from 0 to 2048
[  711.885681][T10831] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  711.914530][   T30] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  711.923649][T10829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  711.966941][T10825] 8021q: adding VLAN 0 to HW filter on device bond5
[  712.007705][   T31] audit: type=1800 audit(1789797175.378:32): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1497" name="file1" dev="loop3" ino=1415 res=0 errno=0
[  712.059677][T10827] bond5: (slave veth11): Enslaving as an active interface with a down link
[  712.110775][T10835] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1498'.
[  712.125256][   T30] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03
[  712.126731][   T30] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.126794][   T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.151369][   T30] usb 8-1: config 0 descriptor??
[  712.156636][T10836] loop1: detected capacity change from 0 to 256
[  712.188990][   T30] pwc: Askey VC010 type 2 USB webcam detected.
[  712.190363][T10836] exfat: Deprecated parameter 'utf8'
[  712.190423][T10836] exfat: Deprecated parameter 'namecase'
[  712.190550][T10836] exfat: Deprecated parameter 'namecase'
[  712.190578][T10836] exfat: Deprecated parameter 'utf8'
[  712.262425][T10836] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d)
[  712.262952][T10836] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  712.586530][   T30] pwc: recv_control_msg error -71 req 02 val 2b00
[  712.590671][   T30] pwc: recv_control_msg error -71 req 02 val 2700
[  712.591122][   T30] pwc: recv_control_msg error -71 req 02 val 2c00
[  712.599321][   T30] pwc: recv_control_msg error -71 req 04 val 1000
[  712.613194][   T30] pwc: recv_control_msg error -71 req 04 val 1300
[  712.632100][   T30] pwc: recv_control_msg error -71 req 04 val 1400
[  712.635698][   T30] pwc: recv_control_msg error -71 req 02 val 2000
[  712.636177][   T30] pwc: recv_control_msg error -71 req 02 val 2100
[  712.636628][   T30] pwc: recv_control_msg error -71 req 04 val 1500
[  712.638636][   T30] pwc: recv_control_msg error -71 req 02 val 2500
[  712.640534][T10838] loop5: detected capacity change from 0 to 256
[  712.650569][T10838] msdos: Unknown parameter '"'
[  712.669102][   T30] pwc: recv_control_msg error -71 req 02 val 2400
[  712.682468][   T30] pwc: recv_control_msg error -71 req 02 val 2600
[  712.694117][   T30] pwc: recv_control_msg error -71 req 02 val 2900
[  712.707317][   T30] pwc: recv_control_msg error -71 req 02 val 2800
[  712.707957][   T30] pwc: recv_control_msg error -71 req 04 val 1100
[  712.708492][   T30] pwc: recv_control_msg error -71 req 04 val 1200
[  712.739477][   T30] pwc: Registered as video103.
[  712.749242][   T30] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15
[  712.766966][   T30] usb 8-1: USB disconnect, device number 17
[  712.901443][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  713.054105][    T9] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  713.060068][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  713.060119][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  713.060175][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.127949][    T9] usb 3-1: config 0 descriptor??
[  713.671422][ T8952] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  713.671613][   T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  713.788596][    T9] hid-led 0003:1D34:000A.0010: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0
[  713.877037][    T9] hid-led 0003:1D34:000A.0010: Dream Cheeky Webmail Notifier initialized
[  713.896404][T10857] loop7: detected capacity change from 0 to 128
[  713.991746][    T9] usb 3-1: USB disconnect, device number 11
[  714.082487][   T25] usb 2-1: Using ep0 maxpacket: 16
[  714.082622][ T8952] usb 4-1: Using ep0 maxpacket: 16
[  714.085209][ T8952] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  714.085449][   T25] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  714.088378][ T8952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.088499][ T8952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  714.088542][ T8952] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  714.088608][ T8952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.095408][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.095446][   T25] usb 2-1: Product: syz
[  714.095472][   T25] usb 2-1: Manufacturer: syz
[  714.095498][   T25] usb 2-1: SerialNumber: syz
[  714.801793][T10861] loop6: detected capacity change from 0 to 512
[  714.803077][T10861] EXT4-fs: Ignoring removed nobh option
[  714.814102][T10857] syz.7.1508: attempt to access beyond end of device
[  714.814102][T10857] loop7: rw=2049, sector=154, nr_sectors = 96 limit=128
[  714.815559][T10857] syz.7.1508: attempt to access beyond end of device
[  714.815559][T10857] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128
[  714.820143][T10861] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  714.843104][T10861] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.1507: attempt to clear invalid blocks 1 len 1
[  714.843157][T10861] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  714.857111][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  714.857144][    C1] EXT4-fs (loop6): initial error at time 1789797178: ext4_clear_blocks:874: inode 13
[  714.857193][    C1] EXT4-fs (loop6): last error at time 1789797178: ext4_clear_blocks:874: inode 13
[  714.857569][T10861] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  714.857732][T10861] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.1507: invalid indirect mapped block 1819239214 (level 0)
[  714.857783][T10861] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  714.858980][T10861] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #13: comm syz.6.1507: invalid indirect mapped block 1819239214 (level 1)
[  714.859032][T10861] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  714.868660][T10861] EXT4-fs (loop6): 1 truncate cleaned up
[  714.928572][T10861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  714.992373][ T8952] usb 4-1: config 0 descriptor??
[  715.014404][T10858] fido_id[10858]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  715.229796][ T7105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.259529][T10866] loop7: detected capacity change from 0 to 1024
[  715.261123][T10866] EXT4-fs: Ignoring removed orlov option
[  716.031077][T10873] 9pnet_fd: p9_fd_create_tcp (10873): problem connecting socket to 127.0.0.1
[  718.188419][T10866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  718.217895][ T8952] usbhid 4-1:0.0: can't add hid device: -71
[  718.218016][ T8952] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  718.221500][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1511'.
[  718.239073][ T8952] usb 4-1: USB disconnect, device number 11
[  719.148282][T10880] loop2: detected capacity change from 0 to 8
[  719.157408][   T25] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  719.176216][   T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  719.187896][   T25] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  719.187963][   T25] usb 2-1: media controller created
[  719.201154][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  719.220826][   T25] zl10353_read_register: readreg error (reg=127, ret==-71)
[  719.305428][   T25] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  719.337643][   T25] usb 2-1: USB disconnect, device number 15
[  719.378030][T10880] SQUASHFS error: Failed to read block 0x4de: -5
[  719.385349][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.390098][T10880] SQUASHFS error: Failed to read block 0x4de: -5
[  719.390432][   T31] audit: type=1800 audit(1789797182.758:33): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1513" name="file1" dev="loop2" ino=5 res=0 errno=0
[  719.439560][T10880] SQUASHFS error: Failed to read block 0x6e6: -5
[  719.439589][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.439611][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.439693][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.439782][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.439804][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.439923][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.440011][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.440032][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.440107][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.440192][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.440740][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.540253][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.540356][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.540379][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.540453][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.540540][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.540561][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.540671][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.540757][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.540778][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.540853][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.540944][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.540965][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.541043][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.541130][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.541152][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.541226][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.565939][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.565964][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.566040][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.634005][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.634032][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.634932][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.635023][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.635044][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.635119][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.635205][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.635226][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.635303][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.635389][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.635409][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.635484][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.656105][T10890] loop5: detected capacity change from 0 to 64
[  719.664403][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.664426][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.664502][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.664590][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.664611][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.664685][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.664770][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.664790][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.664864][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.683867][T10886] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.683897][T10886] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.684044][T10886] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.684065][T10886] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.684335][T10886] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.684356][T10886] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.724513][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.724539][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.724619][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.724724][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.724745][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.724821][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.724914][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.724935][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.725013][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.725099][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.725119][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.725194][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.725281][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.725301][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.748166][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.748263][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.748286][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.748363][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.748453][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.748475][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.748552][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.748637][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.748659][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.748751][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.748838][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.748860][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.748941][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.749026][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.749048][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.749123][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.749210][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.749231][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.749307][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.749393][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.749415][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.749491][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.749580][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.749602][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.760948][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.761041][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.761062][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.761141][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.761227][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.761249][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.762435][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.762540][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.762562][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.762641][T10880] SQUASHFS error: Failed to read block 0x0: -5
[  719.762755][T10880] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  719.762777][T10880] SQUASHFS error: read_indexes: reading block [6e4:0]
[  719.926391][T10892] netlink: 'syz.1.1516': attribute type 1 has an invalid length.
[  720.068715][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1517'.
[  720.295329][T10901] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1516'.
[  720.295415][T10901] netlink: 'syz.1.1516': attribute type 9 has an invalid length.
[  720.295442][T10901] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1516'.
[  720.295468][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1516'.
[  720.500128][T10892] 8021q: adding VLAN 0 to HW filter on device bond8
[  720.615272][T10897] bond8: (slave veth15): Enslaving as an active interface with a down link
[  720.636351][T10907] jffs2: notice: (10907) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  721.131436][T10919] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1528'.
[  721.460576][T10923] loop1: detected capacity change from 0 to 512
[  721.473210][T10923] EXT4-fs: Ignoring removed nobh option
[  722.070784][T10923] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  722.077317][T10923] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.1525: attempt to clear invalid blocks 1 len 1
[  722.077368][T10923] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  722.078666][T10923] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  722.078878][T10923] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1525: invalid indirect mapped block 1819239214 (level 0)
[  722.078928][T10923] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  722.080267][T10923] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1525: invalid indirect mapped block 1819239214 (level 1)
[  722.080319][T10923] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  722.101299][    C1] EXT4-fs (loop1): error count since last fsck: 4
[  722.101330][    C1] EXT4-fs (loop1): initial error at time 1789797185: ext4_clear_blocks:874: inode 13
[  722.101379][    C1] EXT4-fs (loop1): last error at time 1789797185: ext4_free_branches:1020: inode 13
[  722.104234][T10923] EXT4-fs (loop1): 1 truncate cleaned up
[  722.227682][ T8279] block nbd2: Possible stuck request ffff8880284601c0: control (read@0,4096B). Runtime 30 seconds
[  722.235199][T10923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  722.629491][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  723.130216][T10936] loop5: detected capacity change from 0 to 4096
[  723.131143][T10936] EXT4-fs: Ignoring removed nomblk_io_submit option
[  723.153125][T10936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  723.153154][T10936] EXT4-fs (loop5): Test dummy encryption mode enabled
[  723.155759][T10936] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  723.185575][T10936] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  723.185722][T10936] System zones: 0-5
[  723.189553][T10936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  723.403213][T10944] jffs2: notice: (10944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  724.708609][T10946] 9pnet_fd: p9_fd_create_tcp (10946): problem connecting socket to 127.0.0.1
[  725.710906][T10954] jffs2: notice: (10954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  725.829436][T10957] nbd6: detected capacity change from 0 to 63
[  725.987800][T10960] netlink: 'syz.6.1537': attribute type 1 has an invalid length.
[  726.076146][T10963] loop3: detected capacity change from 0 to 128
[  726.095471][T10963] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  726.134464][T10963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  726.183992][T10965] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1537'.
[  726.184056][T10965] netlink: 'syz.6.1537': attribute type 9 has an invalid length.
[  726.184081][T10965] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1537'.
[  726.184107][T10965] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1537'.
[  726.327520][T10960] 8021q: adding VLAN 0 to HW filter on device bond6
[  726.387233][T10968] loop7: detected capacity change from 0 to 256
[  726.399443][T10968] exfat: Deprecated parameter 'utf8'
[  726.399474][T10968] exfat: Deprecated parameter 'utf8'
[  726.399566][T10968] exfat: Deprecated parameter 'utf8'
[  726.469027][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.490794][T10968] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  726.698382][   T52] block nbd6: Receive control failed (result -104)
[  726.722025][T10964] bond6: (slave veth13): Enslaving as an active interface with a down link
[  727.397624][T10980] loop3: detected capacity change from 0 to 512
[  727.408144][T10980] EXT4-fs: Ignoring removed nobh option
[  728.005064][T10980] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  728.020794][T10980] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.1544: attempt to clear invalid blocks 1 len 1
[  728.020849][T10980] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  728.021327][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  728.021360][    C1] EXT4-fs (loop3): initial error at time 1789797191: ext4_clear_blocks:874: inode 13
[  728.021420][    C1] EXT4-fs (loop3): last error at time 1789797191: ext4_clear_blocks:874: inode 13
[  728.111394][T10980] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  728.111592][T10980] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1544: invalid indirect mapped block 1819239214 (level 0)
[  728.111646][T10980] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  728.136789][T10980] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1544: invalid indirect mapped block 1819239214 (level 1)
[  728.136839][T10980] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  728.139226][T10980] EXT4-fs (loop3): 1 truncate cleaned up
[  728.140979][T10980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  729.079154][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  729.834950][T10984] nbd: nbd6 already in use
[  729.840604][T10984] block nbd6: NBD_DISCONNECT
[  729.840638][T10984] block nbd6: Send disconnect failed -32
[  729.840670][T10984] block nbd6: shutting down sockets
[  729.856292][    C0] blk_print_req_error: 131 callbacks suppressed
[  729.856320][    C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.856414][    C0] buffer_io_error: 138 callbacks suppressed
[  729.856435][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  729.856472][    C0] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.856553][    C0] Buffer I/O error on dev nbd6, logical block 1, async page read
[  729.856603][    C0] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.856684][    C0] Buffer I/O error on dev nbd6, logical block 2, async page read
[  729.856716][    C0] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.856796][    C0] Buffer I/O error on dev nbd6, logical block 3, async page read
[  729.857007][ T4940] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.857053][ T4940] Buffer I/O error on dev nbd6, logical block 0, async page read
[  729.857197][ T4940] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.857241][ T4940] Buffer I/O error on dev nbd6, logical block 1, async page read
[  729.857724][ T4940] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.857769][ T4940] Buffer I/O error on dev nbd6, logical block 2, async page read
[  729.859415][ T4940] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.859460][ T4940] Buffer I/O error on dev nbd6, logical block 3, async page read
[  729.859607][ T4940] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.859650][ T4940] Buffer I/O error on dev nbd6, logical block 0, async page read
[  729.859777][ T4940] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  729.859821][ T4940] Buffer I/O error on dev nbd6, logical block 1, async page read
[  729.874865][ T5628] ldm_validate_partition_table(): Disk read failed.
[  729.883313][ T5628] Dev nbd6: unable to read RDB block 0
[  729.894366][ T5628]  nbd6: unable to read partition table
[  729.945016][ T5628] ldm_validate_partition_table(): Disk read failed.
[  729.951720][ T5628] Dev nbd6: unable to read RDB block 0
[  729.958689][ T5628]  nbd6: unable to read partition table
[  730.180485][T10989] netlink: 'syz.6.1546': attribute type 1 has an invalid length.
[  730.905901][T10996] 9pnet_fd: p9_fd_create_tcp (10996): problem connecting socket to 127.0.0.1
[  732.048109][T10998] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1546'.
[  732.048176][T10998] netlink: 'syz.6.1546': attribute type 9 has an invalid length.
[  732.048202][T10998] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1546'.
[  732.048229][T10998] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1546'.
[  732.147628][T11000] loop3: detected capacity change from 0 to 128
[  732.197173][T11000] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  732.197265][T11000] System zones: 1-3, 19-19, 35-36
[  732.250813][T11000] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  732.269658][T11000] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  732.321068][T11000] EXT4-fs warning (device loop3): ext4_group_add:1734: No reserved GDT blocks, can't resize
[  732.346862][T10989] 8021q: adding VLAN 0 to HW filter on device bond7
[  732.446075][ T5613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  732.480507][T11004] loop5: detected capacity change from 0 to 256
[  732.539335][T10995] bond7: (slave veth15): Enslaving as an active interface with a down link
[  732.553504][T11004] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  733.068909][T11016] loop2: detected capacity change from 0 to 512
[  733.092156][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  733.251377][   T10] usb 4-1: Using ep0 maxpacket: 16
[  733.255027][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  733.256418][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  733.256470][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  733.256513][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  733.256579][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.292152][T11016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  733.335320][   T10] usb 4-1: config 0 descriptor??
[  733.342069][T11016] EXT4-fs (loop2): 1 truncate cleaned up
[  733.351184][T11016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  733.471073][T11020] loop1: detected capacity change from 0 to 8
[  733.497626][T11022] loop5: detected capacity change from 0 to 128
[  733.546581][T11022] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  733.563783][T11022] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  733.611875][T11023] loop6: detected capacity change from 0 to 4096
[  733.613125][T11023] EXT4-fs: Ignoring removed nomblk_io_submit option
[  733.633571][T11023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  733.633601][T11023] EXT4-fs (loop6): Test dummy encryption mode enabled
[  733.640598][T11023] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  733.676048][T11023] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  733.676198][T11023] System zones: 0-5
[  733.744822][T11023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  733.846637][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  733.937474][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937518][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937552][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937587][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937622][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937657][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937692][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937726][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937761][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.937796][   T10] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  733.981169][T11027] loop1: detected capacity change from 0 to 64
[  734.003636][ T5620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  734.123794][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input17
[  734.165602][   T10] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  734.195762][   T10] usb 4-1: USB disconnect, device number 12
[  734.252144][   T31] audit: type=1800 audit(1789797197.628:34): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1560" name="file1" dev="loop1" ino=22 res=0 errno=0
[  734.732536][T11035] loop5: detected capacity change from 0 to 2048
[  734.867048][T11033] fido_id[11033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  735.143757][T11041] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  735.964362][T11041] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  735.964417][T11041] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  735.997240][T11045] MTRR 1 not used
[  736.016675][T11041] Remounting filesystem read-only
[  736.039276][T11035] NILFS (loop5): mounting fs with errors
[  736.309999][T11041] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  736.310046][T11041] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  736.310077][T11041] Remounting filesystem read-only
[  736.310841][ T5620] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  736.455311][T11051] jffs2: notice: (11051) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  736.508774][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1552'.
[  736.564495][   T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  736.614467][T11055] netlink: 'syz.3.1567': attribute type 1 has an invalid length.
[  736.715066][   T10] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  736.717195][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  736.717248][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  736.717290][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  736.717356][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.752964][   T10] usb 2-1: config 0 descriptor??
[  736.787409][T11055] 8021q: adding VLAN 0 to HW filter on device bond7
[  736.979092][T11055] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1567'.
[  736.979188][T11055] netlink: 'syz.3.1567': attribute type 9 has an invalid length.
[  736.979214][T11055] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1567'.
[  736.979239][T11055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1567'.
[  736.999594][T11061] bond7: (slave veth11): Enslaving as an active interface with a down link
[  737.213366][   T10] acrux 0003:1A34:0802.0012: item fetching failed at offset 37/41
[  737.214092][   T10] acrux 0003:1A34:0802.0012: parse failed
[  737.214184][   T10] acrux 0003:1A34:0802.0012: probe with driver acrux failed with error -22
[  737.364452][T11068] loop5: detected capacity change from 0 to 4096
[  737.365419][T11068] EXT4-fs: Ignoring removed nomblk_io_submit option
[  737.384790][T11068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  737.384818][T11068] EXT4-fs (loop5): Test dummy encryption mode enabled
[  737.385392][T11068] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  737.394450][T11068] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  737.394613][T11068] System zones: 0-5
[  737.398402][T11068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  737.495352][ T7105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.496178][ T9598] usb 2-1: USB disconnect, device number 16
[  737.582420][T11073] loop3: detected capacity change from 0 to 1024
[  737.641915][T11073] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  737.641982][T11073] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  737.642015][T11073] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.1575: Failed to acquire dquot type 0
[  737.642056][T11073] loop3: lost filesystem error report for type 5 error -117
[  737.643285][T11073] EXT4-fs error (device loop3): mb_free_blocks:2046: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  737.649738][T11073] EXT4-fs (loop3): 1 truncate cleaned up
[  737.723136][T11073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.718030][T11073] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  738.718092][T11073] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  738.718125][T11073] EXT4-fs error (device loop3): ext4_acquire_dquot:7067: comm syz.3.1575: Failed to acquire dquot type 0
[  738.836654][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.198103][T11090] loop7: detected capacity change from 0 to 1024
[  739.207191][T11089] loop3: detected capacity change from 0 to 1024
[  739.214695][T11089] EXT4-fs: Ignoring removed bh option
[  739.222922][ T5879] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  739.316182][ T8999] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  739.338123][T11089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.420756][T11089] EXT4-fs (loop3): shut down requested (1)
[  740.692982][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  740.765634][T11099] jffs2: notice: (11099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  740.948040][T11104] block nbd0: reconnected socket
[  740.948071][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1586'.
[  740.978772][   T52] block nbd0: Receive control failed (result -32)
[  741.033473][ T9598] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  741.183334][ T9598] usb 4-1: Using ep0 maxpacket: 32
[  741.233730][ T9598] usb 4-1: unable to get BOS descriptor or descriptor too short
[  741.233794][ T9598] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  741.237515][ T9598] usb 4-1: unable to read config index 0 descriptor/start: -71
[  741.237567][ T9598] usb 4-1: can't read configurations, error -71
[  742.358034][T10139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.480055][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.533868][T11115] loop6: detected capacity change from 0 to 4096
[  742.534851][T11115] EXT4-fs: Ignoring removed nomblk_io_submit option
[  742.538289][T11115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  742.538316][T11115] EXT4-fs (loop6): Test dummy encryption mode enabled
[  742.540034][T11115] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  742.581892][T11115] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  742.582048][T11115] System zones: 0-5
[  742.629201][T11115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  742.957511][T10139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.290891][T10139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.291504][ T9598] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  743.414312][   T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  743.442044][ T9598] usb 6-1: Using ep0 maxpacket: 8
[  743.444114][ T9598] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  743.446889][ T9598] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  743.446962][ T9598] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  743.447006][ T9598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  743.447052][ T9598] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  743.447098][ T9598] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  743.447164][ T9598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.531461][ T5728] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  743.591660][T10139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.613062][   T30] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  743.614369][   T30] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  743.614411][   T30] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  743.614454][   T30] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  743.614492][   T30] usb 4-1: config 220 has no interface number 2
[  743.614571][   T30] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  743.614625][   T30] usb 4-1: config 220 interface 0 has no altsetting 0
[  743.614661][   T30] usb 4-1: config 220 interface 76 has no altsetting 0
[  743.614698][   T30] usb 4-1: config 220 interface 1 has no altsetting 0
[  743.617614][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.617655][   T30] usb 4-1: Product: syz
[  743.617684][   T30] usb 4-1: Manufacturer: syz
[  743.617712][   T30] usb 4-1: SerialNumber: syz
[  743.693065][ T5728] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  743.705293][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.705375][ T5728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.705431][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.723721][ T9598] usb 6-1: GET_CAPABILITIES returned 0
[  743.723779][ T9598] usbtmc 6-1:16.0: can't read capabilities
[  743.738001][ T5728] usb 3-1: config 0 descriptor??
[  743.825859][T11116] loop1: detected capacity change from 0 to 32768
[  743.908329][T11116] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  743.998460][   T30] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  743.998515][   T30] uvcvideo 4-1:220.0: No valid video chain found.
[  743.998581][   T30] usb 4-1: selecting invalid altsetting 0
[  744.000888][   T10] usb 6-1: USB disconnect, device number 14
[  744.104970][T11116] XFS (loop1): Ending clean mount
[  744.155282][   T30] usb 4-1: selecting invalid altsetting 0
[  744.155323][   T30] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  744.181446][   T30] usb 4-1: USB disconnect, device number 15
[  744.304101][ T5728] hid_parser_main: 26 callbacks suppressed
[  744.304136][ T5728] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  744.304173][ T5728] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  744.304209][ T5728] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  744.304244][ T5728] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  744.304279][ T5728] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0
[  744.383764][ T5728] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  744.396230][ T5629] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  744.480444][ T7105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.745214][ T5728] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 32: -71
[  744.745260][ T5728] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense firmware info: -71
[  744.745327][ T5728] playstation 0003:054C:0DF2.0013: Failed to get firmware info from DualSense
[  744.745356][ T5728] playstation 0003:054C:0DF2.0013: Failed to create dualsense.
[  744.778845][ T5728] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71
[  744.814205][ T5728] usb 3-1: USB disconnect, device number 12
[  744.839400][T10139] bridge_slave_1: left allmulticast mode
[  744.839436][T10139] bridge_slave_1: left promiscuous mode
[  744.839679][T10139] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.862562][T11145] fido_id[11145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  744.958854][T10139] bridge_slave_0: left allmulticast mode
[  744.958893][T10139] bridge_slave_0: left promiscuous mode
[  744.969350][T10139] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.014571][T11136] loop7: detected capacity change from 0 to 32768
[  745.053867][T11136] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  745.202091][T11136] XFS (loop7): Ending clean mount
[  745.411778][ T5728] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  745.590869][ T8193] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  745.611709][ T5728] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  745.614878][ T5728] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  745.614917][ T5728] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  745.619143][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249
[  745.619184][ T5728] usb 4-1: SerialNumber: syz
[  745.632551][ T5728] usb 4-1: config 0 descriptor??
[  745.673682][ T5728] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  745.673734][ T5728] dvb-usb: bulk message failed: -22 (3/0)
[  745.695823][ T5728] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  745.697357][ T5728] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  745.697424][ T5728] usb 4-1: media controller created
[  745.723229][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  745.757855][ T5728] dvb-usb: bulk message failed: -22 (6/0)
[  745.757947][ T5728] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  745.796534][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  745.912744][ T5728] dvb-usb: schedule remote query interval to 150 msecs.
[  745.912775][ T5728] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  745.952654][ T5728] usb 4-1: USB disconnect, device number 16
[  746.163353][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1607'.
[  746.249926][ T5728] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  746.463585][T11183] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  746.496579][ T5879] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  746.497370][T11183] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  746.536612][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  746.536695][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  746.611479][ T9598] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  746.761416][ T9598] usb 8-1: Using ep0 maxpacket: 8
[  746.769136][ T9598] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  746.787480][ T9598] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  746.787536][ T9598] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  746.787583][ T9598] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  746.787629][ T9598] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  746.787698][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.094405][ T9598] usb 8-1: GET_CAPABILITIES returned 0
[  747.094468][ T9598] usbtmc 8-1:16.0: can't read capabilities
[  747.364722][ T5764] usb 8-1: USB disconnect, device number 18
[  749.085920][T11199] loop5: detected capacity change from 0 to 512
[  749.098414][T11199] EXT4-fs: Ignoring removed nobh option
[  749.874898][T11199] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  749.877872][T11199] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.1610: attempt to clear invalid blocks 1 len 1
[  749.877924][T11199] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  749.881318][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  749.881351][    C1] EXT4-fs (loop5): initial error at time 1789797213: ext4_clear_blocks:874: inode 13
[  749.881439][    C1] EXT4-fs (loop5): last error at time 1789797213: ext4_clear_blocks:874: inode 13
[  749.891347][T11199] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  749.891521][T11199] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.1610: invalid indirect mapped block 1819239214 (level 0)
[  749.891572][T11199] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  749.975435][T11199] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.1610: invalid indirect mapped block 1819239214 (level 1)
[  749.975494][T11199] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  749.977905][T11199] EXT4-fs (loop5): 1 truncate cleaned up
[  749.980562][T11199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.345339][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  750.740963][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1612'.
[  750.840527][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  750.895477][T11210] loop7: detected capacity change from 0 to 4096
[  750.896461][T11210] EXT4-fs: Ignoring removed nomblk_io_submit option
[  750.908386][T11210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  750.908415][T11210] EXT4-fs (loop7): Test dummy encryption mode enabled
[  750.908897][T11210] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  750.933363][T11210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  750.933509][T11210] System zones: 0-5
[  750.937180][T11210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.965969][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  750.989666][T10139] bond0 (unregistering): Released all slaves
[  751.020140][T10139] bond1 (unregistering): Released all slaves
[  751.065655][T10139] bond2 (unregistering): (slave veth3): Releasing active interface
[  751.082369][T10139] bond2 (unregistering): Released all slaves
[  751.111477][    T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  751.149613][T10139] bond3 (unregistering): Released all slaves
[  751.249083][T11216] loop3: detected capacity change from 0 to 128
[  751.257248][T11216] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  751.261218][T11216] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  751.288777][    T9] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  751.303932][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  751.303985][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.304028][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  751.304093][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.353855][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  751.375207][    T9] usb 7-1: config 0 descriptor??
[  751.905338][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x2
[  751.905384][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905456][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905491][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x6
[  751.905527][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905562][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905598][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905633][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905669][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905703][    T9] acrux 0003:1A34:0802.0014: unknown main item tag 0x0
[  751.905795][    T9] acrux 0003:1A34:0802.0014: item fetching failed at offset 37/41
[  751.992104][    T9] acrux 0003:1A34:0802.0014: parse failed
[  751.992200][    T9] acrux 0003:1A34:0802.0014: probe with driver acrux failed with error -22
[  752.090591][    T9] usb 7-1: USB disconnect, device number 11
[  752.147435][T11227] netlink: 'syz.5.1620': attribute type 1 has an invalid length.
[  752.296127][   T26] block nbd2: Possible stuck request ffff8880284601c0: control (read@0,4096B). Runtime 60 seconds
[  752.380793][T11237] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1620'.
[  752.380859][T11237] netlink: 'syz.5.1620': attribute type 9 has an invalid length.
[  752.380884][T11237] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1620'.
[  752.380916][T11237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1620'.
[  752.425802][T11227] 8021q: adding VLAN 0 to HW filter on device bond9
[  752.801114][T11231] bond9: (slave veth15): Enslaving as an active interface with a down link
[  753.032440][T10139] hsr_slave_0: left promiscuous mode
[  753.048111][T10139] hsr_slave_1: left promiscuous mode
[  753.049131][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.054559][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.083357][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.083388][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.122682][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1627'.
[  753.156879][T10139] veth1_macvtap: left promiscuous mode
[  753.156930][T10139] veth0_macvtap: left promiscuous mode
[  753.159646][T10139] veth0_vlan: left promiscuous mode
[  753.716680][T11262] loop6: detected capacity change from 0 to 1024
[  753.779696][T11262] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  753.779766][T11262] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  753.779799][T11262] EXT4-fs error (device loop6): ext4_acquire_dquot:7067: comm syz.6.1630: Failed to acquire dquot type 0
[  753.779841][T11262] loop6: lost filesystem error report for type 5 error -117
[  753.792082][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  753.792118][    C1] EXT4-fs (loop6): initial error at time 1789797217: ext4_acquire_dquot:7067
[  753.792159][    C1] EXT4-fs (loop6): last error at time 1789797217: ext4_acquire_dquot:7067
[  753.830259][T11262] EXT4-fs error (device loop6): mb_free_blocks:2046: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  753.907546][T11262] EXT4-fs (loop6): 1 truncate cleaned up
[  753.930190][T11262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  754.030449][T11262] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  754.030521][T11262] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  754.030555][T11262] EXT4-fs error (device loop6): ext4_acquire_dquot:7067: comm syz.6.1630: Failed to acquire dquot type 0
[  754.396670][T11253] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  754.441603][T10354] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  754.442656][T11253] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  754.742219][ T7105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.743653][ T8193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  755.164917][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'.
[  755.277840][T10139] team0 (unregistering): Port device team_slave_1 removed
[  755.302511][T10139] team0 (unregistering): Port device team_slave_0 removed
[  755.311667][   T30] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  755.482087][   T30] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  755.483149][   T30] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  755.483188][   T30] usb 7-1: config 0 has no interface number 0
[  755.483244][   T30] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  755.483293][   T30] usb 7-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.483335][   T30] usb 7-1: config 0 interface 1 has no altsetting 0
[  755.483391][   T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.488424][   T30] usb 7-1: config 0 descriptor??
[  755.589368][T10354] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  755.589443][T10354] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  755.591913][T10354] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  755.595905][T10354] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  755.616178][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  755.996737][T11283] loop5: detected capacity change from 0 to 1024
[  756.012404][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  756.067604][T11284] loop7: detected capacity change from 0 to 2048
[  756.791557][T11290] 9pnet_fd: p9_fd_create_tcp (11290): problem connecting socket to 127.0.0.1
[  758.231345][    T9] usb 4-1: Using ep0 maxpacket: 8
[  758.234043][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  758.235370][    T9] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  758.235410][    T9] usb 4-1: config 0 has no interface number 0
[  758.235463][    T9] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  758.235502][    T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  758.235544][    T9] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  758.235589][    T9] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  758.235636][    T9] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  758.238318][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.238357][    T9] usb 4-1: Product: syz
[  758.238383][    T9] usb 4-1: Manufacturer: syz
[  758.238410][    T9] usb 4-1: SerialNumber: syz
[  758.393975][    T9] usb 4-1: config 0 descriptor??
[  758.570271][T11293] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  758.745592][T11293] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  758.745662][T11293] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  758.881079][T11293] Remounting filesystem read-only
[  759.120452][T11284] NILFS (loop7): mounting fs with errors
[  759.166339][   T30] uclogic 0003:2179:0053.0015: failed retrieving string descriptor #100: -71
[  759.166442][   T30] uclogic 0003:2179:0053.0015: failed retrieving pen parameters: -71
[  759.166476][   T30] uclogic 0003:2179:0053.0015: pen probing failed: -71
[  759.166508][   T30] uclogic 0003:2179:0053.0015: failed probing parameters: -71
[  759.166639][   T30] uclogic 0003:2179:0053.0015: probe with driver uclogic failed with error -71
[  759.221188][T11292] hfsplus: xattr search failed
[  759.246739][   T30] usb 7-1: USB disconnect, device number 12
[  759.514223][    T9] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  759.594926][    T9] usb 4-1: USB disconnect, device number 17
[  759.710096][T11293] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  759.710143][T11293] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  759.710175][T11293] Remounting filesystem read-only
[  759.740238][ T8193] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  759.756427][T11302] loop1: detected capacity change from 0 to 1024
[  759.767829][T11302] EXT4-fs: Ignoring removed bh option
[  759.886123][T11302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  759.937695][T11302] EXT4-fs (loop1): shut down requested (1)
[  760.015361][T11311] netlink: 'syz.6.1642': attribute type 1 has an invalid length.
[  760.017764][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  760.172539][   T30] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  760.214610][T11311] 8021q: adding VLAN 0 to HW filter on device bond8
[  760.322065][   T30] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  760.323555][   T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  760.323598][   T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  760.329480][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.329520][   T30] usb 6-1: Product: syz
[  760.329548][   T30] usb 6-1: Manufacturer: syz
[  760.329576][   T30] usb 6-1: SerialNumber: syz
[  760.339354][T11311] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1642'.
[  760.339417][T11311] netlink: 'syz.6.1642': attribute type 9 has an invalid length.
[  760.339442][T11311] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1642'.
[  760.339467][T11311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1642'.
[  760.623189][T11313] bond8: (slave veth17): Enslaving as an active interface with a down link
[  760.667941][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1646'.
[  760.943862][T11331] loop3: detected capacity change from 0 to 16
[  760.962541][T11331] erofs (device loop3): mounted with root inode @ nid 36.
[  761.269587][T11336] loop7: detected capacity change from 0 to 2048
[  761.348868][T11336] Alternate GPT is invalid, using primary GPT.
[  761.348981][T11336]  loop7: p1 p2 p3
[  761.349008][T11336] loop7: partition table partially beyond EOD, truncated
[  761.374015][   T30] usb 6-1: failed to send ARPC request 1: -71
[  761.377457][   T30] usb 6-1: failed to execute ARPC: -71
[  761.407890][   T30] usb 6-1: failed to set connected state for cport 0: -71
[  761.407932][   T30] greybus greybus1: 0/0:0: failed to set connected state: -71
[  761.408808][   T30] usb 6-1: failed to send ARPC request 3: -71
[  761.410056][   T30] usb 6-1: failed to execute ARPC: -71
[  761.410087][   T30] usb 6-1: failed to clear cport 0: -71
[  761.410298][   T30] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  761.433321][   T52] Bluetooth: hci6: unexpected cc 0x080f length: 90 > 1
[  761.434366][   T52] Bluetooth: hci6: unexpected event for opcode 0x080f
[  761.555917][   T30] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -71
[  761.577977][   T30] usb 6-1: USB disconnect, device number 15
[  762.188527][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  762.398407][   T10] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  762.448801][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.771699][   T10] usb 4-1: config 0 descriptor??
[  762.900735][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  763.354169][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  763.536188][   T10] gspca_cpia1: usb_control_msg 01, error -71
[  763.536218][   T10] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  763.581361][ T5641] udevd[5641]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory
[  763.582695][ T5645] udevd[5645]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  764.297209][   T10] usb 4-1: USB disconnect, device number 18
[  764.312085][ T5628] udevd[5628]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  764.932057][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1660'.
[  765.053129][T11369] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  765.085195][   T50] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  765.085955][T11369] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  765.503588][   T52] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  765.503793][   T52] Bluetooth: hci6: Injecting HCI hardware error event
[  765.508227][   T52] Bluetooth: hci6: hardware error 0x00
[  765.544479][   T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  766.083831][   T30] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  766.089011][   T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  766.089055][   T30] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  766.130170][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.130213][   T30] usb 4-1: Product: syz
[  766.130241][   T30] usb 4-1: Manufacturer: syz
[  766.130268][   T30] usb 4-1: SerialNumber: syz
[  766.193675][T11378] IPv6: NLM_F_CREATE should be specified when creating new route
[  766.219477][T11372] netlink: 'syz.7.1664': attribute type 1 has an invalid length.
[  766.261696][T11372] 8021q: adding VLAN 0 to HW filter on device bond2
[  766.301349][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  766.370395][T11372] bond2: (slave veth5): Enslaving as an active interface with a down link
[  766.382360][T11374] netlink: 328 bytes leftover after parsing attributes in process `syz.7.1664'.
[  766.382433][T11374] netlink: 'syz.7.1664': attribute type 9 has an invalid length.
[  766.382488][T11374] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1664'.
[  766.382514][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1664'.
[  766.392951][   T30] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  766.518931][    T9] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  766.520697][    T9] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  766.520736][    T9] usb 6-1: config 1 has no interface number 0
[  766.547284][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.547329][    T9] usb 6-1: Product: syz
[  766.547356][    T9] usb 6-1: Manufacturer: syz
[  766.547384][    T9] usb 6-1: SerialNumber: syz
[  766.604800][    T9] usb 6-1: 3:0 : does not exist
[  766.604839][    T9] usb 6-1: 3:0 : does not exist
[  766.863948][    T9] usb 6-1: USB disconnect, device number 16
[  766.883870][ T9598] usb 4-1: USB disconnect, device number 19
[  766.907756][ T9598] usblp0: removed
[  767.229475][T11393] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  767.229591][T11393] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  767.852124][T11419] loop2: detected capacity change from 0 to 2048
[  767.944254][T11421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  767.972951][   T52] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  768.020641][T11421] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  768.020684][T11421] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  768.036471][T11421] Remounting filesystem read-only
[  768.055083][T11419] NILFS (loop2): mounting fs with errors
[  768.225042][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8
[  768.364955][T11421] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  768.365004][T11421] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  768.365034][T11421] Remounting filesystem read-only
[  768.371048][ T5630] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  769.256285][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  769.789923][T11444] loop3: detected capacity change from 0 to 4096
[  769.790912][T11444] EXT4-fs: Ignoring removed nomblk_io_submit option
[  769.821546][T11444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  769.821576][T11444] EXT4-fs (loop3): Test dummy encryption mode enabled
[  769.822229][T11444] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  769.883210][T11444] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003]
[  769.883357][T11444] System zones: 0-5
[  769.887368][T11444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  770.358092][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  771.186003][T11457] 9pnet_fd: p9_fd_create_tcp (11457): problem connecting socket to 127.0.0.1
[  772.284419][ T4928] Bluetooth: hci1: command 0x0405 tx timeout
[  772.626273][T11468] loop3: detected capacity change from 0 to 128
[  772.693937][T11468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  772.694070][T11468] System zones: 1-3, 19-19, 35-36
[  772.706990][T11468] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  772.737538][T11468] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  772.853735][T11468] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  772.950958][ T5613] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  773.010910][   T52] Bluetooth: hci1: unexpected event for opcode 0x1005
[  773.062499][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  773.212669][    T9] usb 2-1: Using ep0 maxpacket: 16
[  773.214278][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  773.241584][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  773.241635][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  773.241676][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  773.241741][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.252930][    T9] usb 2-1: config 0 descriptor??
[  774.227303][    T9] hid_parser_main: 11 callbacks suppressed
[  774.227337][    T9] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0
[  774.227374][    T9] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0
[  774.229024][    T9] lua 0003:1E7D:2C2E.0016: item fetching failed at offset 2/38
[  774.229742][    T9] lua 0003:1E7D:2C2E.0016: parse failed
[  774.229831][    T9] lua 0003:1E7D:2C2E.0016: probe with driver lua failed with error -22
[  774.399881][   T10] usb 2-1: USB disconnect, device number 17
[  774.911630][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  775.043258][    T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  775.063415][   T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  775.064750][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  775.067459][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.067500][   T10] usb 7-1: Product: syz
[  775.067529][   T10] usb 7-1: Manufacturer: syz
[  775.067557][   T10] usb 7-1: SerialNumber: syz
[  775.192210][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  775.193782][    T9] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[  775.193823][    T9] usb 8-1: config 0 has no interface number 0
[  775.193912][    T9] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  775.197665][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.197738][    T9] usb 8-1: Product: syz
[  775.197768][    T9] usb 8-1: Manufacturer: syz
[  775.197796][    T9] usb 8-1: SerialNumber: syz
[  775.262678][    T9] usb 8-1: config 0 descriptor??
[  775.284590][    T9] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0
[  777.132793][T11501] 9pnet_fd: p9_fd_create_tcp (11501): problem connecting socket to 127.0.0.1
[  777.221511][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1707'.
[  777.318357][   T10] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS
[  777.318504][   T10] cdc_ncm 7-1:1.0: bind() failure
[  777.345888][   T10] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  777.345980][   T10] cdc_ncm 7-1:1.1: bind() failure
[  777.468681][T11509] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  777.491164][T10354] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  777.491401][ T5748] usb 7-1: USB disconnect, device number 13
[  777.501808][T11509] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  778.190612][T11514] nbd1: detected capacity change from 0 to 63
[  778.301105][    C0] usb 8-1: yurex_control_callback - control failed: -2
[  778.377671][T11515] netlink: 'syz.1.1709': attribute type 1 has an invalid length.
[  778.511218][   T10] usb 8-1: USB disconnect, device number 19
[  778.548741][   T10] yurex 8-1:0.50: USB YUREX #0 now disconnected
[  778.658195][T11515] 8021q: adding VLAN 0 to HW filter on device bond9
[  778.683669][T11522] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1709'.
[  778.683733][T11522] netlink: 'syz.1.1709': attribute type 9 has an invalid length.
[  778.683759][T11522] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1709'.
[  778.683785][T11522] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1709'.
[  779.295607][   T52] block nbd1: Receive control failed (result -104)
[  779.640698][T11520] bond9: (slave veth17): Enslaving as an active interface with a down link
[  779.881352][ T9598] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  780.103504][ T9598] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  780.315750][ T9598] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  780.315827][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.350170][T11540] nbd: nbd2 already in use
[  780.444182][T11540] block nbd2: NBD_DISCONNECT
[  780.444398][T11540] block nbd2: Send disconnect failed -32
[  780.444517][T11540] block nbd2: shutting down sockets
[  780.698938][ T9598] usb 8-1: config 0 descriptor??
[  780.740869][    C1] blk_print_req_error: 80 callbacks suppressed
[  780.740908][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  780.741001][    C1] buffer_io_error: 138 callbacks suppressed
[  780.741023][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  780.741091][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  780.741170][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  780.741288][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  780.764814][   T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  780.764854][   T26] Buffer I/O error on dev nbd2, logical block 0, async page read
[  780.764885][   T26] Buffer I/O error on dev nbd2, logical block 1, async page read
[  780.764918][   T26] Buffer I/O error on dev nbd2, logical block 2, async page read
[  780.764945][   T26] Buffer I/O error on dev nbd2, logical block 3, async page read
[  780.765286][ T4940] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  780.765360][ T4940] Buffer I/O error on dev nbd2, logical block 0, async page read
[  780.765388][ T4940] Buffer I/O error on dev nbd2, logical block 1, async page read
[  780.765578][ T4940] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.765757][ T4940] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.765933][ T4940] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.766113][ T4940] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.766332][ T4940] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.766516][ T4940] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.766702][ T4940] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  780.768663][ T6451] ldm_validate_partition_table(): Disk read failed.
[  780.770927][ T6451] Dev nbd2: unable to read RDB block 0
[  780.773965][ T6451]  nbd2: unable to read partition table
[  780.829174][ T6451] ldm_validate_partition_table(): Disk read failed.
[  780.830091][ T6451] Dev nbd2: unable to read RDB block 0
[  780.835364][ T6451]  nbd2: unable to read partition table
[  780.942765][T11543] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  781.076139][ T9598] usbhid 8-1:0.0: can't add hid device: -71
[  781.076270][ T9598] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  781.112810][T11550] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1708'.
[  781.112871][T11550] netlink: 'syz.2.1708': attribute type 9 has an invalid length.
[  781.112896][T11550] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1708'.
[  781.112921][T11550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1708'.
[  781.115354][ T9598] usb 8-1: USB disconnect, device number 20
[  781.219680][T11543] 8021q: adding VLAN 0 to HW filter on device bond5
[  781.361932][T11546] bond5: (slave veth11): Enslaving as an active interface with a down link
[  781.401427][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  781.552899][    T9] usb 6-1: Using ep0 maxpacket: 32
[  781.557553][    T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  781.559220][    T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  781.559261][    T9] usb 6-1: config 0 has no interface number 0
[  781.572689][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.572728][    T9] usb 6-1: Product: syz
[  781.572755][    T9] usb 6-1: Manufacturer: syz
[  781.572782][    T9] usb 6-1: SerialNumber: syz
[  781.596119][    T9] usb 6-1: config 0 descriptor??
[  781.616983][    T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  781.622135][ T9598] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  781.773508][T11567] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  781.779420][ T9598] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.40
[  781.784713][ T9598] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  781.784810][ T9598] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.800964][ T9598] usb 8-1: config 0 descriptor??
[  781.827968][ T9598] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected
[  781.828344][ T9598] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1
[  781.871043][ T9598] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 84
[  781.871182][ T9598] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2
[  781.885748][ T9598] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  781.896676][T11570] bond0: invalid ARP target specified
[  781.900679][ T9598] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 88
[  781.907353][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.908878][ T9598] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6
[  781.955531][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.968192][ T9598] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  782.311822][T11575] bridge0: port 3(netdevsim0) entered blocking state
[  782.312106][T11575] bridge0: port 3(netdevsim0) entered disabled state
[  782.312404][T11575] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  782.347302][T11575] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  782.348996][T11575] bridge0: port 3(netdevsim0) entered blocking state
[  782.349751][T11575] bridge0: port 3(netdevsim0) entered forwarding state
[  782.468900][T11578] loop3: detected capacity change from 0 to 512
[  782.477912][T11578] EXT4-fs: Ignoring removed nobh option
[  782.582989][ T5748] usb 8-1: USB disconnect, device number 21
[  782.660212][T11578] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  782.695657][T11578] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.1727: attempt to clear invalid blocks 1 len 1
[  782.695768][T11578] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  782.701032][T11578] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  782.701286][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  782.701316][    C1] EXT4-fs (loop3): initial error at time 1789797246: ext4_clear_blocks:874: inode 13
[  782.701367][    C1] EXT4-fs (loop3): last error at time 1789797246: ext4_clear_blocks:874: inode 13
[  782.701756][T11578] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1727: invalid indirect mapped block 1819239214 (level 0)
[  782.701874][T11578] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  782.733471][T11578] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1727: invalid indirect mapped block 1819239214 (level 1)
[  782.733595][T11578] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  782.777409][T11578] EXT4-fs (loop3): 1 truncate cleaned up
[  782.826359][T11578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  783.068617][ T5748] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  783.092579][ T5748] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  783.096749][ T5748] keyspan 8-1:0.0: device disconnected
[  783.269019][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  783.307444][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  783.316444][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  784.161000][T11586] nbd2: detected capacity change from 0 to 63
[  784.227306][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  784.228603][ T9598] usb 6-1: USB disconnect, device number 17
[  784.266597][ T9598] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  784.302824][T11589] netlink: 'syz.2.1729': attribute type 1 has an invalid length.
[  784.328453][ T9598] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  784.358445][ T9598] quatech2 6-1:0.51: device disconnected
[  784.562343][T11594] netlink: 328 bytes leftover after parsing attributes in process `syz.2.1729'.
[  784.562409][T11594] netlink: 'syz.2.1729': attribute type 9 has an invalid length.
[  784.562434][T11594] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1729'.
[  784.562459][T11594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1729'.
[  784.731354][   T52] block nbd2: Receive control failed (result -104)
[  784.868665][T11589] 8021q: adding VLAN 0 to HW filter on device bond6
[  787.678121][T11597] 9pnet_fd: p9_fd_create_tcp (11597): problem connecting socket to 127.0.0.1
[  788.159441][T11590] bond6: (slave veth13): Enslaving as an active interface with a down link
[  788.526822][T11623] netlink: 'syz.6.1736': attribute type 1 has an invalid length.
[  788.653073][T11631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'.
[  788.757809][ T5748] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  788.961004][T11634] loop5: detected capacity change from 0 to 512
[  788.971900][T11634] EXT4-fs: Ignoring removed nobh option
[  789.740626][T11635] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  789.854280][ T5748] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  789.888094][   T59] rtrs_client L2024: <s+>: CM error (CM event: address error, err: -ENODEV)
[  789.990017][T11634] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  790.004213][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  790.021782][ T5748] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  790.055877][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.096256][T11634] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.1743: attempt to clear invalid blocks 1 len 1
[  790.096308][T11634] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  790.101796][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  790.101852][    C1] EXT4-fs (loop5): initial error at time 1789797253: ext4_clear_blocks:874: inode 13
[  790.101905][    C1] EXT4-fs (loop5): last error at time 1789797253: ext4_clear_blocks:874: inode 13
[  790.124641][T11634] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  790.124815][T11634] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.1743: invalid indirect mapped block 1819239214 (level 0)
[  790.124855][T11634] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  790.139126][T11634] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.1743: invalid indirect mapped block 1819239214 (level 1)
[  790.139179][T11634] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  790.215616][T11634] EXT4-fs (loop5): 1 truncate cleaned up
[  790.313397][T11634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  790.321806][T11635] rtrs_client L2644: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  790.750377][T11623] 8021q: adding VLAN 0 to HW filter on device bond9
[  790.906934][ T5748] usb 4-1: config 0 descriptor??
[  791.315829][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  791.791874][ T5748] usbhid 4-1:0.0: can't add hid device: -71
[  791.792011][ T5748] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  791.831826][ T5748] usb 4-1: USB disconnect, device number 20
[  791.928989][T11632] bond9: (slave veth19): Enslaving as an active interface with a down link
[  793.513027][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1749'.
[  793.688043][T11659] bcache: register_bcache() error : Not a bcache superblock (bad offset)
[  794.628648][T11667] 9pnet_fd: p9_fd_create_tcp (11667): problem connecting socket to 127.0.0.1
[  796.263214][T11672] nbd: nbd1 already in use
[  796.382569][ T6404] IPVS: starting estimator thread 0...
[  796.404391][T11678] netlink: 'syz.1.1755': attribute type 1 has an invalid length.
[  796.407454][T11676] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  796.407576][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  796.485452][T11679] IPVS: using max 22 ests per chain, 52800 per kthread
[  796.563562][T11678] 8021q: adding VLAN 0 to HW filter on device bond10
[  796.720079][T11683] bond10: (slave veth19): Enslaving as an active interface with a down link
[  796.827706][T11678] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1755'.
[  796.827780][T11678] netlink: 'syz.1.1755': attribute type 9 has an invalid length.
[  796.827806][T11678] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1755'.
[  796.827839][T11678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1755'.
[  797.043795][T11692] loop3: detected capacity change from 0 to 512
[  797.054477][T11692] EXT4-fs: Ignoring removed nobh option
[  797.378677][T11692] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  797.396835][T11692] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #13: comm syz.3.1757: attempt to clear invalid blocks 1 len 1
[  797.396947][T11692] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  797.401261][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  797.401293][    C1] EXT4-fs (loop3): initial error at time 1789797260: ext4_clear_blocks:874: inode 13
[  797.401343][    C1] EXT4-fs (loop3): last error at time 1789797260: ext4_clear_blocks:874: inode 13
[  797.421879][T11692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  797.422723][T11692] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1757: invalid indirect mapped block 1819239214 (level 0)
[  797.422835][T11692] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  797.436382][T11692] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz.3.1757: invalid indirect mapped block 1819239214 (level 1)
[  797.436490][T11692] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  797.465979][T11692] EXT4-fs (loop3): 1 truncate cleaned up
[  797.495565][T11692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  797.866289][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.118777][T11700] loop5: detected capacity change from 0 to 4096
[  798.195890][T11708] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  799.206055][T11711] 9pnet_fd: p9_fd_create_tcp (11711): problem connecting socket to 127.0.0.1
[  801.413744][T11726] nfsd: exp_rootfh path not found \
[  802.385287][T11733] 9pnet_fd: p9_fd_create_tcp (11733): problem connecting socket to 127.0.0.1
[  803.021709][ T5748] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  803.201398][ T5748] usb 6-1: Using ep0 maxpacket: 32
[  803.203514][ T5748] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  803.912038][T11741] 9pnet_fd: p9_fd_create_tcp (11741): problem connecting socket to 127.0.0.1
[  806.129482][ T5748] usb 6-1: unable to read config index 0 descriptor/all
[  806.129546][ T5748] usb 6-1: can't read configurations, error -71
[  806.618200][T11755] netlink: 'syz.6.1778': attribute type 1 has an invalid length.
[  806.731806][T11755] 8021q: adding VLAN 0 to HW filter on device bond10
[  806.802401][T11755] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1778'.
[  806.802470][T11755] netlink: 'syz.6.1778': attribute type 9 has an invalid length.
[  806.802496][T11755] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1778'.
[  806.802523][T11755] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1778'.
[  806.865491][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  806.943765][T11760] bond10: (slave veth21): Enslaving as an active interface with a down link
[  807.025110][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  807.027131][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  807.027175][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  807.027220][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  807.038539][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  807.038578][    T9] usb 3-1: Product: syz
[  807.038605][    T9] usb 3-1: Manufacturer: syz
[  807.038632][    T9] usb 3-1: SerialNumber: syz
[  807.374153][    T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  808.563185][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  808.563316][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  808.907105][   T26] block nbd1: Possible stuck request ffff888028408dc0: control (read@0,1024B). Runtime 30 seconds
[  808.907155][   T26] block nbd1: Possible stuck request ffff888028408f80: control (read@1024,3072B). Runtime 30 seconds
[  808.948028][  T983] usb 3-1: USB disconnect, device number 13
[  809.008383][  T983] usblp0: removed
[  809.572614][T11785] block2mtd: illegal erase size
[  811.485819][T11792] hub 1-0:1.0: USB hub found
[  811.511638][T11792] hub 1-0:1.0: 1 port detected
[  811.668223][T11809] netlink: 'syz.3.1774': attribute type 1 has an invalid length.
[  811.787390][T11814] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1774'.
[  811.787483][T11814] netlink: 'syz.3.1774': attribute type 9 has an invalid length.
[  811.787510][T11814] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1774'.
[  811.787536][T11814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1774'.
[  811.918565][T11809] 8021q: adding VLAN 0 to HW filter on device bond8
[  812.005522][T11811] bond8: (slave veth13): Enslaving as an active interface with a down link
[  812.171720][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  812.325731][   T10] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  812.327781][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  812.327848][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.382658][   T10] as10x_usb: device has been detected
[  812.383750][   T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  812.412229][   T10] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  812.420986][T11834] loop2: detected capacity change from 0 to 512
[  812.443578][T11834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  812.443795][T11834] System zones: 1-12
[  812.448997][T11834] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #12: comm syz.2.1796: missing EA_INODE flag
[  812.449043][T11834] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  812.451284][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  812.451319][    C1] EXT4-fs (loop2): initial error at time 1789797275: ext4_xattr_inode_iget:437: inode 12
[  812.451369][    C1] EXT4-fs (loop2): last error at time 1789797275: ext4_xattr_inode_iget:437: inode 12
[  812.459062][T11834] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.1796: error while reading EA inode 12 err=-117
[  812.459110][T11834] loop2: lost filesystem error report for type 5 error -117
[  812.459976][T11834] EXT4-fs (loop2): 1 orphan inode deleted
[  812.473578][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.658186][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.714233][   T10] as10x_usb: error during firmware upload part1
[  812.728239][   T10] Registered device Abilis Systems DVB-Titan
[  813.265970][    T9] usb 6-1: USB disconnect, device number 20
[  813.407512][    T9] Unregistered device Abilis Systems DVB-Titan
[  813.413607][    T9] as10x_usb: device has been disconnected
[  813.826394][T11866] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1809'.
[  813.873324][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1810'.
[  813.937993][T11868] ipvlan2: entered allmulticast mode
[  813.938027][T11868] syz_tun: entered allmulticast mode
[  814.928618][T11875] 9pnet_fd: p9_fd_create_tcp (11875): problem connecting socket to 127.0.0.1
[  815.767913][ T4940] block nbd2: Possible stuck request ffff88802846fa40: control (read@0,1024B). Runtime 30 seconds
[  815.767984][ T4940] block nbd2: Possible stuck request ffff88802846fc00: control (read@1024,1024B). Runtime 30 seconds
[  815.768035][ T4940] block nbd2: Possible stuck request ffff88802846fdc0: control (read@2048,1024B). Runtime 30 seconds
[  815.768085][ T4940] block nbd2: Possible stuck request ffff888028470000: control (read@3072,1024B). Runtime 30 seconds
[  816.849976][T11884] netlink: 'syz.3.1814': attribute type 1 has an invalid length.
[  816.964191][T11891] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1814'.
[  816.964275][T11891] netlink: 'syz.3.1814': attribute type 9 has an invalid length.
[  816.964300][T11891] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1814'.
[  816.964325][T11891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1814'.
[  817.039088][T11884] 8021q: adding VLAN 0 to HW filter on device bond9
[  817.180016][T11889] bond9: (slave veth15): Enslaving as an active interface with a down link
[  817.281372][ T5748] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  817.444617][ T5748] usb 8-1: not running at top speed; connect to a high speed hub
[  817.444654][ T5748] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  817.447081][ T5748] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  817.447141][ T5748] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.498281][ T5748] uvcvideo 8-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  818.302500][ T5748] uvcvideo 8-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  818.377090][ T5748] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  818.377261][ T5748] uvcvideo 8-1:1.1: Failed to initialize the device (-71).
[  818.582201][ T5748] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -71
[  818.864101][ T5748] usb 8-1: USB disconnect, device number 22
[  820.057539][T11949] loop3: detected capacity change from 0 to 8
[  820.155178][T11949] SQUASHFS error: Failed to read block 0x4de: -5
[  820.155466][T11949] SQUASHFS error: Failed to read block 0x4de: -5
[  820.160032][   T31] audit: type=1800 audit(1789797283.528:35): pid=11949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1837" name="file1" dev="loop3" ino=5 res=0 errno=0
[  820.160984][T11951] netlink: 'syz.1.1834': attribute type 1 has an invalid length.
[  820.845830][T11954] 9pnet_fd: p9_fd_create_tcp (11954): problem connecting socket to 127.0.0.1
[  822.138894][T11957] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1834'.
[  822.138969][T11957] netlink: 'syz.1.1834': attribute type 9 has an invalid length.
[  822.138993][T11957] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1834'.
[  822.139019][T11957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1834'.
[  822.335958][T11951] 8021q: adding VLAN 0 to HW filter on device bond11
[  822.493606][T11956] bond11: (slave veth21): Enslaving as an active interface with a down link
[  822.514485][T11966] misc userio: Can't change port extra on an already running userio instance
[  822.917463][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'.
[  823.061371][ T5748] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  823.192705][ T9598] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  823.212078][ T5748] usb 3-1: Using ep0 maxpacket: 8
[  823.212940][ T5748] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00
[  823.216614][ T5748] usb 3-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.216671][ T5748] usb 3-1: config 0 interface 0 altsetting 216 endpoint 0x81 has invalid maxpacket 2023, setting to 1024
[  823.216720][ T5748] usb 3-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  823.216771][ T5748] usb 3-1: config 0 interface 0 has no altsetting 0
[  823.216820][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.292468][ T5748] usb 3-1: config 0 descriptor??
[  823.294652][T11970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  823.359254][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1849'.
[  823.382406][ T9598] usb 7-1: Using ep0 maxpacket: 32
[  823.389518][ T9598] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  823.397460][ T9598] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  823.397515][ T9598] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  823.397563][ T9598] usb 7-1: config 0 interface 0 has no altsetting 0
[  823.397612][ T9598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.427301][ T9598] usb 7-1: config 0 descriptor??
[  823.683748][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  823.733261][ T5748] apple 0003:05AC:8102.0017: unknown main item tag 0x2
[  823.752668][ T5748] apple 0003:05AC:8102.0017: hidraw0: USB HID v7f.fe Device [HID 05ac:8102] on usb-dummy_hcd.2-1/input0
[  823.843681][    T9] usb 6-1: Using ep0 maxpacket: 32
[  823.846164][    T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  823.856573][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.856627][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.856717][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.879477][    T9] usb 6-1: config 0 descriptor??
[  823.987864][ T9598] holtek 0003:1241:5015.0018: no output report found
[  825.777905][    T9] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[  825.777956][    T9] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[  825.777992][    T9] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[  825.778027][    T9] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[  825.778062][    T9] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[  826.609772][   T10] usb 3-1: USB disconnect, device number 14
[  826.672831][    T9] koneplus 0003:1E7D:2D51.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0
[  826.681158][ T9598] holtek 0003:1241:5015.0018: hiddev0,hidraw1: USB HID v0.05 Device [HID 1241:5015] on usb-dummy_hcd.6-1/input0
[  826.717143][ T9598] usb 7-1: USB disconnect, device number 14
[  826.887958][    T9] koneplus 0003:1E7D:2D51.0019: couldn't init struct koneplus_device
[  826.888081][    T9] koneplus 0003:1E7D:2D51.0019: couldn't install mouse
[  826.914783][    T9] koneplus 0003:1E7D:2D51.0019: probe with driver koneplus failed with error -71
[  826.954953][    T9] usb 6-1: USB disconnect, device number 21
[  827.496012][T12012] 9pnet_fd: p9_fd_create_tcp (12012): problem connecting socket to 127.0.0.1
[  829.672815][   T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  829.835230][   T25] usb 6-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  829.837365][   T25] usb 6-1: config 0 has no interfaces?
[  829.837412][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.867564][   T25] usb 6-1: config 0 descriptor??
[  830.115289][   T25] usb 6-1: USB disconnect, device number 22
[  830.238156][T12038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1865'.
[  830.420742][T12031] fido_id[12031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  830.474290][T12040] fido_id[12040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  830.684715][T12048] loop1: detected capacity change from 0 to 2048
[  830.775535][T12048]  loop1: p1 < > p3 p4
[  830.811507][T12048] loop1: p3 start 16777225 is beyond EOD, truncated
[  830.811546][T12048] loop1: p4 size 8388608 extends beyond EOD, truncated
[  830.843638][   T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  830.994561][   T25] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  831.017632][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.017676][   T25] usb 3-1: Product: syz
[  831.017703][   T25] usb 3-1: Manufacturer: syz
[  831.017732][   T25] usb 3-1: SerialNumber: syz
[  831.068360][T12061] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  831.103334][   T25] usb 3-1: config 0 descriptor??
[  831.110512][   T25] ch341 3-1:0.0: ch341-uart converter detected
[  831.983439][   T25] usb 3-1: failed to send control message: -71
[  831.983514][   T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  832.009307][   T25] usb 3-1: USB disconnect, device number 15
[  832.030136][   T25] ch341 3-1:0.0: device disconnected
[  832.126673][ T5645] udevd[5645]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  832.150773][ T5641] udevd[5641]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  833.845333][T12086] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1882'.
[  834.108529][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  834.175657][T12084] 
[  834.178010][T12084] ======================================================
[  834.185027][T12084] WARNING: possible circular locking dependency detected
[  834.192038][T12084] syzkaller #0 Not tainted
[  834.196615][T12084] ------------------------------------------------------
[  834.203630][T12084] syz.7.1880/12084 is trying to acquire lock:
[  834.209677][T12084] ffff888027bf6bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1bc/0x530
[  834.219099][T12084] 
[  834.219099][T12084] but task is already holding lock:
[  834.226448][T12084] ffff888027bf66d0 (&q->q_usage_counter(io)#66){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  834.238053][T12084] 
[  834.238053][T12084] which lock already depends on the new lock.
[  834.238053][T12084] 
[  834.248437][T12084] 
[  834.248437][T12084] the existing dependency chain (in reverse order) is:
[  834.257439][T12084] 
[  834.257439][T12084] -> #6 (&q->q_usage_counter(io)#66){++++}-{0:0}:
[  834.266226][T12084]        lock_acquire+0x1d1/0x380
[  834.271250][T12084]        blk_alloc_queue+0x610/0x790
[  834.276546][T12084]        blk_mq_alloc_queue+0x174/0x290
[  834.282123][T12084]        __blk_mq_alloc_disk+0x29/0x120
[  834.287683][T12084]        null_add_dev+0xdf8/0x1df0
[  834.292808][T12084]        null_init+0x36b/0x460
[  834.297563][T12084]        do_one_initcall+0x11c/0x6f0
[  834.302843][T12084]        kernel_init_freeable+0x6ea/0x7b0
[  834.308558][T12084]        kernel_init+0x21/0x1e0
[  834.313410][T12084]        ret_from_fork+0x730/0xd60
[  834.318515][T12084]        ret_from_fork_asm+0x1a/0x30
[  834.323792][T12084] 
[  834.323792][T12084] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  834.331006][T12084]        lock_acquire+0x1d1/0x380
[  834.336024][T12084]        fs_reclaim_acquire+0xc4/0x100
[  834.341480][T12084]        __kmalloc_cache_node_noprof+0x66/0x720
[  834.347733][T12084]        create_worker+0x110/0x750
[  834.352843][T12084]        workqueue_prepare_cpu+0xb5/0x160
[  834.358559][T12084]        cpuhp_invoke_callback+0x3b4/0x9a0
[  834.364375][T12084]        __cpuhp_invoke_callback_range+0x158/0x1d0
[  834.371242][T12084]        _cpu_up+0x3f6/0x960
[  834.375855][T12084]        cpu_up+0x1ba/0x230
[  834.380351][T12084]        cpuhp_bringup_mask+0xf8/0x180
[  834.385825][T12084]        bringup_nonboot_cpus+0x170/0x1b0
[  834.391550][T12084]        smp_init+0x32/0x150
[  834.396150][T12084]        kernel_init_freeable+0x44b/0x7b0
[  834.401876][T12084]        kernel_init+0x21/0x1e0
[  834.406742][T12084]        ret_from_fork+0x730/0xd60
[  834.411845][T12084]        ret_from_fork_asm+0x1a/0x30
[  834.417139][T12084] 
[  834.417139][T12084] -> #4 (cpu_hotplug_lock){++++}-{0:0}:
[  834.424874][T12084]        lock_acquire+0x1d1/0x380
[  834.429893][T12084]        cpus_read_lock+0x42/0x170
[  834.435018][T12084]        static_key_slow_inc+0x12/0x30
[  834.440496][T12084]        nbd_genl_reconnect_sock_cb+0x39f/0x990
[  834.446749][T12084]        nbd_genl_foreach_sock+0x2ab/0x3e0
[  834.452564][T12084]        nbd_genl_reconfigure+0x861/0xde0
[  834.458295][T12084]        genl_family_rcv_msg_doit+0x214/0x300
[  834.464369][T12084]        genl_rcv_msg+0x560/0x800
[  834.469412][T12084]        netlink_rcv_skb+0x159/0x420
[  834.474699][T12084]        genl_rcv+0x28/0x40
[  834.479214][T12084]        netlink_unicast+0x585/0x850
[  834.484527][T12084]        netlink_sendmsg+0x8b0/0xda0
[  834.489818][T12084]        ____sys_sendmsg+0xa4d/0xbe0
[  834.495099][T12084]        ___sys_sendmsg+0x190/0x1e0
[  834.500295][T12084]        __sys_sendmsg+0x160/0x210
[  834.505412][T12084]        do_syscall_64+0x123/0x790
[  834.510520][T12084]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.516937][T12084] 
[  834.516937][T12084] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  834.524591][T12084]        lock_acquire+0x1d1/0x380
[  834.529631][T12084]        __mutex_lock+0x1a4/0x1bd0
[  834.534742][T12084]        nbd_queue_rq+0x42d/0xfa0
[  834.539785][T12084]        blk_mq_dispatch_rq_list+0x428/0x1e60
[  834.545866][T12084]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  834.552737][T12084]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  834.559245][T12084]        blk_mq_run_work_fn+0x135/0x380
[  834.564791][T12084]        process_one_work+0xac7/0x1b10
[  834.570258][T12084]        worker_thread+0x5ef/0xe50
[  834.575375][T12084]        kthread+0x373/0x450
[  834.579968][T12084]        ret_from_fork+0x730/0xd60
[  834.585073][T12084]        ret_from_fork_asm+0x1a/0x30
[  834.590356][T12084] 
[  834.590356][T12084] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  834.597569][T12084]        lock_acquire+0x1d1/0x380
[  834.602606][T12084]        __mutex_lock+0x1a4/0x1bd0
[  834.607716][T12084]        nbd_queue_rq+0xba/0xfa0
[  834.612663][T12084]        blk_mq_dispatch_rq_list+0x428/0x1e60
[  834.618739][T12084]        __blk_mq_sched_dispatch_requests+0xcea/0x1620
[  834.625592][T12084]        blk_mq_sched_dispatch_requests+0xd7/0x1c0
[  834.632097][T12084]        blk_mq_run_work_fn+0x135/0x380
[  834.637646][T12084]        process_one_work+0xac7/0x1b10
[  834.643134][T12084]        worker_thread+0x5ef/0xe50
[  834.648251][T12084]        kthread+0x373/0x450
[  834.652842][T12084]        ret_from_fork+0x730/0xd60
[  834.657949][T12084]        ret_from_fork_asm+0x1a/0x30
[  834.663225][T12084] 
[  834.663225][T12084] -> #1 (set->srcu){.+.+}-{0:0}:
[  834.670372][T12084]        lock_sync+0xb5/0x120
[  834.675042][T12084]        __synchronize_srcu+0xa2/0x300
[  834.680496][T12084]        blk_mq_quiesce_queue+0x149/0x1c0
[  834.686221][T12084]        elevator_switch+0x17b/0x7e0
[  834.691504][T12084]        elevator_change+0x352/0x530
[  834.696787][T12084]        elevator_set_default+0x29e/0x360
[  834.702508][T12084]        blk_register_queue+0x48e/0x630
[  834.708055][T12084]        __add_disk+0x7dd/0xf10
[  834.712916][T12084]        add_disk_fwnode+0x118/0x480
[  834.718195][T12084]        nbd_dev_add+0x779/0xb10
[  834.723141][T12084]        nbd_init+0x2c5/0x2e0
[  834.727810][T12084]        do_one_initcall+0x11c/0x6f0
[  834.733091][T12084]        kernel_init_freeable+0x6ea/0x7b0
[  834.738828][T12084]        kernel_init+0x21/0x1e0
[  834.743680][T12084]        ret_from_fork+0x730/0xd60
[  834.748784][T12084]        ret_from_fork_asm+0x1a/0x30
[  834.754062][T12084] 
[  834.754062][T12084] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  834.761888][T12084]        check_prev_add+0xeb/0xe60
[  834.767025][T12084]        __lock_acquire+0x1528/0x1f40
[  834.772475][T12084]        lock_acquire+0x1d1/0x380
[  834.777524][T12084]        __mutex_lock+0x1a4/0x1bd0
[  834.782630][T12084]        elevator_change+0x1bc/0x530
[  834.787916][T12084]        elv_iosched_store+0x3be/0x460
[  834.793409][T12084]        queue_attr_store+0x25f/0x2f0
[  834.798773][T12084]        sysfs_kf_write+0xf2/0x150
[  834.803917][T12084]        kernfs_fop_write_iter+0x3e0/0x5f0
[  834.809746][T12084]        vfs_write+0x6af/0x1050
[  834.814601][T12084]        ksys_write+0x12a/0x250
[  834.819461][T12084]        do_syscall_64+0x123/0x790
[  834.824565][T12084]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.830990][T12084] 
[  834.830990][T12084] other info that might help us debug this:
[  834.830990][T12084] 
[  834.841204][T12084] Chain exists of:
[  834.841204][T12084]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#66
[  834.841204][T12084] 
[  834.854970][T12084]  Possible unsafe locking scenario:
[  834.854970][T12084] 
[  834.862402][T12084]        CPU0                    CPU1
[  834.867749][T12084]        ----                    ----
[  834.873097][T12084]   lock(&q->q_usage_counter(io)#66);
[  834.878476][T12084]                                lock(fs_reclaim);
[  834.884970][T12084]                                lock(&q->q_usage_counter(io)#66);
[  834.892873][T12084]   lock(&q->elevator_lock);
[  834.897458][T12084] 
[  834.897458][T12084]  *** DEADLOCK ***
[  834.897458][T12084] 
[  834.905582][T12084] locks held by syz.7.1880/12084: 7, last CPU#1:
[  834.911897][T12084]  #0: ffff888077cb22b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[  834.920976][T12084]  #1: ffff8880696f8460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  834.929980][T12084]  #2: ffff88802adee480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0
[  834.939759][T12084]  #3: ffff8880288de3c8 (kn->active#94){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0
[  834.949809][T12084]  #4: ffff88802372b9f8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x2a0/0x460
[  834.960454][T12084]  #5: ffff888027bf66d0 (&q->q_usage_counter(io)#66){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  834.972151][T12084]  #6: ffff888027bf6708 (&q->q_usage_counter(queue)#49){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20
[  834.984111][T12084] 
[  834.984111][T12084] stack backtrace:
[  834.989986][T12084] CPU: 1 UID: 0 PID: 12084 Comm: syz.7.1880 Not tainted syzkaller #0 PREEMPT(full) 
[  834.999367][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  835.009410][T12084] Call Trace:
[  835.012689][T12084]  <TASK>
[  835.015621][T12084]  dump_stack_lvl+0x100/0x190
[  835.020306][T12084]  print_circular_bug.cold+0x178/0x1be
[  835.025776][T12084]  check_noncircular+0x146/0x160
[  835.030733][T12084]  check_prev_add+0xeb/0xe60
[  835.035339][T12084]  __lock_acquire+0x1528/0x1f40
[  835.040200][T12084]  ? __flush_work+0xa38/0xcb0
[  835.044882][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.050524][T12084]  lock_acquire+0x1d1/0x380
[  835.055017][T12084]  ? elevator_change+0x1bc/0x530
[  835.059957][T12084]  ? __pfx___might_resched+0x10/0x10
[  835.065250][T12084]  ? __pfx___flush_work+0x10/0x10
[  835.070290][T12084]  __mutex_lock+0x1a4/0x1bd0
[  835.074889][T12084]  ? elevator_change+0x1bc/0x530
[  835.079832][T12084]  ? elevator_change+0x1bc/0x530
[  835.084765][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.090400][T12084]  ? enable_work+0x295/0x320
[  835.094999][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.100633][T12084]  ? lockdep_hardirqs_on+0x7d/0x110
[  835.105824][T12084]  ? __pfx___mutex_lock+0x10/0x10
[  835.110846][T12084]  ? __pfx_enable_work+0x10/0x10
[  835.115796][T12084]  ? __pfx___might_resched+0x10/0x10
[  835.121092][T12084]  ? blk_mq_cancel_work_sync+0x101/0x3c0
[  835.126747][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.132380][T12084]  ? cancel_delayed_work_sync+0x96/0xf0
[  835.137934][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.143571][T12084]  ? blk_mq_cancel_work_sync+0x36c/0x3c0
[  835.149220][T12084]  ? elevator_change+0x1bc/0x530
[  835.154154][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.159789][T12084]  elevator_change+0x1bc/0x530
[  835.164552][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.170188][T12084]  elv_iosched_store+0x3be/0x460
[  835.175126][T12084]  ? __pfx_elv_iosched_store+0x10/0x10
[  835.180585][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.186224][T12084]  ? kernfs_fop_write_iter+0x2c2/0x5f0
[  835.191696][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.197334][T12084]  ? __pfx_elv_iosched_store+0x10/0x10
[  835.202800][T12084]  queue_attr_store+0x25f/0x2f0
[  835.207653][T12084]  ? __pfx_queue_attr_store+0x10/0x10
[  835.213017][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.218669][T12084]  ? __lock_acquire+0x5c0/0x1f40
[  835.223605][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.229237][T12084]  ? lock_acquire+0x1d1/0x380
[  835.233908][T12084]  ? sysfs_file_kobj+0x21/0x290
[  835.238800][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.244434][T12084]  ? find_held_lock+0x2b/0x80
[  835.249218][T12084]  ? sysfs_file_kobj+0xe4/0x290
[  835.254081][T12084]  ? sysfs_file_kobj+0xe4/0x290
[  835.258955][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.264592][T12084]  ? __pfx_queue_attr_store+0x10/0x10
[  835.269959][T12084]  sysfs_kf_write+0xf2/0x150
[  835.274564][T12084]  kernfs_fop_write_iter+0x3e0/0x5f0
[  835.279855][T12084]  ? __pfx_sysfs_kf_write+0x10/0x10
[  835.285086][T12084]  vfs_write+0x6af/0x1050
[  835.289424][T12084]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  835.295258][T12084]  ? __pfx_vfs_write+0x10/0x10
[  835.300033][T12084]  ? find_held_lock+0x2b/0x80
[  835.304744][T12084]  ksys_write+0x12a/0x250
[  835.309081][T12084]  ? __pfx_ksys_write+0x10/0x10
[  835.313962][T12084]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.319598][T12084]  do_syscall_64+0x123/0x790
[  835.324187][T12084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.330076][T12084] RIP: 0033:0x7fb08699e159
[  835.334480][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.354091][T12084] RSP: 002b:00007fb0877ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  835.362500][T12084] RAX: ffffffffffffffda RBX: 00007fb086c25fa0 RCX: 00007fb08699e159
[  835.370461][T12084] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003
[  835.378421][T12084] RBP: 00007fb086a3506b R08: 0000000000000000 R09: 0000000000000000
[  835.386386][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.394346][T12084] R13: 00007fb086c26038 R14: 00007fb086c25fa0 R15: 00007fff38f68ca8
[  835.402318][T12084]  </TASK>
[  835.661123][   T31] audit: type=1326 audit(1789797299.028:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12097 comm="syz.5.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d82f9e159 code=0x0
[  839.332906][   T26] block nbd1: Possible stuck request ffff888028408dc0: control (read@0,1024B). Runtime 60 seconds
[  839.332981][   T26] block nbd1: Possible stuck request ffff888028408f80: control (read@1024,3072B). Runtime 60 seconds
[  839.376006][ T4979] udevd[4979]: worker [5628] /devices/virtual/block/nbd1 is taking a long time