last executing test programs:

3m3.17202507s ago: executing program 4 (id=5):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x3}}, {@orlov}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$eJzs28tvG0UYAPBv7SR9k1CVR9MCgYKIeCRNWkoPXEAgcQAJCQ7lGJK0CnUb1ASJVhEEhMoRVeKOOCLxF3CCCwJOSFzhjipVKJcWTkZr7ya2Y7tJ6tSh/v2kbWd2x5n5vDv2zI43gJ41kv6TROyPiD8iYrCarS8wUv3v1srS9D8rS9NJlMtv/51Uyt1cWZrOi+av25dn+iIKnydxpEm9C5evnJ8qlWYvZfnxxQsfjC9cvvL83IWpc7PnZi9Onj598sTEi6cmX+hInGlcN4c/nj96+PV3r705febae798l+TxN8TRISPtDj5VLne4uu46UJNO+rrYEDalWO2m0V/p/4NRjLWTNxivfdbVxgHbqlwulx9sfXi5DNzDkuh2C4DuyL/o0/lvvt2loceOcOPl6gQojftWtlWP9EUhK9PfML/tpJGIOLP879fpFttzHwIAoM4P6fjnuWbjv0LU3he6L1tDGYqI+yPiYESciohDEfFARKXsQxHx8Cbrb1wkWT/+KVzfUmAblI7/XsrWturHf/noL4aKWe5AJf7+5OxcafZ49p6MRv+uND/Rpo4fX/39y1bHasd/6ZbWn48Fs3Zc79tV/5qZqcWpO4m51o1PI4b7msWfrK4EJBFxOCKGt1jH3DPfHm117Pbxt9GBdabyNxFPV8//cjTEn0var0+O747S7PHx/KpY79ffrr7Vqv47ir8D0vO/t+n1vxr/UFK7Xruw+Tqu/vlFyznNVq//geSdun0fTS0uXpqIGEjeqDa6dv9kQ7nJtfJp/KPHsvgH6vv/wVh7J45ERHoRPxIRj0bEY1nbH4+IJyLiWJv4f37lyfe3Fv/uNn+1M9L4ZzZ1/tcSA9G4p3mieP6n7+sqHdpo/JGd/5OV1Gi2ZyOffxtp19auZgAAAPj/KUTE/kgKY6vpQmFsrPob/kOxt1CaX1h89uz8hxdnqs8IDEV/Ib/TNVhzP3Qim9bn+cmG/InsvvFXxT2V/Nj0fGmm28FDj9vXov+n/ip2u3XAtvO8FvQu/R96l/4PvUv/h55U+ZVfk/6/pwttAbqg2ff/J11oB3D3NfR/y37QQ8z/oXfp/9C79H/oSQt74vYPyUtIrEtEYUc04x5MxI5oRrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrjvwAAAP//qSDljg==")

3m2.920749518s ago: executing program 4 (id=9):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2f, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffe9, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44080)

3m1.409526904s ago: executing program 4 (id=19):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf51, 0x81, 0xffff, 0x9cff, 0x15})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffe, 0xfffffff6, 0x0, 0x5, "0062007d8200edffffffffff2140f7ffffff00"})
r1 = syz_open_pts(r0, 0x20200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)

3m1.313082356s ago: executing program 32 (id=19):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf51, 0x81, 0xffff, 0x9cff, 0x15})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffe, 0xfffffff6, 0x0, 0x5, "0062007d8200edffffffffff2140f7ffffff00"})
r1 = syz_open_pts(r0, 0x20200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17)

2m25.982309723s ago: executing program 0 (id=238):
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000680)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040000}, 0x4000044)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000011020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010000020d00000904010102020d00000905820200020942f9090503f70800000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2m22.44300942s ago: executing program 0 (id=263):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
shmctl$SHM_UNLOCK(0x0, 0xc)

2m22.208033477s ago: executing program 0 (id=267):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x8000600d})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x6000200c})

2m21.179724958s ago: executing program 0 (id=276):
syz_mount_image$exfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x7f, 0x1519, &(0x7f00000021c0)="$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")
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
mlock(&(0x7f000068d000/0x1000)=nil, 0x1000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m20.78109627s ago: executing program 0 (id=277):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m20.015279653s ago: executing program 0 (id=282):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)

2m19.844203518s ago: executing program 33 (id=282):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0)

30.915982806s ago: executing program 3 (id=841):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x29}, {0xfffffefffffffffd, 0xeca, 0x80002d, 0x0, 0x0, 0x0, 0x8000000000778a, 0xfffd}, {0x3, 0x6, 0x9}}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x1}}, 0xe8)
close(0xffffffffffffffff)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r2 = dup(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7)
write$P9_RRENAME(r2, &(0x7f00000005c0)={0x7, 0x15, 0x1}, 0x7)

30.553135097s ago: executing program 3 (id=843):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x50)

29.563551827s ago: executing program 3 (id=848):
r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
r3 = fcntl$dupfd(r2, 0x406, r1)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xd3}, 0x8)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendto$inet6(r2, &(0x7f0000000100)="f6", 0x1, 0x20048080, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

29.331431734s ago: executing program 3 (id=849):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000080)='./file4\x00', 0xa08c54, &(0x7f00000000c0)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@shortname_win95}]}, 0x89, 0x2c4, &(0x7f0000000b00)="$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")
creat(0x0, 0x40)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x3ffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000200)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)

28.851431598s ago: executing program 3 (id=850):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000e00)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
pipe2(&(0x7f0000000680)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
splice(r3, 0x0, r4, 0x0, 0x9b2, 0xf)

23.314321566s ago: executing program 3 (id=862):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, 0x0, 0x163000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

22.591280508s ago: executing program 34 (id=862):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000180), &(0x7f00000001c0)})
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, 0x0, 0x163000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

8.038796937s ago: executing program 5 (id=905):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.837826653s ago: executing program 1 (id=906):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x6}}}, 0x10, 0x0}, 0x0)

7.837246253s ago: executing program 2 (id=907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

7.651933089s ago: executing program 2 (id=908):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

7.651717969s ago: executing program 1 (id=909):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x400002c0)
ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x80000001)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
shutdown(r2, 0x1)
recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

7.015971737s ago: executing program 1 (id=910):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x840)
recvmsg(0xffffffffffffffff, 0x0, 0x10001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)

6.789310484s ago: executing program 2 (id=911):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
fsopen(0x0, 0x0)
connect$inet(r3, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0)

6.003000919s ago: executing program 6 (id=912):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x43d, &(0x7f0000000d80)="$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")
syz_mount_image$fuse(0x0, 0x0, 0x2e508d, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea, 0xfffffffc})
unlinkat(r0, 0x0, 0x200)
lgetxattr(0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x476b, 0xa582)
utimes(0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4)
symlink(0x0, &(0x7f0000000040)='./file1\x00')
unlink(&(0x7f0000000280)='./file1\x00')

4.770544055s ago: executing program 2 (id=913):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='.\x02\x00', 0x2204806, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x1a6)
getdents64(r1, &(0x7f0000003cc0)=""/4128, 0x1020)

4.590200281s ago: executing program 5 (id=914):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000400)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000003c0)={0x1, r4, 0x9, 0x4, 0xeb0, 0x0, 0x0, 0x40, 0xffffff4f})

4.530893163s ago: executing program 1 (id=915):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)="78c398fc0afe291364fe8bb7", 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040), 0x7, 0x4c1, &(0x7f0000000c00)="$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")
socket$qrtr(0x2a, 0x2, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})

4.447727815s ago: executing program 2 (id=916):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc20776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1a0600a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda481c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695f6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2d4e6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826a35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c9731fedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8ab74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b40)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRESOCT, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT], 0x41, 0x5e97, &(0x7f0000005e00)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10042, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58)

3.583065551s ago: executing program 5 (id=917):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r5, 0x0, r1, 0x0, 0x317e, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

3.511585854s ago: executing program 6 (id=918):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
epoll_create1(0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x5}}, 0x26)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000240)=0x2)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.202962683s ago: executing program 6 (id=919):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

2.938928961s ago: executing program 1 (id=920):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

2.381557228s ago: executing program 5 (id=921):
socket(0x1d, 0x2, 0x6)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x800, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4008840)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.256505632s ago: executing program 6 (id=922):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0)
syz_open_procfs(0x0, 0x0)

1.465907865s ago: executing program 6 (id=923):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100))

1.426630096s ago: executing program 5 (id=924):
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x7, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="13000000010203", 0x7}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.232685543s ago: executing program 1 (id=925):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r4, 0x0, 0x1000000201005)

456.050746ms ago: executing program 6 (id=926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

308.21129ms ago: executing program 2 (id=927):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0)
close(0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60)
pwrite64(r1, &(0x7f0000000040)="0e", 0x1, 0x8080c61)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0)
sendfile(r4, r0, 0x0, 0x80000000)

142.975956ms ago: executing program 7 (id=863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='^', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000001140), 0x700, 0x0, 0x0)

0s ago: executing program 5 (id=928):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

umber=3
[   93.833544][ T4772] usb 3-1: Product: syz
[   93.838349][ T4772] usb 3-1: Manufacturer: syz
[   93.876611][ T4772] usb 3-1: SerialNumber: syz
[   93.904731][ T4772] usb 3-1: config 0 descriptor??
[   93.945213][ T4772] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[   93.953405][ T4231] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   94.240846][ T4231] usb 6-1: Using ep0 maxpacket: 8
[   94.310976][ T4772] gspca_m5602: Failed to find a sensor
[   94.323995][ T4772] ALi m5602 3-1:0.0: ALi m5602 webcam failed
[   94.343498][ T4772] usb 3-1: USB disconnect, device number 5
[   94.361077][ T4231] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   94.402742][ T4231] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   94.415080][ T4231] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   94.426504][ T4231] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   94.437690][ T4231] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.452652][ T4231] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   94.461937][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.746110][ T5086] loop1: detected capacity change from 0 to 256
[   94.753048][ T4231] usb 6-1: usb_control_msg returned -32
[   94.759238][ T4231] usbtmc 6-1:16.0: can't read capabilities
[   94.800528][ T5086] exfat: Deprecated parameter 'namecase'
[   94.840308][ T5086] exfat: Deprecated parameter 'utf8'
[   94.923521][ T5086] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[   94.960801][ T1345] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   95.092251][ T4231] usb 6-1: USB disconnect, device number 4
[   95.101906][ T5029] usbtmc 6-1:16.0: usb_control_msg returned -71
[   95.323511][ T4263] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   95.350029][ T5099] loop0: detected capacity change from 0 to 32768
[   95.422515][ T5099] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.183 (5099)
[   95.475151][ T5099] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   95.508027][ T5099] BTRFS info (device loop0): using free space tree
[   95.521133][ T5099] BTRFS info (device loop0): has skinny extents
[   95.591186][ T1345] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[   95.612502][ T1345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.643057][ T1345] usb 3-1: Product: syz
[   95.651011][ T1345] usb 3-1: Manufacturer: syz
[   95.667559][ T1345] usb 3-1: SerialNumber: syz
[   95.697012][ T1345] usb 3-1: config 0 descriptor??
[   95.707110][ T5099] BTRFS info (device loop0): enabling ssd optimizations
[   95.772852][ T1345] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[   95.791351][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short
[   95.861175][ T4263] usb 2-1: not running at top speed; connect to a high speed hub
[   96.110149][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   96.121647][ T4263] usb 2-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[   96.138243][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.159807][ T4263] usb 2-1: Product: syz
[   96.164397][ T1345] gspca_m5602: Failed to find a sensor
[   96.169537][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.177538][ T1345] ALi m5602 3-1:0.0: ALi m5602 webcam failed
[   96.183506][ T5152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.190406][ T4263] usb 2-1: Manufacturer: syz
[   96.198021][ T4263] usb 2-1: SerialNumber: syz
[   96.217991][ T1345] usb 3-1: USB disconnect, device number 6
[   96.258406][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.283982][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.302762][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.319994][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.336533][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.347510][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.364783][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.382070][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.398303][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.418308][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.430939][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.442235][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.452878][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.463969][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.475962][ T5152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.491418][ T5152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.555808][ T4263] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   96.591030][ T4263] usb 2-1: unit 3 not found!
[   96.595678][ T4263] usb 2-1: unit 13 not found!
[   96.643799][ T4263] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8213 device_setup=1 to enable and report any issues to g@b4.vu
[   96.780598][ T4263] usb 2-1: USB disconnect, device number 4
[   97.134970][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.157435][ T5194] Disabled LAPIC found during irq injection
[   97.742165][ T5236] loop5: detected capacity change from 0 to 128
[   97.780834][ T5236] EXT4-fs (loop5): inline encryption not supported
[   97.833250][ T5236] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,resuid=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x0000000000000001,,errors=continue. Quota mode: none.
[   97.833372][ T5236] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   98.032964][ T5236] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[   98.400917][ T1111] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   98.448502][ T5273] loop0: detected capacity change from 0 to 4096
[   98.482730][ T5278] vivid-004: =================  START STATUS  =================
[   98.501443][ T5278] vivid-004: Radio HW Seek Mode: Bounded
[   98.519178][ T5278] vivid-004: Radio Programmable HW Seek: false
[   98.531324][ T5278] vivid-004: RDS Rx I/O Mode: Block I/O
[   98.558131][ T5278] vivid-004: Generate RBDS Instead of RDS: false
[   98.566547][ T5273] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   98.567430][ T5278] vivid-004: RDS Reception: true
[   98.598767][ T5278] vivid-004: RDS Program Type: 0 inactive
[   98.641270][ T4772] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   98.734280][ T5267] loop1: detected capacity change from 0 to 40427
[   98.743288][ T5278] vivid-004: RDS PS Name:  inactive
[   98.758471][ T5267] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   98.771775][ T1111] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   98.781444][ T5267] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   98.789452][ T5281] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.209: Invalid inode bitmap blk 3926993421582929039 in block_group 0
[   98.792203][ T5278] vivid-004: RDS Radio Text: 
[   98.804966][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.828938][ T1111] usb 4-1: config 0 descriptor??
[   98.834346][ T5267] F2FS-fs (loop1): invalid crc value
[   98.842380][ T5278]  inactive
[   98.845533][ T5278] vivid-004: RDS Traffic Announcement: false inactive
[   98.854653][ T5278] vivid-004: RDS Traffic Program: false inactive
[   98.861148][ T5278] vivid-004: RDS Music: false inactive
[   98.866843][ T5278] vivid-004: ==================  END STATUS  ==================
[   98.877941][ T1111] cp210x 4-1:0.0: cp210x converter detected
[   98.887370][ T5267] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   98.900787][ T4772] usb 6-1: Using ep0 maxpacket: 32
[   99.020942][ T4772] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   99.040393][ T4772] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[   99.074015][ T4772] usb 6-1: config 0 has no interface number 0
[   99.092548][ T4772] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   99.113620][ T4772] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[   99.123951][ T5267] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   99.131835][ T5267] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   99.150932][ T4772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.174852][ T4772] usb 6-1: config 0 descriptor??
[   99.201773][   T26] audit: type=1800 audit(1782169066.547:4): pid=5267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.208" name="file1" dev="loop1" ino=10 res=0 errno=0
[   99.224451][ T4772] usbhid 6-1:0.1: couldn't find an input interrupt endpoint
[   99.228870][ T5288] loop0: detected capacity change from 0 to 2048
[   99.241638][ T5267] attempt to access beyond end of device
[   99.241638][ T5267] loop1: rw=10241, want=53256, limit=40427
[   99.311093][ T1111] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   99.338920][ T5267] attempt to access beyond end of device
[   99.338920][ T5267] loop1: rw=34817, want=77952, limit=40427
[   99.360294][ T5267] attempt to access beyond end of device
[   99.360294][ T5267] loop1: rw=0, want=77832, limit=40427
[   99.384631][ T5288] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   99.385452][ T1111] usb 4-1: cp210x converter now attached to ttyUSB0
[   99.462260][ T4190] attempt to access beyond end of device
[   99.462260][ T4190] loop1: rw=2049, want=45104, limit=40427
[   99.568155][ T1111] usb 6-1: USB disconnect, device number 5
[   99.604783][ T5294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.633895][ T4263] usb 4-1: USB disconnect, device number 4
[   99.645466][ T5288] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   99.663900][ T4263] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   99.680983][ T5288] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 262 with error 28
[   99.707803][ T5288] EXT4-fs (loop0): This should not happen!! Data will be lost
[   99.707803][ T5288] 
[   99.719984][ T5288] EXT4-fs (loop0): Total free blocks count 0
[   99.727682][ T4263] cp210x 4-1:0.0: device disconnected
[   99.760781][ T5288] EXT4-fs (loop0): Free/Dirty block details
[   99.774730][ T5288] EXT4-fs (loop0): free_blocks=66060288
[   99.787469][ T5288] EXT4-fs (loop0): dirty_blocks=272
[   99.797660][ T5288] EXT4-fs (loop0): Block reservation details
[   99.808997][ T5288] EXT4-fs (loop0): i_reserved_data_blocks=17
[   99.943609][ T5299] xt_hashlimit: size too large, truncated to 1048576
[  100.140513][ T5302] Disabled LAPIC found during irq injection
[  100.338288][ T5312] loop0: detected capacity change from 0 to 128
[  100.992041][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.011320][ T5312] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  101.189028][ T5312] EXT4-fs (loop0): shut down requested (1)
[  101.228745][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.240227][ T5312] fscrypt (loop0, inode 12): Error -5 getting encryption context
[  101.278097][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  101.323609][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  101.458382][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.478219][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.489216][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.507929][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.530275][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.562131][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.573220][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.585925][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.600447][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.614964][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.633003][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.655962][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.704923][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.737103][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.758734][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.776141][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.963004][ T5343] loop4: detected capacity change from 0 to 7
[  101.998077][ T5343]  loop4:
[  102.008017][ T5343] loop4: partition table partially beyond EOD, truncated
[  102.205522][ T5347] tipc: Started in network mode
[  102.230294][ T5347] tipc: Node identity b6e48fea83be, cluster identity 4711
[  102.260135][ T5347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.406896][ T5348] device syzkaller0 entered promiscuous mode
[  102.490092][ T5352] block device autoloading is deprecated and will be removed.
[  102.540545][ T5346] tipc: Resetting bearer <eth:syzkaller0>
[  102.656951][ T5346] tipc: Disabling bearer <eth:syzkaller0>
[  103.860166][ T5365] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  103.868638][ T5366] kvm: pic: level sensitive irq not supported
[  103.870278][ T5366] kvm: pic: non byte read
[  103.911130][ T5366] kvm: pic: level sensitive irq not supported
[  103.911215][ T5366] kvm: pic: non byte read
[  103.926493][ T5366] kvm: pic: level sensitive irq not supported
[  103.926550][ T5366] kvm: pic: non byte read
[  103.938754][ T5366] kvm: pic: level sensitive irq not supported
[  103.938808][ T5366] kvm: pic: non byte read
[  103.957637][ T1111] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  103.966605][ T5366] kvm: pic: level sensitive irq not supported
[  103.966661][ T5366] kvm: pic: non byte read
[  103.982624][ T5366] kvm: pic: level sensitive irq not supported
[  103.982681][ T5366] kvm: pic: non byte read
[  103.994439][ T5366] kvm: pic: level sensitive irq not supported
[  103.994494][ T5366] kvm: pic: non byte read
[  104.006704][ T5366] kvm: pic: level sensitive irq not supported
[  104.006768][ T5366] kvm: pic: non byte read
[  104.019340][ T5366] kvm: pic: level sensitive irq not supported
[  104.019395][ T5366] kvm: pic: non byte read
[  104.031042][ T5366] kvm: pic: level sensitive irq not supported
[  104.031099][ T5366] kvm: pic: non byte read
[  104.250839][ T5172] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  104.320948][ T1111] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  104.333103][ T1111] usb 6-1: config 0 has no interface number 0
[  104.370395][ T5383] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  104.396769][ T5386] input: syz1 as /devices/virtual/input/input9
[  104.503101][ T1111] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  104.512778][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.521726][ T1111] usb 6-1: Product: syz
[  104.525936][ T1111] usb 6-1: Manufacturer: syz
[  104.531354][ T1111] usb 6-1: SerialNumber: syz
[  104.537897][ T1111] usb 6-1: config 0 descriptor??
[  104.662678][ T1111] usb 6-1: selecting invalid altsetting 1
[  104.668869][ T5172] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.668999][ T1111] dvb_ttusb_budget: ttusb_init_controller: error
[  104.687031][ T1111] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  104.717281][ T5172] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  105.100906][ T4178] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  105.327670][ T1111] DVB: Unable to find symbol stv0299_attach()
[  105.327670][ T5172] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  105.484153][ T1111] DVB: Unable to find symbol tda8083_attach()
[  105.498531][ T1111] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  105.521219][ T4178] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  105.542171][ T1111] usb 6-1: USB disconnect, device number 6
[  105.568721][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.586510][ T5172] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  105.614552][ T5172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.615996][ T4178] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.635711][ T5172] usb 1-1: Product: syz
[  105.660482][ T4178] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  105.662144][ T5172] usb 1-1: Manufacturer: syz
[  105.690708][ T5172] usb 1-1: SerialNumber: syz
[  105.751041][ T4178] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  105.767455][ T4178] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  105.776642][ T4178] usb 2-1: Manufacturer: syz
[  105.806774][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'.
[  105.814464][ T4178] usb 2-1: config 0 descriptor??
[  105.919350][ T5412] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  106.197022][ T5370] netlink: 188 bytes leftover after parsing attributes in process `syz.0.238'.
[  106.325428][ T4178] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[  106.343758][ T4178] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[  106.378141][ T4178] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  106.402681][ T5419] loop3: detected capacity change from 0 to 32768
[  106.609217][   T26] audit: type=1800 audit(1782169073.947:5): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.257" name="file1" dev="loop3" ino=8 res=0 errno=0
[  106.891009][ T5172] cdc_ncm 1-1:1.0: bind() failure
[  106.911037][ T5172] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  106.940884][ T5172] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  106.980980][ T5172] usbtest: probe of 1-1:1.1 failed with error -71
[  106.994208][ T4232] usb 2-1: USB disconnect, device number 5
[  107.003297][ T5172] usb 1-1: USB disconnect, device number 6
[  107.567792][ T5441] loop1: detected capacity change from 0 to 128
[  107.651815][ T5441] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  107.718620][ T5441] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  107.730218][ T5441] FAT-fs (loop1): Filesystem has been set read-only
[  107.762696][ T4190] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  107.950778][ T4178] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.025574][ T5458] mtd partition "" doesn't have enough space: 0x20003 < 0x8000084bb, disabled
[  108.052146][ T5458] ftl_cs: FTL header not found.
[  108.131624][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.190771][ T4178] usb 4-1: Using ep0 maxpacket: 32
[  108.310861][ T4178] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  108.330768][ T4178] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  108.350782][ T4178] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  108.380741][ T4178] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  108.396848][ T4178] usb 4-1: config 0 interface 0 has no altsetting 0
[  108.490947][ T1111] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  108.502795][ T1111] usb 2-1: config 0 has no interface number 0
[  108.511124][ T1111] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.529354][ T1111] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.540378][ T1111] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.554084][ T1111] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  108.564444][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.573460][ T4178] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  108.584472][ T4178] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  108.596730][ T1111] usb 2-1: config 0 descriptor??
[  108.602597][ T4178] usb 4-1: Product: syz
[  108.606979][ T4178] usb 4-1: Manufacturer: syz
[  108.614070][ T4178] usb 4-1: SerialNumber: syz
[  108.640514][ T4178] usb 4-1: config 0 descriptor??
[  108.692354][ T4178] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  108.725629][ T4178] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  108.756342][ T5473] loop0: detected capacity change from 0 to 256
[  108.828342][ T5473] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f516b14, utbl_chksum : 0xe619d30d)
[  109.010847][ T5172] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  109.058080][ T5171] usb 4-1: USB disconnect, device number 5
[  109.067666][ T5474] ld_usb_open - error, can't find device for minor 0
[  109.077714][ T5447] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  109.129350][ T5171] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  109.292008][ T5172] usb 3-1: Using ep0 maxpacket: 32
[  109.301039][ T1111] uclogic 0003:28BD:0042.0005: failed retrieving string descriptor #100: -71
[  109.320429][ T1111] uclogic 0003:28BD:0042.0005: failed retrieving pen parameters: -71
[  109.329904][ T5477] loop3: detected capacity change from 0 to 512
[  109.346033][ T1111] uclogic 0003:28BD:0042.0005: pen probing failed: -71
[  109.355530][ T1111] uclogic 0003:28BD:0042.0005: failed probing parameters: -71
[  109.369031][ T1111] uclogic: probe of 0003:28BD:0042.0005 failed with error -71
[  109.383104][ T1111] usb 2-1: USB disconnect, device number 6
[  109.442639][ T5172] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  109.498244][ T5172] usb 3-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  109.529574][ T5172] usb 3-1: config 0 has no interface number 0
[  109.544677][ T5172] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  109.594841][ T5172] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  109.617996][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.632445][ T5172] usb 3-1: config 0 descriptor??
[  109.672438][ T5484] input: syz0 as /devices/virtual/input/input10
[  109.700968][ T5172] usbhid 3-1:0.1: couldn't find an input interrupt endpoint
[  109.880693][ T4197] syz-executor (4197) used greatest stack depth: 21104 bytes left
[  109.977958][ T5172] usb 3-1: USB disconnect, device number 7
[  110.124506][ T5493] loop1: detected capacity change from 0 to 512
[  110.226611][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  110.275763][ T5493] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.503805][ T5500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.647056][ T5500] device syzkaller0 entered promiscuous mode
[  110.765217][ T5499] tipc: Resetting bearer <eth:syzkaller0>
[  110.785935][ T5494] loop3: detected capacity change from 0 to 32768
[  110.864946][ T5499] tipc: Disabling bearer <eth:syzkaller0>
[  110.915833][ T5494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.285 (5494)
[  110.978352][ T5494] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  110.995878][ T5494] BTRFS info (device loop3): using free space tree
[  111.050136][ T5494] BTRFS info (device loop3): has skinny extents
[  111.118377][ T5517] loop1: detected capacity change from 0 to 512
[  111.374985][ T5517] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.970187][ T5517] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,init_itable,user_xattr,nodiscard,dioread_nolock,,errors=continue. Quota mode: writeback.
[  111.986866][ T5517] ext4 filesystem being mounted at /46/file7 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.059100][ T4832] udevd[4832]: incorrect ext4 checksum on /dev/loop1
[  112.073051][ T5501] chnl_net:caif_netlink_parms(): no params data found
[  112.081378][ T4832] udevd[4832]: incorrect ext4 checksum on /dev/loop1
[  112.081398][ T5517] EXT4-fs error (device loop1): ext4_dx_csum_verify:502: inode #2: comm syz.1.292: dir seems corrupt?  Run e2fsck -D.
[  112.096243][ T5542] loop5: detected capacity change from 0 to 7
[  112.109480][ T5517] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.292: Directory index failed checksum
[  112.165412][ T4832]  loop5:
[  112.168413][ T4832] loop5: partition table partially beyond EOD, truncated
[  112.263691][ T5494] BTRFS info (device loop3): enabling ssd optimizations
[  112.301167][ T5542]  loop5:
[  112.304412][ T5542] loop5: partition table partially beyond EOD, truncated
[  112.429157][ T5501] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.447886][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.459266][ T5501] device bridge_slave_0 entered promiscuous mode
[  112.503773][ T5501] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.521729][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.548312][ T5501] device bridge_slave_1 entered promiscuous mode
[  112.704381][ T5171] Bluetooth: hci3: command 0x0409 tx timeout
[  112.711653][ T5501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.777705][ T5501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.795571][    T9] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  112.946220][ T5501] team0: Port device team_slave_0 added
[  113.038351][ T5501] team0: Port device team_slave_1 added
[  113.136128][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.191661][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.287655][ T5501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.370340][ T5501] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.422288][ T5501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.564455][ T5501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.839390][ T5501] device hsr_slave_0 entered promiscuous mode
[  113.858603][ T5501] device hsr_slave_1 entered promiscuous mode
[  113.929948][ T5501] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.950622][ T5501] Cannot create hsr debugfs directory
[  114.104216][ T5572] loop5: detected capacity change from 0 to 32768
[  114.183346][ T5572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.298 (5572)
[  114.235660][ T5572] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  114.326565][ T5572] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  114.358135][ T5572] BTRFS info (device loop5): use zstd compression, level 3
[  114.371530][ T5572] BTRFS info (device loop5): turning on async discard
[  114.378341][ T5572] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  114.416440][ T5501] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  114.449519][ T5572] BTRFS info (device loop5): trying to use backup root at mount time
[  114.472763][ T5501] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  114.524144][ T5501] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  114.551405][ T5572] BTRFS info (device loop5): enabling auto defrag
[  114.559181][ T5572] BTRFS info (device loop5): using free space tree
[  114.592252][ T5501] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  114.606185][ T5572] BTRFS info (device loop5): has skinny extents
[  114.677178][ T5599] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  114.701125][ T5599] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  114.771055][ T4230] Bluetooth: hci3: command 0x041b tx timeout
[  114.830924][ T1111] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  114.858605][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.873785][ T4307] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  114.879326][ T5501] 8021q: adding VLAN 0 to HW filter on device team0
[  114.895941][ T5572] BTRFS warning (device loop5): failed to read root (objectid=2): -5
[  114.927691][ T4305] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0xc092cdc2 level 0
[  114.970873][ T5572] BTRFS warning (device loop5): couldn't read tree root
[  114.985772][ T5572] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7
[  115.017977][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.037912][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.047046][ T5572] BTRFS warning (device loop5): couldn't read tree root
[  115.060997][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.070819][ T1111] usb 2-1: Using ep0 maxpacket: 32
[  115.091852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.115311][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.123519][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.132383][ T5572] BTRFS info (device loop5): enabling ssd optimizations
[  115.158013][ T5572] BTRFS info (device loop5): clearing free space tree
[  115.180118][ T5572] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.195436][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.215392][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.221045][ T1111] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  115.230822][ T5572] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  115.251841][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.260859][ T1111] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  115.277805][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.285110][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.304099][ T1111] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  115.347461][ T1111] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  115.361119][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.370731][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0
[  115.409573][ T5572] BTRFS info (device loop5): creating free space tree
[  115.424162][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  115.433627][ T5572] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  115.451819][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  115.466284][ T5572] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  115.487287][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  115.503845][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.541449][ T1111] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  115.548597][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.574488][ T1111] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  115.581988][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.603654][ T1111] usb 2-1: Product: syz
[  115.611561][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.623289][ T1111] usb 2-1: Manufacturer: syz
[  115.631718][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.656436][ T1111] usb 2-1: SerialNumber: syz
[  115.657510][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.682407][ T5501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.716005][ T1111] usb 2-1: config 0 descriptor??
[  115.733542][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  115.772304][ T1111] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  115.821720][ T1111] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  115.895598][ T4239] BTRFS info (device loop5): space_info 5 has 126976 free, is not full
[  115.905085][ T4239] BTRFS info (device loop5): space_info total=3276800, used=32768, pinned=0, reserved=8192, may_use=3108864, readonly=0 zone_unusable=0
[  115.920235][ T4239] BTRFS info (device loop5): global_block_rsv: size 851968 reserved 851968
[  115.930885][ T4239] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0
[  115.939460][ T4239] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0
[  115.949447][ T4239] BTRFS info (device loop5): delayed_block_rsv: size 0 reserved 0
[  115.959419][ T4239] BTRFS info (device loop5): delayed_refs_rsv: size 262144 reserved 126976
[  115.983623][ T5625] loop3: detected capacity change from 0 to 40427
[  116.065198][ T5625] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  116.091464][ T5625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  116.234739][ T5625] F2FS-fs (loop3): invalid crc value
[  116.246888][ T5171] usb 2-1: USB disconnect, device number 7
[  116.261134][    C1] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  116.267990][ T5606] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  116.293791][ T5171] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  116.301792][ T5501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.308892][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.339193][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.346486][ T5625] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  116.570063][ T5625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  116.590914][ T5625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  116.833712][ T5625] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  116.900741][ T5663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'.
[  116.924739][ T5625] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  116.981495][ T5666] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  117.038278][ T5625] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  117.071875][ T5625] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  117.120591][ T5625] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  117.179462][ T4233] Bluetooth: hci3: command 0x040f tx timeout
[  117.279529][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  117.306752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  117.358034][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.385105][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.401263][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.431143][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.447136][ T5501] device veth0_vlan entered promiscuous mode
[  117.482302][ T5501] device veth1_vlan entered promiscuous mode
[  117.574889][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.603048][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.632439][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.671574][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.698865][ T5501] device veth0_macvtap entered promiscuous mode
[  117.725891][ T5501] device veth1_macvtap entered promiscuous mode
[  117.752414][ T5169] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.757684][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.783306][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.819297][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.834080][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.845692][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.859959][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.870436][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.883239][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.897910][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.909718][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.923948][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.934487][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.961552][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.979613][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.004867][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.021345][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.033807][ T5169] usb 3-1: Using ep0 maxpacket: 32
[  118.040187][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.059834][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.071627][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.122386][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.158177][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.179790][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.199204][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.210593][ T5501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.235340][ T5501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.250463][ T5501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.270500][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.292182][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.333453][ T5501] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.346789][ T5501] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.357671][ T5169] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  118.376569][ T5169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.389525][ T5501] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.399530][ T5169] usb 3-1: Product: syz
[  118.421640][ T5169] usb 3-1: Manufacturer: syz
[  118.428281][ T5169] usb 3-1: SerialNumber: syz
[  118.433856][ T5501] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.455012][ T5169] usb 3-1: config 0 descriptor??
[  118.521007][ T5169] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  118.640626][ T5701] loop3: detected capacity change from 0 to 8192
[  118.669612][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.679039][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.694211][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.705622][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.715764][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.730195][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.750725][ T5701] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  118.761819][ T5701] REISERFS (device loop3): using ordered data mode
[  118.781191][ T5701] reiserfs: using flush barriers
[  118.814093][ T5701] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  118.841926][ T5701] REISERFS (device loop3): checking transaction log (loop3)
[  118.951056][ T4233] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  119.022887][ T5701] REISERFS (device loop3): Using tea hash to sort names
[  119.045845][ T5701] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  119.252117][ T5668] Bluetooth: hci3: command 0x0419 tx timeout
[  119.348202][ T5719] loop1: detected capacity change from 0 to 32768
[  119.353012][ T1111] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  119.376980][ T5719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.334 (5719)
[  119.426246][ T5719] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  119.442365][ T5719] BTRFS info (device loop1): force clearing of disk cache
[  119.454260][ T5719] BTRFS info (device loop1): turning off barriers
[  119.470239][ T5719] BTRFS info (device loop1): use no compression
[  119.476933][ T5719] BTRFS info (device loop1): disabling free space tree
[  119.484488][ T5719] BTRFS info (device loop1): enabling ssd optimizations
[  119.492376][ T5719] BTRFS info (device loop1): using spread ssd allocation scheme
[  119.500410][ T5719] BTRFS info (device loop1): not using ssd optimizations
[  119.508585][ T5719] BTRFS info (device loop1): not using spread ssd allocation scheme
[  119.517198][ T5719] BTRFS info (device loop1): has skinny extents
[  119.531706][ T4233] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  119.551399][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.584309][ T4233] usb 6-1: Product: syz
[  119.602044][ T4233] usb 6-1: Manufacturer: syz
[  119.609649][ T4233] usb 6-1: SerialNumber: syz
[  119.638970][ T4233] usb 6-1: config 0 descriptor??
[  119.669463][ T5719] BTRFS info (device loop1): clearing free space tree
[  119.676877][ T5719] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.686662][ T5719] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  119.732687][ T1111] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  119.733949][ T5719] BTRFS info (device loop1): checking UUID tree
[  119.745778][ T1111] usb 7-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44
[  119.763418][ T1111] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.775404][ T1111] usb 7-1: config 0 descriptor??
[  119.805898][ T5742] binder: 5741:5742 ioctl c0306201 200000000080 returned -14
[  119.818287][ T5742] binder: 5741:5742 ioctl c0306201 2000000003c0 returned -14
[  119.823180][ T1111] pwc: Samsung MPC-C30 USB webcam detected.
[  119.898578][ T5744] binder: 5743:5744 ioctl c0306201 200000000080 returned -14
[  119.918306][ T4233] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  119.919263][ T5744] binder: 5743:5744 ioctl c0306201 2000000003c0 returned -14
[  120.033215][ T1111] pwc: send_video_command error -71
[  120.053003][ T1111] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  120.078256][ T1111] Philips webcam: probe of 7-1:0.0 failed with error -71
[  120.095160][ T1111] usb 7-1: USB disconnect, device number 2
[  120.672315][ T5169] gspca_ov534_9: reg_r err -71
[  121.030925][ T5169] gspca_ov534_9: Unknown sensor 0000
[  121.031032][ T5169] ov534_9: probe of 3-1:0.0 failed with error -22
[  121.056280][ T5169] usb 3-1: USB disconnect, device number 8
[  121.160876][ T5172] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  121.194365][ T5777] loop3: detected capacity change from 0 to 32768
[  121.240419][ T5777] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.348 (5777)
[  121.280489][ T5777] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  121.291381][ T5777] BTRFS info (device loop3): using free space tree
[  121.299565][ T5777] BTRFS info (device loop3): has skinny extents
[  121.355287][ T5777] BTRFS info (device loop3): enabling ssd optimizations
[  121.460858][ T5777] loop3: detected capacity change from 32768 to 0
[  121.597393][ T5172] usb 2-1: config 0 has no interfaces?
[  121.777164][ T5172] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  121.797365][ T5172] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  121.811637][ T4233] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  121.821105][ T5172] usb 2-1: Product: syz
[  121.826151][ T5172] usb 2-1: Manufacturer: syz
[  121.886505][ T4233] usb 6-1: USB disconnect, device number 7
[  121.893053][ T5172] usb 2-1: config 0 descriptor??
[  122.226062][ T4765] usb 2-1: USB disconnect, device number 8
[  122.612697][ T5818] process 'syz.3.355' launched './file0' with NULL argv: empty string added
[  122.840950][ T5827] input: syz0 as /devices/virtual/input/input11
[  123.443497][ T4765] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  123.564787][ T5832] loop1: detected capacity change from 0 to 32768
[  123.712470][ T4765] usb 3-1: Using ep0 maxpacket: 32
[  123.759019][ T5846] UFO tlock:0xffffc900028e25a0
[  123.823981][ T5832] UFO tlock:0xffffc900028e22d0
[  123.831896][ T4765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.846002][ T4765] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.859331][ T5832] UFO tlock:0xffffc900028e2168
[  123.865764][ T4765] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.040906][ T4765] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  124.065391][ T4765] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  124.088699][ T4765] usb 3-1: Product: syz
[  124.100120][ T4765] usb 3-1: Manufacturer: syz
[  124.111945][ T4765] usb 3-1: SerialNumber: syz
[  124.185442][ T4765] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12
[  124.449711][ T4232] usb 3-1: USB disconnect, device number 9
[  124.473154][ T4232] appletouch 3-1:1.0: input: appletouch disconnected
[  124.650399][ T4765] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  124.759404][ T4305] Bluetooth: hci5: Frame reassembly failed (-84)
[  124.858811][ T4468] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  124.911013][ T4765] usb 7-1: Using ep0 maxpacket: 16
[  125.031117][ T4765] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  125.044326][ T4765] usb 7-1: config 0 has no interface number 0
[  125.050633][ T4765] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  125.062904][ T4765] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  125.072156][ T5860] loop3: detected capacity change from 0 to 32768
[  125.133757][ T5860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.372 (5860)
[  125.167216][ T5860] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  125.177965][ T5860] BTRFS info (device loop3): setting nodatasum
[  125.184887][ T5860] BTRFS info (device loop3): force zlib compression, level 3
[  125.194843][ T5860] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  125.205560][ T5860] BTRFS info (device loop3): use lzo compression, level 0
[  125.214778][ T5860] BTRFS info (device loop3): turning on flush-on-commit
[  125.226699][ T5860] BTRFS info (device loop3): enabling auto defrag
[  125.235992][ T4765] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  125.244651][ T5865] Disabled LAPIC found during irq injection
[  125.247164][ T4468] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  125.270173][ T4765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.286601][ T5860] BTRFS info (device loop3): max_inline at 4096
[  125.294124][ T5860] BTRFS info (device loop3): using free space tree
[  125.301530][ T5860] BTRFS info (device loop3): has skinny extents
[  125.305751][ T4468] usb 6-1: config 0 has no interface number 0
[  125.315662][ T4765] usb 7-1: Product: syz
[  125.320490][ T4765] usb 7-1: Manufacturer: syz
[  125.332681][ T4468] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  125.348389][ T4765] usb 7-1: SerialNumber: syz
[  125.356573][ T4468] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  125.370330][ T4468] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  125.380561][ T4765] usb 7-1: config 0 descriptor??
[  125.386495][ T4468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.401043][ T5854] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.415196][ T5854] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.426019][ T4468] usb 6-1: config 0 descriptor??
[  125.451070][ T5856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  125.476787][ T4468] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  125.528299][ T5860] BTRFS info (device loop3): enabling ssd optimizations
[  125.590280][ T5889] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  125.649998][ T5854] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.713641][ T5854] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  125.991532][ T4765] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  126.751728][ T4468] usb 6-1: USB disconnect, device number 8
[  126.771179][ T4772] Bluetooth: hci5: command 0x1003 tx timeout
[  126.782578][ T4204] Bluetooth: hci5: sending frame failed (-49)
[  127.677288][ T5908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.748327][ T4765] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  127.763799][ T4765] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  127.780879][ T4765] asix: probe of 7-1:0.34 failed with error -71
[  127.818445][ T4765] usb 7-1: USB disconnect, device number 3
[  127.922452][ T5912] loop5: detected capacity change from 0 to 32768
[  127.955870][ T5912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.383 (5912)
[  127.987047][ T5912] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  127.998323][ T5912] BTRFS info (device loop5): metadata ratio 0
[  128.006070][ T5912] BTRFS info (device loop5): turning on sync discard
[  128.013943][ T5912] BTRFS info (device loop5): using free space tree
[  128.021620][ T5912] BTRFS info (device loop5): has skinny extents
[  128.053593][ T5912] BTRFS info (device loop5): enabling ssd optimizations
[  128.869950][ T4768] Bluetooth: hci5: command 0x1001 tx timeout
[  128.886261][ T4204] Bluetooth: hci5: sending frame failed (-49)
[  129.890863][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  130.123604][ T5990] overlayfs: failed to clone upperpath
[  130.317859][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'.
[  130.331438][ T4233] usb 4-1: config 0 has no interfaces?
[  130.375542][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.408'.
[  130.531725][ T4233] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  130.551428][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.574394][ T4233] usb 4-1: Product: syz
[  130.588090][ T4233] usb 4-1: Manufacturer: syz
[  130.601124][ T4233] usb 4-1: SerialNumber: syz
[  130.616293][ T4233] usb 4-1: config 0 descriptor??
[  130.754083][ T6004] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  130.762457][ T6004] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  130.930914][ T4768] Bluetooth: hci5: command 0x1009 tx timeout
[  131.569355][ T4233] usb 4-1: USB disconnect, device number 6
[  131.809288][ T6032] loop5: detected capacity change from 0 to 8192
[  131.858402][ T6032] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  131.891972][ T6032] REISERFS (device loop5): using ordered data mode
[  131.912650][ T6032] reiserfs: using flush barriers
[  131.935453][ T6032] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  131.990008][ T6032] REISERFS (device loop5): checking transaction log (loop5)
[  132.021304][ T6032] REISERFS (device loop5): Using r5 hash to sort names
[  132.048680][ T6032] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  132.348637][ T6042] input: syz1 as /devices/virtual/input/input13
[  132.783028][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  133.059273][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.069884][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.523623][   T26] audit: type=1326 audit(1782169100.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.2.433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b05b21e59 code=0x0
[  133.715299][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.768229][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.966234][ T6047] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.977262][ T6047] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.990983][ T6047] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.000311][ T6047] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.105431][ T6047] syz.3.422 (6047) used greatest stack depth: 20880 bytes left
[  135.119188][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.160934][ T4230] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  135.164612][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.195554][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.206643][ T6063] device bridge_slave_0 left promiscuous mode
[  135.215261][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.227875][ T6063] device bridge_slave_1 left promiscuous mode
[  135.237465][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.248435][ T6063] bond0: (slave bond_slave_0): Releasing backup interface
[  135.269481][ T6063] bond0: (slave bond_slave_1): Releasing backup interface
[  135.351639][ T6063] team0: Port device team_slave_0 removed
[  135.467981][ T6063] team0: Port device team_slave_1 removed
[  135.475187][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.483835][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.496389][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.505600][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.550328][ T6068] team0: Port device xfrm0 added
[  135.562326][ T6070] tipc: Started in network mode
[  135.567520][ T6070] tipc: Node identity 6e5531fed0c2, cluster identity 4711
[  135.587039][ T6070] tipc: Enabled bearer <eth:team0>, priority 0
[  135.636009][ T6068] syz.2.426 (6068) used greatest stack depth: 20592 bytes left
[  135.741598][ T4230] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  135.773536][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.790817][ T4230] usb 6-1: Product: syz
[  135.803147][ T4230] usb 6-1: Manufacturer: syz
[  135.810171][ T4230] usb 6-1: SerialNumber: syz
[  135.818937][ T4230] usb 6-1: config 0 descriptor??
[  135.882882][ T4230] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  136.022779][ T6110] loop3: detected capacity change from 0 to 512
[  136.072193][ T6110] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.186007][ T6110] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.437: Allocating blocks 41-42 which overlap fs metadata
[  136.298364][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.336281][ T6110] Quota error (device loop3): write_blk: dquota write failed
[  136.347876][ T6110] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  136.376926][ T6110] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.437: Allocating blocks 41-42 which overlap fs metadata
[  136.399528][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.407373][ T6110] Quota error (device loop3): write_blk: dquota write failed
[  136.423712][ T6110] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  136.455158][ T6110] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.437: Failed to acquire dquot type 1
[  136.477128][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.495294][ T6110] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  136.524001][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.539856][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.437: corrupted inode contents
[  136.558831][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.566275][ T6110] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #12: comm syz.3.437: mark_inode_dirty error
[  136.585632][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.595129][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.437: corrupted inode contents
[  136.615639][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.625564][ T6110] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.437: mark_inode_dirty error
[  136.645508][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.655349][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.437: corrupted inode contents
[  136.680322][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.687534][ T6110] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  136.705311][ T4232] tipc: Node number set to 3197579774
[  136.721534][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.728545][ T6110] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.437: corrupted inode contents
[  136.750014][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.757258][ T6110] EXT4-fs error (device loop3): ext4_truncate:4286: inode #12: comm syz.3.437: mark_inode_dirty error
[  136.781263][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.789047][ T6110] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  136.809264][ T6110] EXT4-fs (loop3): Remounting filesystem read-only
[  136.818153][ T6110] EXT4-fs (loop3): 1 truncate cleaned up
[  136.830443][ T6110] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,max_dir_size_kb=0x0000000000000006,resgid=0x00000000000000002. Quota mode: writeback.
[  137.080081][ T6128] loop6: detected capacity change from 0 to 40427
[  137.113863][ T6128] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x1ffff
[  137.162312][ T6128] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  137.228308][ T6128] F2FS-fs (loop6): invalid crc value
[  137.434499][ T6128] F2FS-fs (loop6): Found nat_bits in checkpoint
[  138.006354][ T6128] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  138.050887][ T4230] gspca_stk1135: reg_w 0x203 err -71
[  138.065322][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.070914][ T6128] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  138.119554][ T4230] gspca_stk1135: Sensor write failed
[  138.131144][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.158060][ T4230] gspca_stk1135: Sensor write failed
[  138.164834][ T6128] F2FS-fs (loop6) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  138.207844][ T6128] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580
[  138.267836][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.282479][ T4230] gspca_stk1135: Sensor read failed
[  138.291860][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.304928][ T4230] gspca_stk1135: Sensor read failed
[  138.310280][ T4230] gspca_stk1135: Detected sensor type unknown (0x0)
[  138.324229][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.339794][ T4230] gspca_stk1135: Sensor read failed
[  138.346596][ T6128] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580
[  138.351997][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.388524][ T4230] gspca_stk1135: Sensor read failed
[  138.395135][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.408440][ T4230] gspca_stk1135: Sensor write failed
[  138.415773][ T4230] gspca_stk1135: serial bus timeout: status=0x00
[  138.447499][ T4230] gspca_stk1135: Sensor write failed
[  138.459387][ T4230] stk1135: probe of 6-1:0.0 failed with error -71
[  138.485429][ T4230] usb 6-1: USB disconnect, device number 9
[  138.572949][ T5501] attempt to access beyond end of device
[  138.572949][ T5501] loop6: rw=2049, want=45112, limit=40427
[  139.256707][ T6172] loop1: detected capacity change from 0 to 4096
[  139.293282][ T6172] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  139.305522][ T6172] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  139.328762][ T6172] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  139.355169][ T6172] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  139.370712][ T6172] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  139.450782][ T5170] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  139.491414][ T6172] ntfs: volume version 3.1.
[  139.514122][ T6172] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  139.526637][ T6172] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  139.547586][ T6172] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  139.563125][ T6172] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  139.575993][ T6172] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  139.811146][ T5170] usb 7-1: config 0 has no interfaces?
[  139.973167][ T5170] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  139.988350][ T5170] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.997350][ T5170] usb 7-1: Product: syz
[  140.009417][ T5170] usb 7-1: Manufacturer: syz
[  140.014461][ T5170] usb 7-1: SerialNumber: syz
[  140.028573][ T5170] usb 7-1: config 0 descriptor??
[  140.312686][ T5170] usb 7-1: USB disconnect, device number 4
[  140.428161][ T6218] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  140.958618][ T6236] device syzkaller0 entered promiscuous mode
[  140.972797][ T5170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.985584][ T6236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.471399][ T6242] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.770972][ T4232] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  142.036515][ T4232] usb 2-1: Using ep0 maxpacket: 16
[  142.060621][ T6260] overlayfs: failed to clone upperpath
[  142.084819][ T6260] overlayfs: failed to clone upperpath
[  142.181068][ T4232] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  142.198792][ T4232] usb 2-1: config 0 has no interface number 0
[  142.210876][ T4232] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  142.243838][ T4232] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  142.661658][ T4232] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  142.686788][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.766295][ T4232] usb 2-1: Product: syz
[  142.816110][ T4232] usb 2-1: Manufacturer: syz
[  142.862721][ T4232] usb 2-1: SerialNumber: syz
[  143.070954][ T4232] usb 2-1: config 0 descriptor??
[  143.161898][ T6247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.168986][ T6247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.708962][ T6247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.794047][ T6247] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  144.094485][ T4232] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  144.235337][ T6283] ODEBUG: Out of memory. ODEBUG disabled
[  144.751817][ T6307] binder: 6306:6307 unknown command 0
[  144.766226][ T6307] binder: 6306:6307 ioctl c0306201 200000000080 returned -22
[  145.610870][ T4230] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  145.843867][ T4232] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  145.964482][ T4232] asix: probe of 2-1:0.34 failed with error -71
[  145.980753][ T4232] usb 2-1: USB disconnect, device number 9
[  146.004163][ T4230] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  146.012660][ T4230] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  146.694697][ T4230] usb 4-1: config 220 has no interface number 2
[  146.775200][ T4230] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  146.788740][ T4230] usb 4-1: config 220 interface 0 has no altsetting 0
[  146.798991][ T4230] usb 4-1: config 220 interface 76 has no altsetting 0
[  146.805999][ T4230] usb 4-1: config 220 interface 1 has no altsetting 0
[  146.848850][ T6344] comedi comedi0: Minor 2147483647 is invalid!
[  147.016066][ T4230] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  147.052306][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.064879][ T4230] usb 4-1: Product: syz
[  147.080729][ T4230] usb 4-1: Manufacturer: syz
[  147.085600][ T4230] usb 4-1: SerialNumber: syz
[  147.260057][ T6353] loop6: detected capacity change from 0 to 32768
[  147.305660][ T6353] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.525 (6353)
[  147.328861][ T6353] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  147.337629][ T6353] BTRFS info (device loop6): force clearing of disk cache
[  147.344886][ T6353] BTRFS info (device loop6): enabling auto defrag
[  147.351383][ T6353] BTRFS info (device loop6): max_inline at 0
[  147.357387][ T6353] BTRFS info (device loop6): enabling disk space caching
[  147.364499][ T6353] BTRFS info (device loop6): disk space caching is enabled
[  147.371790][ T6353] BTRFS info (device loop6): has skinny extents
[  147.503322][ T4230] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  147.510453][ T4230] usb 4-1: No valid video chain found.
[  147.560580][ T4230] usb 4-1: selecting invalid altsetting 0
[  147.607615][ T6353] BTRFS info (device loop6): enabling ssd optimizations
[  147.628738][ T6353] BTRFS info (device loop6): clearing free space tree
[  147.636059][ T6353] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.645792][ T6353] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.725928][ T6381] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  148.372537][ T4230] usb 4-1: selecting invalid altsetting 0
[  148.395180][ T4230] usbtest: probe of 4-1:220.1 failed with error -22
[  148.494964][ T6387] loop1: detected capacity change from 0 to 512
[  148.518900][ T4230] usb 4-1: USB disconnect, device number 7
[  148.544601][ T4239] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  148.587520][ T6384] loop3: detected capacity change from 0 to 4096
[  148.628623][ T6387] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.529: iget: bad i_size value: 38620345925642
[  148.651841][ T6387] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.529: couldn't read orphan inode 15 (err -117)
[  148.673967][ T6387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  148.734528][ T6384] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  148.839020][ T6384] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  148.952200][ T6389] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  149.444435][ T4239] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22.
[  149.462442][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.470164][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.476665][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.485157][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.539495][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.603658][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  149.849756][ T4239] ntfs3: loop3: ino=1b, directory corrupted
[  150.265183][ T6402] loop1: detected capacity change from 0 to 512
[  150.306861][ T6402] EXT4-fs (loop1): Ignoring removed bh option
[  150.393131][ T6402] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.533: corrupted in-inode xattr
[  150.519876][ T6402] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.533: couldn't read orphan inode 15 (err -117)
[  150.583501][ T6415] loop3: detected capacity change from 0 to 256
[  150.607529][ T6402] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  150.703229][ T6415] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.950950][ T6427] loop6: detected capacity change from 0 to 64
[  151.137557][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  151.137567][   T26] audit: type=1800 audit(1782169118.477:7): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.540" name=DC dev="loop6" ino=24 res=0 errno=0
[  151.538786][ T4772] libceph: connect (1)[c::]:6789 error -101
[  151.600328][ T4772] libceph: mon0 (1)[c::]:6789 connect error
[  151.722279][ T4772] libceph: connect (1)[c::]:6789 error -101
[  151.805492][ T4772] libceph: mon0 (1)[c::]:6789 connect error
[  152.199598][ T4772] libceph: connect (1)[c::]:6789 error -101
[  152.290215][ T4772] libceph: mon0 (1)[c::]:6789 connect error
[  152.411777][ T6443] ceph: No mds server is up or the cluster is laggy
[  152.730816][ T4330] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  152.863714][ T6458] loop3: detected capacity change from 0 to 32768
[  152.943722][ T6458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.549 (6458)
[  153.080328][ T6458] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  153.080981][ T4330] usb 6-1: Using ep0 maxpacket: 32
[  153.089064][ T6458] BTRFS info (device loop3): force clearing of disk cache
[  153.101428][ T6458] BTRFS info (device loop3): enabling auto defrag
[  153.107908][ T6458] BTRFS info (device loop3): max_inline at 0
[  153.113941][ T6458] BTRFS info (device loop3): enabling disk space caching
[  153.121007][ T6458] BTRFS info (device loop3): disk space caching is enabled
[  153.128214][ T6458] BTRFS info (device loop3): has skinny extents
[  153.273255][ T4330] usb 6-1: unable to get BOS descriptor or descriptor too short
[  153.295727][ T6458] BTRFS info (device loop3): enabling ssd optimizations
[  153.304494][ T6458] BTRFS info (device loop3): clearing free space tree
[  153.311517][ T6458] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.321567][ T6458] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  153.330724][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  153.382461][ T4330] usb 6-1: config 9 has an invalid interface number: 22 but max is 1
[  153.401097][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.408509][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.410399][ T4330] usb 6-1: config 9 has an invalid interface number: 4 but max is 1
[  153.454310][ T5316] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  153.496592][ T4330] usb 6-1: config 9 has no interface number 0
[  153.516468][ T4330] usb 6-1: config 9 has no interface number 1
[  153.536641][ T4330] usb 6-1: config 9 interface 22 has no altsetting 0
[  153.559130][ T4330] usb 6-1: config 9 interface 4 has no altsetting 0
[  153.751135][ T4330] usb 6-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=43.59
[  153.775838][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.791181][ T4330] usb 6-1: Product: syz
[  153.795583][ T4330] usb 6-1: Manufacturer: syz
[  153.800208][ T4330] usb 6-1: SerialNumber: syz
[  154.770697][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.780715][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.790693][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.800691][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.810686][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.820696][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.830691][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.840689][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  154.850699][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[  155.471161][ T4330] hub 6-1:9.22: Invalid hub with more than one config or interface
[  155.489577][ T4330] hub: probe of 6-1:9.22 failed with error -22
[  155.497957][ T4330] usb 6-1: active config #9 != 1 ??
[  155.551122][ T4330] hub 6-1:9.4: Invalid hub with more than one config or interface
[  155.562188][ T4330] hub: probe of 6-1:9.4 failed with error -22
[  155.569079][ T4330] usb 6-1: active config #9 != 1 ??
[  155.616213][ T4330] usb 6-1: USB disconnect, device number 10
[  155.653054][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.670795][ T4772] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  155.703146][ T6455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.040841][ T4772] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  156.118794][ T6455] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.131769][ T6455] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.141083][ T6455] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.149967][ T6455] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.253280][ T4772] usb 4-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40
[  156.262658][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'.
[  156.277110][ T4772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.301436][ T4772] usb 4-1: Product: syz
[  156.309368][ T4772] usb 4-1: Manufacturer: syz
[  156.321038][ T4772] usb 4-1: SerialNumber: syz
[  156.730880][ T4772] usb 4-1: Can't get UAC3 power state for id 10
[  156.790560][ T6514] loop6: detected capacity change from 0 to 32768
[  156.797857][ T4772] usb 4-1: BAAD HEADSET c_chmask mismatch
[  156.827470][ T4772] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  156.841236][ T6514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.561 (6514)
[  156.863877][ T4772] usb 4-1: USB disconnect, device number 8
[  156.905333][ T6514] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  156.914711][ T6514] BTRFS info (device loop6): using free space tree
[  156.921605][ T6514] BTRFS info (device loop6): has skinny extents
[  156.957663][ T6514] BTRFS info (device loop6): enabling ssd optimizations
[  157.008805][   T26] audit: type=1800 audit(1782169124.347:8): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.561" name="file1" dev="loop6" ino=260 res=0 errno=0
[  157.093671][ T4830] udevd[4830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.230959][ T6538] loop6: detected capacity change from 32768 to 0
[  157.263882][ T6547] 9pnet: Insufficient options for proto=fd
[  157.283389][  T154] BTRFS warning (device loop6): csum failed root 5 ino 260 off 0 csum 0xc2a52c839e03f3f2d52a2c83360807043f7efd096c92c93b9e37b934b7619505 expected csum 0xec0185aa0caafcac0ccd95649a670890b9fe46cb2792075b99af000dcbdf82bd mirror 1
[  157.306545][  T154] BTRFS error (device loop6): bdev /dev/loop6 errs: wr 0, rd 0, flush 0, corrupt 1, gen 0
[  157.601685][ T6558] Bluetooth: (null): Non-link packet received in non-active state
[  158.273190][ T6576] kvm: vcpu 0: requested 288 ns lapic timer period limited to 200000 ns
[  158.309653][ T6576] kvm: pic: non byte write
[  158.390755][ T4178] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  158.619313][ T4193] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  158.626736][ T6580] loop3: detected capacity change from 0 to 128
[  158.629843][ T4193] CPU: 0 PID: 4193 Comm: kworker/u5:2 Not tainted syzkaller #0
[  158.643241][ T4178] usb 7-1: Using ep0 maxpacket: 16
[  158.643661][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  158.658812][ T4193] Workqueue: hci2 hci_rx_work
[  158.663520][ T4193] Call Trace:
[  158.666800][ T4193]  <TASK>
[  158.669730][ T4193]  dump_stack_lvl+0x188/0x250
[  158.674430][ T4193]  ? show_regs_print_info+0x20/0x20
[  158.679648][ T4193]  ? load_image+0x410/0x410
[  158.684165][ T4193]  sysfs_create_dir_ns+0x26a/0x290
[  158.689282][ T4193]  ? sysfs_warn_dup+0xa0/0xa0
[  158.694636][ T4193]  ? kthread+0x42e/0x520
[  158.698906][ T4193]  ? do_raw_spin_unlock+0x11d/0x230
[  158.704259][ T4193]  kobject_add_internal+0x5ba/0xcd0
[  158.709559][ T4193]  kobject_add+0x160/0x230
[  158.713973][ T4193]  ? kobject_init+0x1c0/0x1c0
[  158.718915][ T4193]  ? __raw_spin_lock_init+0x41/0x100
[  158.724210][ T4193]  ? klist_children_get+0x50/0x50
[  158.729326][ T4193]  ? get_device_parent+0x121/0x3e0
[  158.734486][ T4193]  device_add+0x470/0x1050
[  158.739067][ T4193]  ? device_initialize+0x2a5/0x4d0
[  158.744199][ T4193]  hci_conn_add_sysfs+0xd1/0x1e0
[  158.749875][ T4193]  le_conn_complete_evt+0xc2e/0x14d0
[  158.755640][ T4193]  ? cs_le_create_conn+0x5e0/0x5e0
[  158.760783][ T4193]  ? __mutex_trylock_common+0x15c/0x260
[  158.766636][ T4193]  hci_le_meta_evt+0x285/0x3ca0
[  158.771737][ T4193]  ? hci_event_packet+0x363/0x1310
[  158.777065][ T4193]  ? __lock_acquire+0x7b50/0x7b50
[  158.783059][ T4193]  ? hci_remote_host_features_evt+0x240/0x240
[  158.790556][ T4193]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  158.796595][ T4193]  ? mark_lock+0x94/0x320
[  158.800942][ T4193]  ? mutex_unlock+0x10/0x10
[  158.805812][ T4193]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  158.815904][ T4193]  ? lock_chain_count+0x20/0x20
[  158.822106][ T4193]  ? __rwlock_init+0x140/0x140
[  158.827392][ T4193]  hci_event_packet+0xe0b/0x1310
[  158.832609][ T4193]  ? _raw_spin_unlock+0x40/0x40
[  158.838069][ T4193]  ? rcu_lock_release+0x20/0x20
[  158.843103][ T4193]  ? hci_send_to_monitor+0x9c/0x4a0
[  158.848493][ T4193]  hci_rx_work+0x255/0xa10
[  158.853184][ T4193]  process_one_work+0x867/0xff0
[  158.858053][ T4193]  ? worker_detach_from_pool+0x240/0x240
[  158.863770][ T4193]  ? lockdep_hardirqs_off+0x70/0x100
[  158.869176][ T4193]  ? _raw_spin_lock_irq+0xb7/0xf0
[  158.874315][ T4193]  ? _raw_spin_lock_irqsave+0x100/0x100
[  158.879847][ T4193]  ? wq_worker_running+0x97/0x170
[  158.884864][ T4193]  worker_thread+0xad7/0x12a0
[  158.889652][ T4193]  kthread+0x42e/0x520
[  158.893706][ T4193]  ? rcu_lock_release+0x20/0x20
[  158.898539][ T4193]  ? kthread_blkcg+0xd0/0xd0
[  158.903116][ T4193]  ret_from_fork+0x1f/0x30
[  158.907616][ T4193]  </TASK>
[  158.910948][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.918855][ T4193] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  158.932294][ T4193] Bluetooth: hci2: failed to register connection device
[  159.020848][ T4178] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.040947][ T4178] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.078033][   T26] audit: type=1800 audit(1782169126.417:9): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.577" name="bus" dev="loop3" ino=1048607 res=0 errno=0
[  159.221065][ T4178] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  159.247181][ T6588] attempt to access beyond end of device
[  159.247181][ T6588] loop3: rw=2049, want=1041, limit=128
[  159.268097][ T4178] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.276261][ T4178] usb 7-1: Product: syz
[  159.280426][ T4178] usb 7-1: Manufacturer: syz
[  159.285842][ T4178] usb 7-1: SerialNumber: syz
[  160.139493][ T4178] usb 7-1: 0:2 : does not exist
[  160.188177][ T4178] usb 7-1: USB disconnect, device number 5
[  160.408839][ T6614] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  160.417170][ T6614] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  160.461315][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.485963][ T6618] loop5: detected capacity change from 0 to 128
[  160.691931][ T6618] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: none.
[  160.790311][ T6618] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  165.083982][ T6670] binder: BC_ACQUIRE_RESULT not supported
[  165.200859][ T6670] binder: 6669:6670 ioctl c0306201 200000000240 returned -22
[  165.304523][ T6670] loop6: detected capacity change from 0 to 128
[  167.444429][ T6681] kvm: pic: single mode not supported
[  167.444798][ T6681] kvm: pic: single mode not supported
[  167.477294][ T6681] pic_ioport_write: 22 callbacks suppressed
[  167.477310][ T6681] kvm: pic: level sensitive irq not supported
[  167.562824][ T6701] binder: BINDER_SET_CONTEXT_MGR already set
[  167.617021][ T6701] binder: 6699:6701 ioctl 4018620d 200000004a80 returned -16
[  169.414066][ T6762] device syzkaller0 entered promiscuous mode
[  169.436306][ T6762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.456616][ T6759] tipc: Resetting bearer <eth:syzkaller0>
[  169.480568][ T6759] tipc: Disabling bearer <eth:syzkaller0>
[  169.544969][ T6766] overlayfs: statfs failed on './file0'
[  169.784573][ T6775] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  169.875419][ T6784] loop5: detected capacity change from 0 to 128
[  169.890504][ T6783] device syzkaller0 entered promiscuous mode
[  169.921692][ T6784] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  169.939667][ T6784] FAT-fs (loop5): bogus number of reserved sectors
[  169.949119][ T6784] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  169.972775][ T6784] FAT-fs (loop5): Can't find a valid FAT filesystem
[  170.230821][ T4468] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  170.274985][ T6808] device syzkaller0 entered promiscuous mode
[  170.560259][ T6827] loop6: detected capacity change from 0 to 256
[  170.576339][ T6825] device syzkaller0 entered promiscuous mode
[  170.602502][ T4468] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  170.605814][ T6825] tipc: Started in network mode
[  170.628011][ T4468] usb 4-1: config 0 interface 0 has no altsetting 0
[  170.644956][ T4468] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  170.667046][ T6825] tipc: Node identity ea05b296eb8f, cluster identity 4711
[  170.671170][ T4468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.686145][ T6825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.698954][ T6824] tipc: Resetting bearer <eth:syzkaller0>
[  170.727286][ T4468] usb 4-1: config 0 descriptor??
[  170.772030][ T6824] tipc: Disabling bearer <eth:syzkaller0>
[  170.919934][ T6844] loop1: detected capacity change from 0 to 128
[  171.108784][ T6844] attempt to access beyond end of device
[  171.108784][ T6844] loop1: rw=2049, want=250, limit=128
[  171.214377][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x2
[  171.238703][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.256755][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.264101][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.271537][ T4330] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  171.290960][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.298552][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.317192][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.331963][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.349731][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.370039][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.377479][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.391034][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.398365][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.405663][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.414426][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.422076][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.429396][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.436734][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.444867][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.458406][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.465844][ T4468] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0
[  171.480939][ T4468] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.06 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0
[  171.502612][ T4468] usb 4-1: USB disconnect, device number 9
[  171.518672][ T4330] usb 6-1: Using ep0 maxpacket: 32
[  171.575233][ T6851] fido_id[6851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  171.640892][ T4330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.660753][ T4330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.673297][ T4330] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[  171.685308][ T6856] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  171.692784][ T4330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.718868][ T4330] usb 6-1: config 0 descriptor??
[  171.776617][ T6858] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.656'.
[  172.271345][ T4330] usbhid 6-1:0.0: can't add hid device: -71
[  172.279719][ T4330] usbhid: probe of 6-1:0.0 failed with error -71
[  172.341546][ T4330] usb 6-1: USB disconnect, device number 11
[  172.425486][ T6875] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  172.434784][ T6864] o2cb: This node has not been configured.
[  172.441011][ T6864] o2cb: Cluster check failed. Fix errors before retrying.
[  172.448125][ T6864] (syz.6.657,6864,1):user_dlm_register:675 ERROR: status = -22
[  172.455715][ T6864] (syz.6.657,6864,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0"
[  172.509831][ T6875] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.661'.
[  172.700096][ T6885] qrtr: Invalid version 0
[  172.725782][ T6885] device syzkaller1 entered promiscuous mode
[  172.941561][ T6895] loop1: detected capacity change from 0 to 1024
[  173.263009][ T6910] device syzkaller0 entered promiscuous mode
[  173.270542][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.669'.
[  173.530980][ T4330] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  173.790857][ T4330] usb 6-1: Using ep0 maxpacket: 16
[  173.910916][ T4330] usb 6-1: config 4 has an invalid interface number: 51 but max is 0
[  173.947138][ T4330] usb 6-1: config 4 has no interface number 0
[  173.980620][ T4330] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  174.018611][ T4330] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  174.049318][ T4330] usb 6-1: config 4 interface 51 has no altsetting 0
[  174.220795][ T4468] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  174.232289][ T4330] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  174.250766][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.259289][ T4330] usb 6-1: Product: syz
[  174.265616][ T4330] usb 6-1: Manufacturer: syz
[  174.271432][ T4330] usb 6-1: SerialNumber: syz
[  174.301476][ T6888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  174.309143][ T6888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  174.531763][ T6888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  174.548515][ T6888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  174.770866][ T4468] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  174.780078][ T4468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.327042][ T4330] cdc_eem 6-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.5-1, CDC EEM Device, 16:a6:10:3d:18:70
[  175.338630][ T4468] usb 7-1: Product: syz
[  175.342931][ T4468] usb 7-1: Manufacturer: syz
[  175.347781][ T4468] usb 7-1: SerialNumber: syz
[  175.362498][ T4330] usb 6-1: USB disconnect, device number 12
[  175.392433][ T4330] cdc_eem 6-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.5-1, CDC EEM Device
[  175.829728][ T6949] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  175.856139][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.864036][ T6949] CIFS mount error: No usable UNC path provided in device string!
[  175.864036][ T6949] 
[  175.883520][ T6949] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  177.385751][ T4468] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  177.442626][ T4468] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  177.463681][ T6959] loop5: detected capacity change from 0 to 128
[  177.467456][ T4468] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  177.491540][ T4468] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  177.516487][ T4468] lan78xx: probe of 7-1:1.0 failed with error -32
[  177.768232][ T6968] device syzkaller0 entered promiscuous mode
[  177.801593][   T26] audit: type=1800 audit(1782169145.147:10): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.689" name="file1" dev="loop5" ino=1048611 res=0 errno=0
[  177.891071][ T6971] ubi16: attaching mtd0
[  177.908471][ T6971] ubi16: scanning is finished
[  177.913287][ T6971] ubi16: empty MTD device detected
[  178.256303][ T6971] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[  178.264126][ T6971] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  178.271602][ T6971] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[  178.278814][ T6971] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[  178.286590][ T6971] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  178.293570][ T6971] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[  178.301873][ T6971] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1501939268
[  178.312439][ T6971] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  178.328714][ T6972] ubi16: background thread "ubi_bgt16d" started, PID 6972
[  178.482565][ T5170] usb 7-1: USB disconnect, device number 6
[  179.076903][ T4305] attempt to access beyond end of device
[  179.076903][ T4305] loop5: rw=1, want=137, limit=128
[  179.149308][ T4305] attempt to access beyond end of device
[  179.149308][ T4305] loop5: rw=1, want=177, limit=128
[  179.821939][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880616e8800: rx timeout, send abort
[  180.323422][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f291c00: rx timeout, send abort
[  180.833824][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805f291c00: abort rx timeout. Force session deactivation
[  180.885523][ T7006] device syzkaller0 entered promiscuous mode
[  180.981092][ T7008] loop5: detected capacity change from 0 to 2048
[  181.046157][ T7008] Alternate GPT is invalid, using primary GPT.
[  181.070255][ T7008]  loop5: p2 p3 p7
[  181.166346][ T7017] kvm: apic: phys broadcast and lowest prio
[  183.332706][ T7045] device syzkaller0 entered promiscuous mode
[  183.460181][ T3561] Alternate GPT is invalid, using primary GPT.
[  183.471020][ T3561]  loop5: p2 p3 p7
[  183.875736][ T7051] loop5: detected capacity change from 0 to 512
[  183.960340][ T7051] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.023905][ T5316] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.953964][ T5316] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.953949][ T5316] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.989086][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.727'.
[  186.034898][ T5316] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.047161][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.727'.
[  186.050998][ T4330] Bluetooth: hci0: command 0x0406 tx timeout
[  186.056806][ T5668] Bluetooth: hci2: command 0x0406 tx timeout
[  186.071051][ T5668] Bluetooth: hci4: command 0x0406 tx timeout
[  187.762146][ T7098] device syzkaller0 entered promiscuous mode
[  189.190998][   T26] audit: type=1326 audit(1782169156.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.3.738" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35db8b4e59 code=0x0
[  189.331474][ T7111] netlink: 'syz.6.735': attribute type 14 has an invalid length.
[  189.339236][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.735'.
[  189.386930][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.334101][ T7153] loop6: detected capacity change from 0 to 128
[  191.523526][ T7153] attempt to access beyond end of device
[  191.523526][ T7153] loop6: rw=2049, want=250, limit=128
[  191.790838][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'.
[  192.892264][ T7192] loop3: detected capacity change from 0 to 8192
[  193.063086][ T7192] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  193.803615][ T5316] device hsr_slave_0 left promiscuous mode
[  193.835447][ T5316] device hsr_slave_1 left promiscuous mode
[  193.916281][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.959898][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.017981][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.060674][    C1] sched: RT throttling activated
[  194.069768][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.098294][ T5316] device bridge_slave_1 left promiscuous mode
[  194.175109][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.233600][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  194.253403][ T5316] device bridge_slave_0 left promiscuous mode
[  194.301270][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.561684][ T5316] device veth1_macvtap left promiscuous mode
[  194.591917][ T5316] device veth0_macvtap left promiscuous mode
[  194.660410][ T7215] loop1: detected capacity change from 0 to 1024
[  194.666958][ T5316] device veth1_vlan left promiscuous mode
[  194.692069][ T5316] device veth0_vlan left promiscuous mode
[  195.305801][ T7215] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  195.348843][ T7215] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.903847][ T7223] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  196.498952][ T5316] team0 (unregistering): Port device team_slave_1 removed
[  196.504534][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  196.522707][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[  196.549416][ T5316] team0 (unregistering): Port device team_slave_0 removed
[  196.590645][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  196.594185][ T5316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.641347][ T5316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.726245][ T5316] bond0 (unregistering): Released all slaves
[  197.024122][ T7265] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  198.131636][ T7263] loop1: detected capacity change from 0 to 512
[  198.215465][ T7263] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  198.298785][ T7263] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  198.374630][ T7263] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  198.433078][ T7263] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.765: Failed to acquire dquot type 1
[  198.496833][ T7263] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.765: bg 0: block 495: padding at end of block bitmap is not set
[  198.520101][ T7263] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  198.606252][ T7263] EXT4-fs (loop1): 1 truncate cleaned up
[  198.620865][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  198.681143][ T7263] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.836374][ T7263] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  199.537921][ T7306] loop3: detected capacity change from 0 to 256
[  199.568188][   T26] audit: type=1804 audit(1782169166.907:12): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.775" name="/newroot/142/file0" dev="fuse" ino=1 res=1 errno=0
[  199.668526][ T7306] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda20322b, utbl_chksum : 0xe619d30d)
[  199.746329][ T7306] exFAT-fs (loop3): failed to load alloc-bitmap
[  199.786031][ T7306] exFAT-fs (loop3): failed to recognize exfat type
[  199.974153][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.776'.
[  200.132671][ T7322] tipc: Started in network mode
[  200.137572][ T7322] tipc: Node identity 4, cluster identity 4711
[  200.217668][ T7322] tipc: Node number set to 4
[  202.771204][ T4468] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  203.110942][ T4468] usb 7-1: Using ep0 maxpacket: 16
[  203.251846][ T4468] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7
[  203.668674][ T4468] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40
[  203.688063][ T4468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.716008][ T4468] usb 7-1: Product: syz
[  203.738679][ T4468] usb 7-1: Manufacturer: syz
[  203.750702][ T4468] usb 7-1: SerialNumber: syz
[  204.500758][   T26] audit: type=1326 audit(1782169171.837:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.6.785" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb4552de59 code=0x0
[  205.130794][ T7382] vivid-000: disconnect
[  205.378326][ T7374] vivid-000: reconnect
[  205.755045][ T4468] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  206.113874][ T4468] usb 7-1: USB disconnect, device number 7
[  206.625886][ T7407] device syzkaller0 entered promiscuous mode
[  206.627494][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.524035][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'.
[  207.894431][ T7423] team0: Port device team_slave_0 removed
[  208.110028][ T7395] loop3: detected capacity change from 0 to 32768
[  208.444978][ T5170] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  208.515685][ T7395] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.796 (7395)
[  208.616807][ T7395] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  208.636066][ T7445] device syzkaller0 entered promiscuous mode
[  208.662878][ T7395] BTRFS info (device loop3): setting nodatacow, compression disabled
[  208.714999][ T7395] BTRFS info (device loop3): force clearing of disk cache
[  208.740906][ T5170] usb 6-1: Using ep0 maxpacket: 16
[  208.781060][ T7395] BTRFS info (device loop3): turning off barriers
[  208.804221][ T7395] BTRFS info (device loop3): use no compression
[  208.861130][ T5170] usb 6-1: config 4 has an invalid interface number: 104 but max is 0
[  208.896245][ T5170] usb 6-1: config 4 has no interface number 0
[  208.948114][ T7395] BTRFS info (device loop3): disabling free space tree
[  209.308343][ T5170] usb 6-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11
[  209.417151][ T7395] BTRFS info (device loop3): enabling ssd optimizations
[  209.962427][ T7395] BTRFS info (device loop3): using spread ssd allocation scheme
[  209.970125][ T7395] BTRFS info (device loop3): not using ssd optimizations
[  209.980241][ T7395] BTRFS info (device loop3): not using spread ssd allocation scheme
[  209.993055][ T7395] BTRFS info (device loop3): has skinny extents
[  210.214628][ T5170] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8
[  210.251409][ T5170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.348623][ T5170] usb 6-1: Product: syz
[  210.370756][ T5170] usb 6-1: Manufacturer: syz
[  210.394617][ T5170] usb 6-1: SerialNumber: syz
[  210.984462][ T7487] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  210.997953][ T7487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  211.300829][ T5170] rtsx_usb: probe of 6-1:4.104 failed with error -71
[  211.342198][ T5170] usb 6-1: USB disconnect, device number 13
[  211.382888][ T7395] BTRFS error (device loop3): open_ctree failed: -12
[  211.390296][ T4183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4183)
[  212.400809][ T1345] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  212.609214][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.780990][ T1345] usb 2-1: Using ep0 maxpacket: 8
[  212.940940][ T1345] usb 2-1: unable to get BOS descriptor or descriptor too short
[  213.041035][ T1345] usb 2-1: config 2 has an invalid interface number: 216 but max is 0
[  213.048102][ T7562] device syzkaller0 entered promiscuous mode
[  213.049229][ T1345] usb 2-1: config 2 has no interface number 0
[  213.049260][ T1345] usb 2-1: config 2 interface 216 has no altsetting 0
[  213.161132][ T7517] loop5: detected capacity change from 0 to 32768
[  213.241029][ T1345] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=6c.76
[  213.255830][ T1345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.283295][ T1345] usb 2-1: Product: syz
[  213.310939][ T1345] usb 2-1: Manufacturer: syz
[  213.356685][ T1345] usb 2-1: SerialNumber: syz
[  213.383695][ T7517] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  213.416594][ T7580] loop6: detected capacity change from 0 to 64
[  213.441270][ T1345] usb 2-1: can't set config #2, error -71
[  213.448606][ T1345] usb 2-1: USB disconnect, device number 10
[  214.300036][ T4329] ocfs2: Unmounting device (7,5) on (node local)
[  214.566822][ T7597] device syzkaller0 entered promiscuous mode
[  214.685923][ T7600] loop6: detected capacity change from 0 to 512
[  214.785357][ T7600] EXT4-fs (loop6): Test dummy encryption mode enabled
[  214.792264][ T7600] EXT4-fs (loop6): Ignoring removed orlov option
[  214.798608][ T7600] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  214.855762][ T7600] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  214.874696][ T7600] EXT4-fs (loop6): 1 truncate cleaned up
[  214.880379][ T7600] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none.
[  215.346175][ T7612] loop5: detected capacity change from 0 to 2048
[  216.148533][ T7612] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  216.162781][ T7612] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  216.179207][ T7612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.816581][ T7616] binder: 7615:7616 ioctl c0306201 2000000006c0 returned -14
[  219.184624][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.840'.
[  219.259376][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.840'.
[  219.320785][ T4178] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  219.370144][ T7662] device syzkaller0 entered promiscuous mode
[  219.670856][ T4178] usb 2-1: Using ep0 maxpacket: 32
[  220.011392][ T4178] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[  220.126114][ T4178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.315238][ T4178] usb 2-1: Product: syz
[  220.319448][ T4178] usb 2-1: Manufacturer: syz
[  220.375958][ T4178] usb 2-1: SerialNumber: syz
[  220.501266][ T7686] netlink: 'syz.6.845': attribute type 10 has an invalid length.
[  220.539603][ T7686] 8021q: adding VLAN 0 to HW filter on device team0
[  220.603819][ T7686] bond0: (slave team0): Enslaving as an active interface with an up link
[  220.717928][ T7689] loop3: detected capacity change from 0 to 256
[  220.856864][   T26] audit: type=1804 audit(1782169188.187:14): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.849" name="/newroot/171/file4/bus" dev="loop3" ino=1048615 res=1 errno=0
[  221.159575][ T4199] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  221.209965][ T4199] FAT-fs (loop3): Filesystem has been set read-only
[  221.284632][ T4199] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  221.370950][ T4178] usb 2-1: can't set config #1, error -71
[  221.381508][ T4178] usb 2-1: USB disconnect, device number 11
[  221.762506][ T7705] loop6: detected capacity change from 0 to 8192
[  222.709416][ T7705] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  227.594183][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'.
[  227.973604][ T1345] Bluetooth: hci1: command 0x0406 tx timeout
[  229.685973][ T7768] chnl_net:caif_netlink_parms(): no params data found
[  229.808809][ T7795] loop6: detected capacity change from 0 to 512
[  229.846359][ T7798] binder_alloc: 7794: pid 7794 spamming oneway? 2 buffers allocated for a total size of 5120
[  229.895956][ T7798] binder_alloc: 7794: pid 7794 spamming oneway? 3 buffers allocated for a total size of 5128
[  229.942495][ T7795] EXT4-fs (loop6): inline encryption not supported
[  230.000777][ T7795] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  230.032476][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.051127][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.086263][ T7768] device bridge_slave_0 entered promiscuous mode
[  230.227998][ T7795] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.871: bad orphan inode 131083
[  230.273437][ T7795] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  230.796844][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.804263][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.817513][ T7768] device bridge_slave_1 entered promiscuous mode
[  231.560887][ T5164] Bluetooth: hci4: command 0x0409 tx timeout
[  231.639701][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.715859][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.844112][ T7768] team0: Port device team_slave_0 added
[  232.898007][ T7768] team0: Port device team_slave_1 added
[  232.941948][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.960776][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.988183][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.015166][ T7837] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  233.025387][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.034920][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.081990][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.131004][ T5161] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  233.174030][ T7843] device syzkaller0 entered promiscuous mode
[  233.277477][ T7768] device hsr_slave_0 entered promiscuous mode
[  233.299635][ T7768] device hsr_slave_1 entered promiscuous mode
[  233.326641][ T7768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.345736][ T7768] Cannot create hsr debugfs directory
[  233.515008][ T5161] usb 2-1: Using ep0 maxpacket: 16
[  234.227693][ T5161] usb 2-1: config 4 has an invalid interface number: 104 but max is 0
[  234.236698][ T5161] usb 2-1: config 4 has no interface number 0
[  234.250808][ T5161] usb 2-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11
[  234.348966][ T1345] Bluetooth: hci4: command 0x041b tx timeout
[  234.472174][ T7885] binder: BINDER_SET_CONTEXT_MGR already set
[  234.488472][ T7885] binder: 7883:7885 ioctl 4018620d 200000004a80 returned -16
[  234.501092][ T5161] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8
[  234.521202][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.529506][ T5161] usb 2-1: Product: syz
[  234.539070][ T7887] device syzkaller0 entered promiscuous mode
[  234.555976][ T5161] usb 2-1: Manufacturer: syz
[  234.560615][ T5161] usb 2-1: SerialNumber: syz
[  234.646568][ T7768] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  234.863062][ T7768] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  234.885978][ T7768] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  234.902197][ T7768] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  235.017275][ T7897] loop6: detected capacity change from 0 to 256
[  235.284710][ T7897] FAT-fs (loop6): Directory bread(block 64) failed
[  235.291577][ T7897] FAT-fs (loop6): Directory bread(block 65) failed
[  235.298671][ T7897] FAT-fs (loop6): Directory bread(block 66) failed
[  235.305426][ T7897] FAT-fs (loop6): Directory bread(block 67) failed
[  235.312569][ T7897] FAT-fs (loop6): Directory bread(block 68) failed
[  235.319282][ T7897] FAT-fs (loop6): Directory bread(block 69) failed
[  235.326390][ T7897] FAT-fs (loop6): Directory bread(block 70) failed
[  235.333393][ T7897] FAT-fs (loop6): Directory bread(block 71) failed
[  235.340709][ T7897] FAT-fs (loop6): Directory bread(block 72) failed
[  235.347534][ T7897] FAT-fs (loop6): Directory bread(block 73) failed
[  237.074148][ T1345] Bluetooth: hci4: command 0x040f tx timeout
[  237.220842][ T5161] rtsx_usb: probe of 2-1:4.104 failed with error -71
[  237.366889][ T5161] usb 2-1: USB disconnect, device number 12
[  237.426972][ T4763] Bluetooth: hci3: command 0x0406 tx timeout
[  237.455597][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.553112][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.563113][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.609031][ T7768] 8021q: adding VLAN 0 to HW filter on device team0
[  238.075668][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.171690][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.396583][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.403721][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.411519][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.430876][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  238.557858][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.576715][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.583870][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.899181][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.102161][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.169044][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.171402][ T1345] Bluetooth: hci4: command 0x0419 tx timeout
[  239.505705][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.534910][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.758723][ T7768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  240.570835][ T7768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  240.678824][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.721581][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.730130][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.762258][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.846132][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.920334][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  241.000487][ T6400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  241.955847][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  241.966228][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  241.977663][ T7967] loop6: detected capacity change from 0 to 4096
[  242.002265][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.198201][ T7967] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  243.689278][ T7768] device veth0_vlan entered promiscuous mode
[  243.724557][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  243.743892][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  243.763022][ T6400] ntfs3: loop6: ino=1b, Internal error
[  243.779647][ T6400] ntfs3: loop6: ntfs3_write_inode r=1b failed, -22.
[  243.812534][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  245.071841][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  245.199619][ T8015] loop6: detected capacity change from 0 to 512
[  245.222787][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  245.269562][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  245.277774][ T8015] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  245.397060][ T7768] device veth1_vlan entered promiscuous mode
[  245.421407][ T8015] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 11: block 200:freeing already freed block (bit 199); block bitmap corrupt.
[  245.574043][ T8027] loop1: detected capacity change from 0 to 512
[  245.589437][ T7768] device veth0_macvtap entered promiscuous mode
[  245.747072][ T8027] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.915: corrupted in-inode xattr
[  245.857332][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  245.935996][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  245.988321][ T8015] EXT4-fs (loop6): 1 truncate cleaned up
[  246.029916][ T8027] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.915: couldn't read orphan inode 15 (err -117)
[  246.126436][ T8015] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  246.174265][ T7768] device veth1_macvtap entered promiscuous mode
[  246.198161][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  246.200520][ T8027] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  246.241514][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  246.343393][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.371064][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.407080][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.434762][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.464459][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.510273][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  246.568972][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  246.607864][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.642656][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.680317][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  246.720726][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.754713][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.883591][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  246.911589][ T6743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  246.977528][ T7768] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.477255][ T7768] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.517993][ T7768] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.568707][ T7768] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.328076][ T6743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.337355][ T6743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.373752][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  249.616273][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.635368][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.672809][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  249.804501][ T8079] device syzkaller0 entered promiscuous mode
[  249.829960][ T8079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.961020][    C1] 
[  249.964129][    C1] =============================
[  249.969008][    C1] WARNING: suspicious RCU usage
[  249.973906][    C1] syzkaller #0 Not tainted
[  249.978330][    C1] -----------------------------
[  249.983235][    C1] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage!
[  249.991598][    C1] 
[  249.991598][    C1] other info that might help us debug this:
[  249.991598][    C1] 
[  250.001893][    C1] 
[  250.001893][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  250.009968][    C1] 6 locks held by syz.7.863/8087:
[  250.015086][    C1]  #0: ffff888023e4fda0 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x1f8/0xd50
[  250.025004][    C1]  #1: ffffc90000dd0bc0 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xca/0x540
[  250.034633][    C1]  #2: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  250.044119][    C1]  #3: ffffffff8c31ef80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  250.053777][    C1]  #4: ffff8880793b0108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2b/0x2e50
[  250.063447][    C1]  #5: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  250.072829][    C1] 
[  250.072829][    C1] stack backtrace:
[  250.078824][    C1] CPU: 1 PID: 8087 Comm: syz.7.863 Not tainted syzkaller #0
[  250.086123][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.096193][    C1] Call Trace:
[  250.099486][    C1]  <IRQ>
[  250.102335][    C1]  dump_stack_lvl+0x188/0x250
[  250.107026][    C1]  ? show_regs_print_info+0x20/0x20
[  250.112248][    C1]  ? lockdep_rcu_suspicious+0x110/0x180
[  250.117805][    C1]  qdisc_lookup+0xa6/0x640
[  250.122233][    C1]  qdisc_tree_reduce_backlog+0x188/0x480
[  250.127989][    C1]  fq_codel_enqueue+0xf60/0x1610
[  250.132979][    C1]  ? INET_ECN_set_ce+0x960/0x960
[  250.137944][    C1]  ? prandom_u32+0x217/0x250
[  250.142564][    C1]  sfb_enqueue+0x979/0x1680
[  250.147118][    C1]  ? clsact_bind_filter+0x30/0x30
[  250.152155][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[  250.157286][    C1]  ? __rwlock_init+0x140/0x140
[  250.162067][    C1]  dev_qdisc_enqueue+0x48/0x210
[  250.166939][    C1]  __dev_queue_xmit+0xbde/0x2e50
[  250.171910][    C1]  ? dev_queue_xmit+0x20/0x20
[  250.176596][    C1]  ? rcu_lock_release+0x5/0x20
[  250.181374][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  250.186521][    C1]  ? mark_lock+0x94/0x320
[  250.190863][    C1]  ? eth_header+0x117/0x200
[  250.195376][    C1]  ? memcpy+0x3c/0x60
[  250.199454][    C1]  ? eth_header+0x117/0x200
[  250.203966][    C1]  ? llc_sysctl_exit+0x60/0x60
[  250.208752][    C1]  tipc_l2_send_msg+0x2eb/0x3a0
[  250.213797][    C1]  tipc_bearer_xmit_skb+0x292/0x3c0
[  250.219034][    C1]  ? tipc_bearer_min_mtu+0x190/0x190
[  250.224495][    C1]  tipc_disc_timeout+0x5e1/0x740
[  250.229463][    C1]  ? tipc_disc_create+0x910/0x910
[  250.234516][    C1]  ? tipc_disc_create+0x910/0x910
[  250.239555][    C1]  call_timer_fn+0x17b/0x540
[  250.244164][    C1]  ? tipc_disc_create+0x910/0x910
[  250.249200][    C1]  ? __run_timers+0x810/0x810
[  250.253903][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  250.259115][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  250.264323][    C1]  ? tipc_disc_create+0x910/0x910
[  250.269363][    C1]  __run_timers+0x56c/0x810
[  250.273903][    C1]  ? detach_timer+0x2b0/0x2b0
[  250.278588][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  250.284591][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  250.289452][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  250.295748][    C1]  run_timer_softirq+0x63/0xf0
[  250.300536][    C1]  handle_softirqs+0x336/0x830
[  250.305327][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  250.310206][    C1]  ? do_softirq+0x210/0x210
[  250.314733][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  250.319866][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  250.325082][    C1]  __irq_exit_rcu+0x13b/0x230
[  250.329772][    C1]  ? irq_exit_rcu+0x20/0x20
[  250.334294][    C1]  irq_exit_rcu+0x5/0x20
[  250.338577][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  250.344227][    C1]  </IRQ>
[  250.347161][    C1]  <TASK>
[  250.350096][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  250.356100][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  250.362613][    C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 8f 04 8f f7 65 8b 05 a0 2b 3f 76 85 c0 74 3c 48 c7 04 24 0e 36
[  250.382239][    C1] RSP: 0018:ffffc900034cf5e0 EFLAGS: 00000206
[  250.388333][    C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: ffa07360df090e00
[  250.396327][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: 0000000000000001
[  250.404332][    C1] RBP: ffffc900034cf670 R08: ffffffff901cb177 R09: 1ffffffff203962e
[  250.412314][    C1] R10: dffffc0000000000 R11: fffffbfff203962f R12: dffffc0000000000
[  250.420298][    C1] R13: 0000000000000000 R14: ffff888023e4fec0 R15: 1ffff92000699ebc
[  250.428306][    C1]  ? _raw_spin_unlock+0x40/0x40
[  250.433182][    C1]  ? __wake_up_common+0x28e/0x4d0
[  250.438234][    C1]  __wake_up_sync_key+0x128/0x190
[  250.443280][    C1]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  250.449279][    C1]  ? sock_load_diag_module+0x130/0x130
[  250.454773][    C1]  __unix_dgram_recvmsg+0x4b1/0xd50
[  250.459996][    C1]  ? unix_unhash+0x10/0x10
[  250.464449][    C1]  ? unix_dgram_recvmsg+0xb2/0xd0
[  250.469481][    C1]  ? unix_dgram_sendmsg+0x19c0/0x19c0
[  250.474863][    C1]  ____sys_recvmsg+0x2ca/0x5b0
[  250.479657][    C1]  ? __sys_recvmsg_sock+0x40/0x40
[  250.484872][    C1]  ? import_iovec+0x6f/0xa0
[  250.489402][    C1]  ___sys_recvmsg+0x213/0x5c0
[  250.494107][    C1]  ? __sys_recvmsg+0x280/0x280
[  250.498917][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  250.503962][    C1]  ? __might_fault+0xbc/0x110
[  250.508663][    C1]  ? __might_fault+0xb3/0x110
[  250.513350][    C1]  do_recvmmsg+0x360/0x7f0
[  250.517773][    C1]  ? __sys_recvmmsg+0x290/0x290
[  250.522623][    C1]  ? __context_tracking_exit+0x4c/0x80
[  250.528075][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  250.533094][    C1]  __x64_sys_recvmmsg+0x195/0x250
[  250.538112][    C1]  ? do_recvmmsg+0x7f0/0x7f0
[  250.542690][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  250.547878][    C1]  do_syscall_64+0x4c/0xa0
[  250.552281][    C1]  ? clear_bhb_loop+0x30/0x80
[  250.556950][    C1]  ? clear_bhb_loop+0x30/0x80
[  250.561617][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  250.567498][    C1] RIP: 0033:0x7fde69dfce59
[  250.571901][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.591498][    C1] RSP: 002b:00007fde68035028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  250.599914][    C1] RAX: ffffffffffffffda RBX: 00007fde6a076090 RCX: 00007fde69dfce59
[  250.607875][    C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  250.615829][    C1] RBP: 00007fde69e92e6f R08: 0000000000000000 R09: 0000000000000000
[  250.623786][    C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  250.631774][    C1] R13: 00007fde6a076128 R14: 00007fde6a076090 R15: 00007ffe018bba38
[  250.639745][    C1]  </TASK>
[  250.642766][    C1] vkms_vblank_simulate: vblank timer overrun
[  251.005751][ T8076] tipc: Resetting bearer <eth:syzkaller0>
[  251.032848][ T8076] tipc: Disabling bearer <eth:syzkaller0>
[  255.654020][ T1433] ieee802154 phy0 wpan0: encryption failed: -22