last executing test programs:

3m29.91435642s ago: executing program 2 (id=913):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc4})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
bind$tipc(r1, 0x0, 0xfffffffffffffe05)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

3m25.104221773s ago: executing program 2 (id=931):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
dup3(r0, r2, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)='\x00T', 0x2}, {&(0x7f0000000640)="685114", 0x3}], 0x2, 0xffffffff, 0x4)

3m23.664477304s ago: executing program 2 (id=938):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080d0}, 0x0)

3m21.582088293s ago: executing program 2 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108)

3m18.739697088s ago: executing program 2 (id=951):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0)

3m18.378504884s ago: executing program 2 (id=955):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
pipe(0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

3m1.810071309s ago: executing program 32 (id=955):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
pipe(0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

24.429003078s ago: executing program 0 (id=1458):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

22.092102869s ago: executing program 0 (id=1461):
socket$inet_udp(0x2, 0x2, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleav'])
chdir(&(0x7f0000000240)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x2007ffc)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES64, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYRES32, @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa77, &(0x7f0000000280)="$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")

18.209757817s ago: executing program 6 (id=1470):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x50)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffff, 0x400, 0x4, 0x91d, 0x0, "5f590469a322d928"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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")
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)

17.718261993s ago: executing program 0 (id=1473):
r0 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100)
r1 = syz_io_uring_setup(0x2a31, &(0x7f0000000000)={0x0, 0x2f33, 0x2, 0x0, 0x16d}, &(0x7f0000000080), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001300)=ANY=[], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x50)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006)
socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0)

16.626708101s ago: executing program 6 (id=1475):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc4})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
bind$tipc(r1, 0x0, 0xfffffffffffffe05)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r6=>0x0})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r7, 0x0, 0x4000080)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

12.406767946s ago: executing program 0 (id=1481):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
personality(0x2000000)
syz_usb_connect(0x0, 0x3d, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(r3, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fcntl$setpipe(r3, 0x407, 0x2000000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380))
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002f80))
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

12.290036475s ago: executing program 4 (id=1483):
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
writev(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
shutdown(r4, 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})

12.111748326s ago: executing program 3 (id=1485):
r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r0)

10.656506796s ago: executing program 4 (id=1488):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80)
ftruncate(r0, 0x2007ffb)
sendfile(r0, r0, 0x0, 0x1000000201005)

10.384517776s ago: executing program 5 (id=1490):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")

10.384244198s ago: executing program 6 (id=1491):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8a, 0x61, 0x6a, 0x8, 0xc98, 0x1140, 0xf021, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x3, 0x9a, 0x3e, 0xc}}]}}]}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
syz_usb_connect$cdc_ecm(0x4, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x50, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x5, 0x30, 0x6d, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x2, 0x6, 0x0, 0xe3, {{0x6, 0x24, 0x6, 0x0, 0x0, "0f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffa, 0x1, 0x5}, [@obex={0x5, 0x24, 0x15, 0x3}, @mdlm={0x15}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x40, 0xfd, 0x7c}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x7, 0x14}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xd, 0x2, 0x81, 0x48, 0x6}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xc1, &(0x7f0000000180)=@string={0xc1, 0x3, "d4878e397f33229ac444aa4b1d67155a7762ce1995e701d6fea88da607aaf339a6f7d95288b6374d77125e6b2c4ddf85380ab75fec7504c5ff49406d6ec047e1f5b7b8587fac91f1656f693907173186cce8bb70567e563d8ae77c86f0c1f78a0c1c87f8ebf88a64ba2e3ec3cc4038e78b37c05fafec1360ec695eb9b60e657c2d447dc0f111634125009776dce7f7450c7e005dfb149bc2e2ea78c72ebbdf2a278c440682c54936486238ecc5890cc4d0957f55f2759a9323775ffd783b06"}}]})

9.169465177s ago: executing program 5 (id=1493):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0002000071"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

9.086355788s ago: executing program 4 (id=1494):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/240)

8.937551272s ago: executing program 5 (id=1496):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x50)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffff, 0x400, 0x4, 0x91d, 0x0, "5f590469a322d928"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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")
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)

8.688535188s ago: executing program 3 (id=1497):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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")
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4096, 0xffffff9d)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r7, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c56dd", "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"}}, 0x110)

8.593438335s ago: executing program 1 (id=1498):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

8.453656667s ago: executing program 1 (id=1499):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.400481752s ago: executing program 4 (id=1500):
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
writev(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
shutdown(r4, 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})

7.409550817s ago: executing program 1 (id=1501):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setxattr(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x5453, 0x0)
ustat(0x11, 0x0)
r4 = memfd_create(0x0, 0x0)
r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r5, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

7.387221749s ago: executing program 0 (id=1502):
socket$inet_udp(0x2, 0x2, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleav'])
chdir(&(0x7f0000000240)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x2007ffc)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES64, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYRES32, @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa77, &(0x7f0000000280)="$eJzs3U2MG1cdAPCxd735LHFKQkNa2oQCrYDuNrshfETQVM2FqKm4Vaq4RGlaItKASCVoFalJTtxoFYUb4kOceqkAIdELinriUolG4tJT4cCBKEiROEBL4ire97z2P3bGTjY76/XvJ42fZ94bvzezM7Mzb2beK4CJVW9/NtqfF94+f/BfX/jnhhvfn+ikaLY/p7vGbqSupfHp8HsfTC2G166ePtovrBXz7c88XjxzpTPvpqIozhS7iotFs9h54dIb784/ffjsoXO733tz/+W7sewAADBpvnNx/97tf//r/Vs/fOvBA8W6zvR8ft5M45vTef+BdOKfz//rRe94rWvoNhPSTaehHtJN9UnXnU8jp1vfO1/Mfyb8bmNAunUl+U91Teu33DDO8nbcLGr12Z7xen12dvGavGhf18/UZk8eP/HCqYoKCiy7/zxUFMUug2HShtaWzk7QJ/61IdKshaFrCQEqFe8X3uRMrFm4M51fmx4u/ytP1vvPD8vg1tvf2WXf/kfLf/n3v9WWf3Gmtxwrl3+qaS1Z/t+edcRh+Qy/Na2/q+VYbnm58n60OY3H+wjx+aVRjz/596bC7zWGLOeg+wjjcn+h3vdr7z2T1WzQeo7bxVr1zRTm9fCtEN+9/8S/6bj8jYH+/rvq6v83LBWu8rKMNKwf03IbJnhoVXPYAcZAfG6uleT4+FxfjF9XEr++JH5DSfzGkvhNJfEwyf7w8s+K12tL1/nxmv7a1dPtnWXY+rBcz3ZPCj8xYnlifeSo9XHxud9R3Wn+8Xni4XKBavzpyLPHvvb8c5cWn/+vdbbM62l735XGm2nfupgS5PrCWK/eefa/2ZtPfUC6e0N57umTvv19W2+62ral3ym6jjM3lWNH73xbBqV7oDddM6TbkIZ4FySen2wM8+Xzj3xczetrOixvIyzHTChHPq5sTeF43Y1htcrb46Dn//P2uaNo1F44fuLY42k8b6d/mWqsuzF9zwqXG7hzw77/s6Poff9nc2d6o959XNiyNL3WfVxohunzA6YvpPH8f+57Uxva02eP/uDE88u98DDhTr3y6vePnDhx7Ee++OKLL50vVR+ZgLtt7uWXfjh36pVXHzv+0pEXj7147OTCvn0L8/P7vr6wd659Xj/XfXYPrCVL//SrLgkAAAAAAAAAAAAwrB8fOnjpb+989f3F9/+X3v/L7//nJ3/z+/8/De//x/fk83vw+T3ArX3i22lCA6szIV0jDZ8M5d0W8tke5vtUCjv9+KX3/3N2sV3XXJ77wvTYfm9OF5oTuKm9lJnQBknsL/CzKTyXwt8UUKHaL/pPTmFZ+9Z5W8/tU2iXYjzlv1tuzyS3Y5Lf/x7UrlM+/m9dgTKy/FbidcKqlxHo79+rrv3vtT50XTFUXhbDahuutVqtlcyv1dKLB7A6VN3/Z673zOHJP397/Y0hJ7vyZO/xMrZfCnei6v4vK8s/VyxO6vIPmf9y9//Z6f9u6ONf6DGveXv5/u+Xl9/vyrbYOWz+S8tfa8+S24HeNlr+H6b889I8UgyXf+vXYf3HG0JD+ijkv3HI/K+Ev//5UTNOGf4/5Z9X26MPD5v/4g/U6r3liPXG+f5frDfOroXlz217jrr8t9tR4/WUP0yycelndlTj0v/vIPE5jK+k8XwgzM85xP5OysvfO5qfr8j/B7aH36+V/H8btP2MS63SpPf/+40Ulu0Puf/fvD02+4zXu8YbfdbtWj3WwLj6wP0/w5gP7TOyVVCOcRxarValndHpCa9aVa//qq8Tqs6/6vVfJvb/G8/hY/+/MT72/xvjY/+/Mb5dr/jRUqe9MT72/xvXZ+z/N8bfF/KN/QPvKIn/dEn8zpL4+0viHyiJ/0xJ/O6S+AdL4h8qib+3JP7hkvjPlcR//pbxrdeKkvkfvXX8wk9K5l/r8vsok7r8MMni+3n2f5gc+f7PoP1/W0k8ML5+/taep577/Xebi+//z3TqQ/J9vANpvJGuneP1Uqw/mUpx76Txf4T41V7fAZMktp8R/78/UhIPjK/8nJf9GyZQrX+LPcO2WzXoPJ/x8sUUfimFX07hYymcTeFcCvekcH6Fysfd8dTv/rj/9drS9f6WED/s8/DxfaDYTtTCkOWJ9QOjPo8f2/Eb1Z3mf5uvgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFSm3v7cu3dHrSguvH3+4LOHj8/dmPJEJ0Wz/TndNdbozFcUj6dwKoW/Sl+uXT19tDu8nsJaMV/UilpnevHMlU5Om4qiOFPsKi4WzWLnhUtvvDv/9OGzh87tfu/N/Zfv3hoAAACAte/jAAAA//9paRsh")

7.281131128s ago: executing program 3 (id=1503):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x11, 0xa, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')

7.17251626s ago: executing program 5 (id=1504):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xc0083, &(0x7f0000000080)=ANY=[@ANYBLOB="04ff9b91c7a4caee3b4b65686bdb17ec4b00fdb6dc5aafeb5e5524bdaea5507f09a854e3845f031b03f5a1c71367da82a54eb42036fb170ea8b58db21904fc0dc2b81e2f6980171d9c4394201fe64cf3bbf6d4760bbeede68183a4be5af5a70bbc3b3031479d7e1483442db28087d12a13d5c23848f31ae070c07900d872029de8123649"], 0xfe, 0x2c6, &(0x7f0000000280)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
getpid()
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x844)
socket$kcm(0xa, 0x922000000003, 0x11)

6.849854698s ago: executing program 4 (id=1505):
syz_usb_connect(0x6, 0x3f, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESHEX], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000280))
r5 = epoll_create(0x81)
syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r6 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x701180)
ppoll(&(0x7f00000001c0)=[{r5, 0x424}, {r4}, {r5, 0x6000}, {r5, 0x102}], 0x4, &(0x7f0000000240)={0x77359400}, &(0x7f0000000440)={[0x2]}, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010703000000102505a8a4400001020301090224000101214009090400f8010701037f090501022000f60480090582020800"], &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x7, 0x17, 0xa6, 0x8, 0x7f}, 0x1a, &(0x7f0000000100)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x3, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x7, 0x3, 0x4, 0x9}]}, 0x2, [{0x0, 0x0}, {0xc9, &(0x7f0000000480)=ANY=[@ANYBLOB="c90345777f5628793c903872ffa5cfc6ae176284c161258ebc66f91a9754b47399b82bc7efe022b70802f3d451af4b2518080cd0b2b02a3aacc1ab13fb142de1976d59f7f728ec6ff74a8fc2a97951de6f58bd276a9c74a7a30078075794687bdc9ca5448ec053671ba8464b08e8873ef81adf0220"]}]})

6.023503537s ago: executing program 1 (id=1506):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

4.924102365s ago: executing program 5 (id=1507):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.835047161s ago: executing program 6 (id=1508):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0002000071"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

2.955983848s ago: executing program 1 (id=1509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x4008080)

2.841093299s ago: executing program 3 (id=1510):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_create1(0x80000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)

2.837157213s ago: executing program 0 (id=1511):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_io_uring_setup(0x172, 0x0, &(0x7f00000001c0), &(0x7f0000000140))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000540)=ANY=[], 0xf5, 0x5a76, &(0x7f0000006680)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r1, 0x0, 0x0, 0xe7c)
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa08889, &(0x7f00000002c0)=ANY=[], 0x1, 0x698, &(0x7f0000001280)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0)
listxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0xfffffffffffffd95)

2.754201531s ago: executing program 6 (id=1512):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000001ac0), 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

1.436637074s ago: executing program 5 (id=1513):
r0 = io_uring_setup(0x669, &(0x7f00000002c0))
socket$packet(0x11, 0x3, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r6)

989.657576ms ago: executing program 3 (id=1514):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

975.239929ms ago: executing program 1 (id=1515):
syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7a6, &(0x7f00000016c0)="$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")
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4096, 0xffffff9d)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000500)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "1c56dd", "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"}}, 0x110)

960.945641ms ago: executing program 4 (id=1516):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x50)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xffff, 0x400, 0x4, 0x91d, 0x0, "5f590469a322d928"})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$eJzs27tvHEUYAPBv9+yEvLAJ4ZEHYAiIiIcdOwFS0IBAogAJiSaUxnaikEuMYiORKAIHoVCiSPSIEom/gAoaBFRItNCjSBFKQ6A6tL7d3CN359fZC9zvJ609szPrmc+zcze7exfAwBrLfiQRuyPi14gYqWdbK4zVf926eXnmr5uXZ5Ko1d76I1mu9+fNyzNF1eK4XXnmSBqRfpLEwQ7tLly8dHa6Wp27kOcnFs+9N7Fw8dKzZ85Nn547PXd+6sSJ48cmX3h+6rm+xHlP1tcDH84f2v/a29femDl57Z0fv06K+Nvi6JOxXoVP1Gp9bq5ce5rSyVCJHWFNKhGRDdfw8vwfiUo0Bm8kXv241M4Bm6qW61K8VAP+x5IouwdAOYo3+uz6t9i2bvVRvhsv1S+Asrhv5Vu9ZCjSvM5w2/VtP41FxMmlv7/ItljxPoQLawBg477N1j/PdFr/pXF/U72782dDo/mzlL0RcW9E7IuI+yKW6z4QEQ+usf22hyTbI6Jt/ZNeX19kq5Ot/17Mn221rv+K1V+MVvLcnuX4h5NTZ6pzR/P/yZEY3p7lJ3u08d0rv3zWrax5/ZdtWfvFWjDvx/Wh7a3HzE4vTm8k5mY3rkQcGOoUf3J7tZlExP6IOLDONs489dWhbmUrx99DH5bDtS8jnqyP/1K0xV9Iej+fnLgrqnNHJ4qz4k4//Xz1zW7tbyj+PsjGf2fH8/92/KNJ8/PahbW3cfW3T7te04yv6/xv7NiW//5genHxwmTEtuT1eqeb9081ji3yRf0s/iOHO8//vdH4TxyMiOwkfigiHo6IR/KxezQiHouIwz3i/+Hlx9/tVvZvGP/ZtvEfba3SNv6NxLZo39M5UTn7/Tetf7GRXN3r3/HaSNPhvV7/ivNhNf1a39kMAAAA/z1pROyOJB2/nU7T8fH6Z/j3xc60Or+w+PSp+ffPz9a/IzAaw2lxp2uk6X7oZH5ZX+Sn2vLH8vvGn1d2LOfHZ+ars2UHDwNuV6f5X6mX/V4pu3fApvOxMhhc5j8MLvMfBpf5D4Orw/zfUUY/gK3X6f3/oxL6AWy9tvnvsR8MENf/MLjMfxhczfM/KbEfwJZa2BErf0leQuKORKQ961zZeBPFOboF4SSbPAt2b0qf8yncWpQs1Xev5Q/WOhSV9IIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQZ/8EAAD//xL/3co=")
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0xd8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)

52.23205ms ago: executing program 3 (id=1517):
r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
writev(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4)
shutdown(r4, 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8})
ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})

0s ago: executing program 6 (id=1518):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
removexattr(0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa})
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4004810)
bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)

kernel console output (not intermixed with test programs):

p0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  202.532922][  T119] usb 5-1: Using ep0 maxpacket: 8
[  202.617763][  T119] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  202.702586][  T119] usb 5-1: config 0 has no interface number 0
[  202.776401][  T119] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.941367][  T119] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  203.164808][  T119] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  203.261306][  T119] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  203.354344][  T119] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  203.428048][  T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.473843][  T119] usb 5-1: config 0 descriptor??
[  203.507149][  T119] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  203.917648][ T7149] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[  203.937343][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.946254][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.821613][ T5987] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  204.832993][   T48] usb 5-1: USB disconnect, device number 7
[  204.863341][   T48] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  205.001931][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  205.010944][ T5987] usb 1-1: Using ep0 maxpacket: 8
[  205.046463][ T5987] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  205.064612][ T7169] netlink: 'syz.4.394': attribute type 3 has an invalid length.
[  205.088937][ T5987] usb 1-1: config 0 has no interface number 0
[  205.100735][ T7169] netlink: 'syz.4.394': attribute type 3 has an invalid length.
[  205.110378][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  205.360606][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  205.361388][   T24] usb 3-1: Using ep0 maxpacket: 16
[  205.382974][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  205.394558][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  205.547101][ T7177] loop3: detected capacity change from 0 to 512
[  206.368476][ T5987] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  206.384802][ T7177] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  206.403722][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  206.691191][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.725703][ T7177] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.393: inline data xattr refers to an external xattr inode
[  206.741621][ T7177] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.393: couldn't read orphan inode 17 (err -117)
[  206.760973][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  206.778611][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.781035][ T5987] usb 1-1: config 0 descriptor??
[  206.816412][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  206.848406][   T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  206.868698][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.877232][   T24] usb 3-1: Product: syz
[  206.881812][   T24] usb 3-1: Manufacturer: syz
[  206.889767][   T24] usb 3-1: SerialNumber: syz
[  206.918806][   T24] usb 3-1: config 0 descriptor??
[  207.058286][ T7160] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  207.094759][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.372632][   T24] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  207.378572][   T24] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  207.385227][   T24] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  207.390236][ T5987] usb 1-1: can't set config #0, error -71
[  207.391108][   T24] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  207.391131][   T24] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[  207.400029][   T24] usb 3-1: USB disconnect, device number 8
[  207.420209][   T24] mcba_usb 3-1:0.0 can0: device disconnected
[  207.468642][ T5987] usb 1-1: USB disconnect, device number 5
[  212.135776][ T5987] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  212.755714][ T5937] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  212.912015][ T5937] usb 1-1: Using ep0 maxpacket: 8
[  212.933146][ T5937] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  212.948766][ T5937] usb 1-1: config 0 has no interface number 0
[  212.986742][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  213.016401][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  213.088032][ T5937] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  213.249631][ T5937] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  214.216941][ T5937] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  214.572782][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.586067][ T5937] usb 1-1: config 0 descriptor??
[  217.234067][ T5937] usb 1-1: can't set config #0, error -71
[  217.281285][ T5937] usb 1-1: USB disconnect, device number 6
[  217.751109][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  217.876227][ T7304] xt_hashlimit: max too large, truncated to 1048576
[  218.110902][   T24] usb 3-1: Using ep0 maxpacket: 8
[  218.123339][   T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  218.160113][   T24] usb 3-1: config 0 has no interface number 0
[  218.470249][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  218.933010][   T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  218.945196][   T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  218.959033][   T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  218.997730][ T7288] loop3: detected capacity change from 0 to 32768
[  219.006642][   T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  219.021414][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.050392][ T7288] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.439 (7288)
[  219.097942][   T24] usb 3-1: config 0 descriptor??
[  219.901322][  T972] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  219.922186][ T7288] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.999954][ T7288] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  220.101260][ T7288] BTRFS error (device loop3): cannot disable free-space-tree
[  220.290037][ T7288] BTRFS error (device loop3): open_ctree failed: -22
[  220.298558][   T24] usb 3-1: can't set config #0, error -71
[  220.308408][  T972] usb 1-1: Using ep0 maxpacket: 16
[  220.317217][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  220.784214][   T24] usb 3-1: USB disconnect, device number 9
[  221.067926][  T972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  221.078651][  T972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  221.097851][  T972] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  221.109713][  T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.118716][  T972] usb 1-1: Product: syz
[  221.138802][  T972] usb 1-1: Manufacturer: syz
[  221.148118][  T972] usb 1-1: SerialNumber: syz
[  221.225882][  T972] usb 1-1: config 0 descriptor??
[  221.242300][ T7309] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  221.335801][  T972] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  221.377468][  T972] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  221.392826][  T972] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  221.409590][  T972] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  221.430979][  T972] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  221.470937][ T5987] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  221.498843][  T972] usb 1-1: USB disconnect, device number 7
[  221.516725][  T972] mcba_usb 1-1:0.0 can0: device disconnected
[  221.630908][ T5987] usb 5-1: Using ep0 maxpacket: 8
[  221.637969][ T5987] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  221.650689][ T5987] usb 5-1: config 0 has no interface number 0
[  221.840297][ T5987] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  221.855509][ T5987] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  221.869590][ T5987] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  221.880640][ T5987] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  221.893700][ T5987] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  221.902822][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.223947][ T5987] usb 5-1: config 0 descriptor??
[  222.261405][ T5987] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  223.148988][   T24] usb 5-1: USB disconnect, device number 8
[  223.189851][   T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  226.348433][ T7378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.907580][ T7393] loop0: detected capacity change from 0 to 1024
[  227.945872][ T5987] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  228.131107][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  228.421395][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.511985][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.587790][ T5987] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  228.701016][ T5993] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  228.873988][ T7407] loop2: detected capacity change from 0 to 40427
[  228.922154][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.947217][ T7407] F2FS-fs (loop2): invalid crc value
[  229.107202][ T7407] F2FS-fs (loop2): Start checkpoint disabled!
[  229.127964][ T7407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  229.251610][ T7407] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  230.223556][ T5987] usb 4-1: config 0 descriptor??
[  230.271143][ T5993] usb 5-1: Using ep0 maxpacket: 16
[  230.319066][ T5987] usb 4-1: can't set config #0, error -71
[  230.349532][ T5993] usb 5-1: device descriptor read/all, error -71
[  230.384798][ T5987] usb 4-1: USB disconnect, device number 4
[  230.551373][ T6040] kworker/u8:11: attempt to access beyond end of device
[  230.551373][ T6040] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  230.682581][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: kworker/u8:11 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) 
[  230.682617][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  230.682634][ T6040] Workqueue: writeback wb_workfn (flush-7:2)
[  230.682673][ T6040] Call Trace:
[  230.682689][ T6040]  <TASK>
[  230.682700][ T6040]  dump_stack_lvl+0x189/0x250
[  230.682743][ T6040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.682773][ T6040]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  230.682801][ T6040]  ? __pfx_queue_work_on+0x10/0x10
[  230.682840][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.682872][ T6040]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  230.682898][ T6040]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.682943][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.682973][ T6040]  ? f2fs_hw_is_readonly+0x39b/0x470
[  230.683024][ T6040]  f2fs_handle_critical_error+0x37c/0x540
[  230.683060][ T6040]  f2fs_write_end_io+0x495/0x810
[  230.683090][ T6040]  ? blkg_put+0x22/0x240
[  230.683152][ T6040]  __submit_merged_bio+0x27a/0x6a0
[  230.683205][ T6040]  __submit_merged_write_cond+0x255/0x530
[  230.683260][ T6040]  f2fs_write_data_pages+0x261d/0x3000
[  230.683337][ T6040]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.683472][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.683507][ T6040]  ? f2fs_write_meta_pages+0x357/0x450
[  230.683548][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.683578][ T6040]  ? __lock_acquire+0xab9/0xd20
[  230.683611][ T6040]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  230.683644][ T6040]  do_writepages+0x32e/0x550
[  230.683687][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.683717][ T6040]  ? reacquire_held_locks+0x127/0x1d0
[  230.683750][ T6040]  ? writeback_sb_inodes+0x372/0x1000
[  230.683799][ T6040]  __writeback_single_inode+0x145/0xff0
[  230.683839][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.683869][ T6040]  ? do_raw_spin_unlock+0x122/0x240
[  230.683915][ T6040]  writeback_sb_inodes+0x6b5/0x1000
[  230.683970][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684017][ T6040]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  230.684110][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684140][ T6040]  ? rcu_is_watching+0x15/0xb0
[  230.684173][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684216][ T6040]  wb_writeback+0x43b/0xaf0
[  230.684263][ T6040]  ? queue_io+0x311/0x590
[  230.684302][ T6040]  ? __pfx_wb_writeback+0x10/0x10
[  230.684350][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.684385][ T6040]  wb_workfn+0x409/0xef0
[  230.684436][ T6040]  ? __pfx_wb_workfn+0x10/0x10
[  230.684471][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684501][ T6040]  ? __lock_acquire+0xab9/0xd20
[  230.684544][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684578][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684613][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.684637][ T6040]  ? process_scheduled_works+0x9ef/0x17b0
[  230.684667][ T6040]  ? process_scheduled_works+0x9ef/0x17b0
[  230.684701][ T6040]  process_scheduled_works+0xae1/0x17b0
[  230.684775][ T6040]  ? __pfx_process_scheduled_works+0x10/0x10
[  230.684823][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.684866][ T6040]  worker_thread+0x8a0/0xda0
[  230.684937][ T6040]  kthread+0x711/0x8a0
[  230.684981][ T6040]  ? __pfx_worker_thread+0x10/0x10
[  230.685013][ T6040]  ? __pfx_kthread+0x10/0x10
[  230.685047][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.685083][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.685107][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  230.685137][ T6040]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.685162][ T6040]  ? __pfx_kthread+0x10/0x10
[  230.685203][ T6040]  ret_from_fork+0x3fc/0x770
[  230.685236][ T6040]  ? __pfx_ret_from_fork+0x10/0x10
[  230.685274][ T6040]  ? __switch_to_asm+0x39/0x70
[  230.685309][ T6040]  ? __switch_to_asm+0x33/0x70
[  230.685343][ T6040]  ? __pfx_kthread+0x10/0x10
[  230.685384][ T6040]  ret_from_fork_asm+0x1a/0x30
[  230.685444][ T6040]  </TASK>
[  230.685454][ T6040] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  232.039508][ T6040] CPU: 0 UID: 0 PID: 6040 Comm: kworker/u8:11 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) 
[  232.039553][ T6040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  232.039570][ T6040] Workqueue: writeback wb_workfn (flush-7:2)
[  232.039609][ T6040] Call Trace:
[  232.039619][ T6040]  <TASK>
[  232.039630][ T6040]  dump_stack_lvl+0x189/0x250
[  232.039670][ T6040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.039699][ T6040]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  232.039725][ T6040]  ? __pfx_queue_work_on+0x10/0x10
[  232.039758][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.039787][ T6040]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.039812][ T6040]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.039856][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.039884][ T6040]  ? f2fs_hw_is_readonly+0x39b/0x470
[  232.039935][ T6040]  f2fs_handle_critical_error+0x37c/0x540
[  232.039971][ T6040]  f2fs_write_end_io+0x495/0x810
[  232.039999][ T6040]  ? blkg_put+0x22/0x240
[  232.040062][ T6040]  __submit_merged_bio+0x27a/0x6a0
[  232.040114][ T6040]  __submit_merged_write_cond+0x255/0x530
[  232.040168][ T6040]  f2fs_write_data_pages+0x261d/0x3000
[  232.040249][ T6040]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  232.040394][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.040427][ T6040]  ? f2fs_write_meta_pages+0x357/0x450
[  232.040469][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.040497][ T6040]  ? __lock_acquire+0xab9/0xd20
[  232.040531][ T6040]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  232.040580][ T6040]  do_writepages+0x32e/0x550
[  232.040622][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.040650][ T6040]  ? reacquire_held_locks+0x127/0x1d0
[  232.040681][ T6040]  ? writeback_sb_inodes+0x372/0x1000
[  232.040729][ T6040]  __writeback_single_inode+0x145/0xff0
[  232.040766][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.040793][ T6040]  ? do_raw_spin_unlock+0x122/0x240
[  232.040838][ T6040]  writeback_sb_inodes+0x6b5/0x1000
[  232.040892][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.040940][ T6040]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  232.041038][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041066][ T6040]  ? rcu_is_watching+0x15/0xb0
[  232.041097][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041139][ T6040]  wb_writeback+0x43b/0xaf0
[  232.041186][ T6040]  ? queue_io+0x311/0x590
[  232.041225][ T6040]  ? __pfx_wb_writeback+0x10/0x10
[  232.041273][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.041306][ T6040]  wb_workfn+0x409/0xef0
[  232.041358][ T6040]  ? __pfx_wb_workfn+0x10/0x10
[  232.041393][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041421][ T6040]  ? __lock_acquire+0xab9/0xd20
[  232.041465][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041498][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041533][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.041559][ T6040]  ? process_scheduled_works+0x9ef/0x17b0
[  232.041588][ T6040]  ? process_scheduled_works+0x9ef/0x17b0
[  232.041621][ T6040]  process_scheduled_works+0xae1/0x17b0
[  232.041698][ T6040]  ? __pfx_process_scheduled_works+0x10/0x10
[  232.041740][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041783][ T6040]  worker_thread+0x8a0/0xda0
[  232.041856][ T6040]  kthread+0x711/0x8a0
[  232.041898][ T6040]  ? __pfx_worker_thread+0x10/0x10
[  232.041928][ T6040]  ? __pfx_kthread+0x10/0x10
[  232.041961][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.041996][ T6040]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.042018][ T6040]  ? srso_alias_return_thunk+0x5/0xfbef5
[  232.042046][ T6040]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.042071][ T6040]  ? __pfx_kthread+0x10/0x10
[  232.042110][ T6040]  ret_from_fork+0x3fc/0x770
[  232.042142][ T6040]  ? __pfx_ret_from_fork+0x10/0x10
[  232.042180][ T6040]  ? __switch_to_asm+0x39/0x70
[  232.042214][ T6040]  ? __switch_to_asm+0x33/0x70
[  232.042246][ T6040]  ? __pfx_kthread+0x10/0x10
[  232.042285][ T6040]  ret_from_fork_asm+0x1a/0x30
[  232.042345][ T6040]  </TASK>
[  232.717019][ T6040] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  236.179129][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  236.690912][   T24] usb 5-1: Using ep0 maxpacket: 8
[  236.737403][   T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  236.783348][   T24] usb 5-1: config 0 has no interface number 0
[  236.831253][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  236.909947][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  236.957914][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  237.205094][   T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  237.220700][   T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  237.232198][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.266850][   T24] usb 5-1: config 0 descriptor??
[  237.402874][ T7482] loop0: detected capacity change from 0 to 512
[  237.561159][ T5987] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  237.569656][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  238.106051][ T7482] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  238.155342][ T5987] usb 3-1: device descriptor read/64, error -32
[  238.169967][   T24] usb 5-1: can't set config #0, error -71
[  238.180191][   T24] usb 5-1: USB disconnect, device number 11
[  238.196861][ T7482] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.501: inline data xattr refers to an external xattr inode
[  238.217440][ T7482] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.501: couldn't read orphan inode 17 (err -117)
[  238.249796][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.520442][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.561264][ T5987] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  238.740958][ T5987] usb 3-1: Using ep0 maxpacket: 16
[  238.762183][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  238.779453][ T5987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  238.797604][ T5987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  238.819478][ T5987] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  238.830282][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.874927][ T5987] usb 3-1: Product: syz
[  238.893225][ T5987] usb 3-1: Manufacturer: syz
[  238.907039][ T5987] usb 3-1: SerialNumber: syz
[  238.956375][ T5987] usb 3-1: config 0 descriptor??
[  239.113067][ T7479] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  239.156073][ T5987] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  239.291669][ T7506] xt_CT: You must specify a L4 protocol and not use inversions on it
[  239.940087][ T5987] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  239.948226][ T5987] mcba_usb 3-1:0.0 can0: failed tx_urb -90
[  239.954177][ T5987] mcba_usb 3-1:0.0 can0: Failed to send cmd (169)
[  239.960617][ T5987] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected
[  240.073493][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.511'.
[  240.127977][ T5987] usb 3-1: USB disconnect, device number 11
[  240.229567][ T5987] mcba_usb 3-1:0.0 can0: device disconnected
[  241.658338][ T7530] loop3: detected capacity change from 0 to 764
[  242.115791][ T7538] Symlink component flag not implemented
[  242.122196][ T7538] Symlink component flag not implemented (101)
[  243.791341][ T5845] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  244.010855][ T5845] usb 1-1: Using ep0 maxpacket: 8
[  244.038005][ T5845] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  244.056020][ T5845] usb 1-1: config 0 has no interface number 0
[  244.069164][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  244.123491][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  244.141356][ T7555] capability: warning: `syz.5.524' uses deprecated v2 capabilities in a way that may be insecure
[  244.357007][ T5845] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  244.368743][ T5845] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  244.381950][ T5845] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  244.392327][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.403458][ T5937] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  244.421927][ T5845] usb 1-1: config 0 descriptor??
[  245.160521][ T5937] usb 4-1: device descriptor read/64, error -71
[  245.329457][ T5845] usb 1-1: can't set config #0, error -71
[  245.354191][ T5845] usb 1-1: USB disconnect, device number 8
[  245.441719][ T5937] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  245.610970][ T5937] usb 4-1: device descriptor read/64, error -71
[  245.754860][ T5937] usb usb4-port1: attempt power cycle
[  246.803160][ T7589] loop0: detected capacity change from 0 to 764
[  247.568360][ T5993] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  247.576081][ T5937] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  247.927462][ T7595] Symlink component flag not implemented
[  247.934073][ T7595] Symlink component flag not implemented (101)
[  248.670899][ T5993] usb 5-1: Using ep0 maxpacket: 16
[  248.832170][ T5937] usb 4-1: device descriptor read/8, error -71
[  248.909758][ T5993] usb 5-1: unable to read config index 0 descriptor/start: -71
[  248.933205][ T6049] IPVS: starting estimator thread 0...
[  248.951776][ T5993] usb 5-1: can't read configurations, error -71
[  249.084563][ T7599] IPVS: using max 24 ests per chain, 57600 per kthread
[  249.093852][ T7605] loop3: detected capacity change from 0 to 764
[  249.381242][ T7612] loop2: detected capacity change from 0 to 4096
[  249.509279][ T7615] Symlink component flag not implemented
[  249.515630][ T7615] Symlink component flag not implemented (101)
[  250.245861][ T7612] ntfs3(loop2): ino=1a, mi_enum_attr
[  250.251394][ T7612] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  250.707644][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'.
[  251.970886][ T5937] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  253.110668][ T5937] usb 3-1: device descriptor read/64, error -71
[  254.267495][ T5937] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  255.781244][ T5845] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  255.989556][ T7676] loop3: detected capacity change from 0 to 764
[  256.354557][ T5845] usb 1-1: device not accepting address 9, error -71
[  256.487301][ T7684] syz.0.564: attempt to access beyond end of device
[  256.487301][ T7684] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  256.500574][ T7684] FAT-fs (loop1): unable to read boot sector
[  256.768744][ T7686] Symlink component flag not implemented
[  256.775266][ T7686] Symlink component flag not implemented (101)
[  257.264841][ T7683] loop4: detected capacity change from 0 to 4096
[  257.692877][ T7683] ntfs3(loop4): ino=1a, mi_enum_attr
[  257.698282][ T7683] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  257.728923][ T7690] loop2: detected capacity change from 0 to 764
[  258.286027][ T7696] Symlink component flag not implemented
[  258.291850][ T7696] Symlink component flag not implemented (101)
[  259.611140][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'.
[  260.176482][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  260.211107][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  262.062770][ T7730] loop4: detected capacity change from 0 to 764
[  262.992517][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[  263.259411][ T7741] Symlink component flag not implemented
[  263.265740][ T7741] Symlink component flag not implemented (101)
[  264.759967][   T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  265.081431][   T48] usb 1-1: Using ep0 maxpacket: 8
[  265.884961][ T7759] loop2: detected capacity change from 0 to 512
[  266.107795][ T7759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  266.205792][ T7759] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.588: inline data xattr refers to an external xattr inode
[  266.205962][   T48] usb 1-1: device descriptor read/all, error -71
[  266.230898][ T7759] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.588: couldn't read orphan inode 17 (err -117)
[  266.281402][ T7759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.436368][ T7755] loop4: detected capacity change from 0 to 8192
[  266.565646][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.350342][ T7807] loop0: detected capacity change from 0 to 512
[  268.929840][ T7807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  268.968888][ T7807] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.608: inline data xattr refers to an external xattr inode
[  268.986716][ T7807] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.608: couldn't read orphan inode 17 (err -117)
[  269.008378][ T7807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.048506][ T7812] 9pnet_fd: Insufficient options for proto=fd
[  269.996005][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.263024][ T5845] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  270.470977][ T5845] usb 3-1: device descriptor read/64, error -71
[  270.931258][ T5845] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  271.211681][ T5845] usb 3-1: device descriptor read/64, error -71
[  271.370899][ T5845] usb usb3-port1: attempt power cycle
[  271.629503][ T7847] 9pnet_fd: Insufficient options for proto=fd
[  271.741278][ T5845] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  271.811698][ T5845] usb 3-1: device descriptor read/8, error -71
[  273.459540][ T7864] loop4: detected capacity change from 0 to 512
[  273.469913][ T5845] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  273.611190][ T7864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  273.655470][ T7864] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.628: inline data xattr refers to an external xattr inode
[  273.677326][ T7864] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.628: couldn't read orphan inode 17 (err -117)
[  273.774700][ T7864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.790848][ T5845] usb 3-1: device descriptor read/8, error -71
[  273.931388][ T5845] usb usb3-port1: unable to enumerate USB device
[  274.105807][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.327557][ T7894] 9pnet_fd: Insufficient options for proto=fd
[  275.451115][ T5937] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  275.760991][ T5937] usb 4-1: Using ep0 maxpacket: 16
[  275.771724][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  275.794178][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  275.842109][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  276.579998][ T7912] loop2: detected capacity change from 0 to 512
[  276.863124][ T7912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  276.996224][ T7912] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.645: inline data xattr refers to an external xattr inode
[  277.011878][ T5937] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  277.021073][ T7912] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.645: couldn't read orphan inode 17 (err -117)
[  277.033970][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.042712][ T5937] usb 4-1: Product: syz
[  277.047592][ T5937] usb 4-1: Manufacturer: syz
[  277.056601][ T7912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.076029][ T5937] usb 4-1: SerialNumber: syz
[  277.102478][ T5937] usb 4-1: config 0 descriptor??
[  277.115331][ T7890] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  277.204637][ T5937] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  277.221277][ T5937] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  277.231548][ T5937] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  277.237411][ T5937] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  277.281002][ T5937] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  277.347881][ T5937] usb 4-1: USB disconnect, device number 9
[  277.387694][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.408532][ T5937] mcba_usb 4-1:0.0 can0: device disconnected
[  279.911580][ T5993] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  280.100983][ T5993] usb 1-1: Using ep0 maxpacket: 8
[  280.141099][ T5993] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  280.394227][ T5993] usb 1-1: config 0 has no interface number 0
[  280.408034][ T5993] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  280.420385][ T5993] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  280.445140][ T5993] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  281.165287][ T5993] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  281.179080][ T5993] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  281.188733][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.199819][ T5993] usb 1-1: config 0 descriptor??
[  281.491404][ T5937] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  281.524460][ T5993] usb 1-1: can't set config #0, error -71
[  281.566930][ T5993] usb 1-1: USB disconnect, device number 13
[  281.713086][ T5937] usb 3-1: Using ep0 maxpacket: 32
[  282.100588][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.180981][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.254838][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  282.330961][ T5845] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  282.491128][ T5845] usb 4-1: Using ep0 maxpacket: 8
[  282.513075][ T5845] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  282.540107][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.553789][ T5937] usb 3-1: config 0 descriptor??
[  282.564269][ T5937] hub 3-1:0.0: USB hub found
[  282.577640][ T5845] usb 4-1: config 0 has no interface number 0
[  282.659249][ T5845] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  282.714900][ T7999] loop0: detected capacity change from 0 to 512
[  282.760731][ T7999] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  283.080197][ T7999] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.674: inline data xattr refers to an external xattr inode
[  283.136231][ T7999] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.674: couldn't read orphan inode 17 (err -117)
[  283.202695][ T7999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.264247][ T5845] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  283.286932][ T5937] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  283.309645][ T5937] usbhid 3-1:0.0: can't add hid device: -71
[  283.335546][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  283.337710][ T5845] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  283.464106][ T5937] usb 3-1: USB disconnect, device number 18
[  283.476705][ T5845] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  283.489885][ T5845] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  283.506479][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.552811][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.562141][ T5845] usb 4-1: config 0 descriptor??
[  283.814284][ T5845] usb 4-1: can't set config #0, error -71
[  284.069657][ T5845] usb 4-1: USB disconnect, device number 10
[  286.439285][ T8032] loop3: detected capacity change from 0 to 764
[  287.442869][ T8041] Symlink component flag not implemented
[  287.700986][ T8041] Symlink component flag not implemented (101)
[  287.945648][ T8043] loop4: detected capacity change from 0 to 512
[  288.026767][ T8043] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  288.487103][ T8043] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.694: inline data xattr refers to an external xattr inode
[  288.511997][ T8043] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.694: couldn't read orphan inode 17 (err -117)
[  288.570346][ T8043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.324075][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.521181][ T5937] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  289.811003][ T5937] usb 4-1: Using ep0 maxpacket: 8
[  289.850867][ T5937] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  290.158710][ T5937] usb 4-1: config 0 has no interface number 0
[  290.439029][ T5937] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  290.453669][ T5937] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  290.509249][ T5937] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  290.520802][ T5937] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  290.535790][ T5937] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  290.545375][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.598374][ T5937] usb 4-1: config 0 descriptor??
[  290.934033][ T8088] loop2: detected capacity change from 0 to 512
[  291.135073][ T8088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  291.223455][ T8088] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.709: inline data xattr refers to an external xattr inode
[  291.241583][ T8088] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.709: couldn't read orphan inode 17 (err -117)
[  291.279777][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.694534][ T5937] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  291.716015][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.796284][ T5937] usb 4-1: USB disconnect, device number 11
[  291.838513][ T5937] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  297.699025][ T8154] loop2: detected capacity change from 0 to 512
[  298.088702][ T8151] loop4: detected capacity change from 0 to 512
[  298.089696][ T8147] loop0: detected capacity change from 0 to 764
[  298.114358][ T8154] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  298.120436][ T8151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  298.175598][ T8154] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.734: inline data xattr refers to an external xattr inode
[  298.193948][ T8154] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.734: couldn't read orphan inode 17 (err -117)
[  298.194761][ T8151] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.731: inline data xattr refers to an external xattr inode
[  298.210096][ T8154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.225114][ T8151] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.731: couldn't read orphan inode 17 (err -117)
[  298.260661][ T8151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.765169][ T8164] Symlink component flag not implemented
[  298.771025][ T8164] Symlink component flag not implemented (101)
[  299.018547][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.031765][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.742227][ T8199] loop0: detected capacity change from 0 to 764
[  303.010927][ T5987] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  303.437480][ T8211] Symlink component flag not implemented
[  303.443322][ T8211] Symlink component flag not implemented (101)
[  303.526484][ T8209] loop3: detected capacity change from 0 to 512
[  303.713379][ T8209] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  303.771402][ T8209] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.751: inline data xattr refers to an external xattr inode
[  303.791134][ T8209] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.751: couldn't read orphan inode 17 (err -117)
[  303.839837][ T8209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.406486][ T8218] loop2: detected capacity change from 0 to 512
[  304.578150][ T8218] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  304.680627][ T8218] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.754: inline data xattr refers to an external xattr inode
[  304.711363][ T8218] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.754: couldn't read orphan inode 17 (err -117)
[  304.725769][ T8218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.788226][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.118278][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.356645][ T5993] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  307.551780][ T5993] usb 1-1: Using ep0 maxpacket: 32
[  307.585933][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.647369][ T8252] loop4: detected capacity change from 0 to 4096
[  307.675835][ T5993] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.700975][ T5993] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  307.718055][ T8252] ntfs3(loop4): ino=1a, mi_enum_attr
[  307.723541][ T8252] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  307.742928][ T5993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.754413][ T5993] usb 1-1: config 0 descriptor??
[  307.766381][ T5993] hub 1-1:0.0: USB hub found
[  307.981610][   T48] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  308.328725][   T48] usb 3-1: Using ep0 maxpacket: 8
[  308.427706][ T5993] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  308.457135][   T48] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  308.527283][ T8258] loop3: detected capacity change from 0 to 764
[  308.541903][   T48] usb 3-1: config 0 has no interface number 0
[  308.573050][   T48] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.634374][ T5993] usbhid 1-1:0.0: can't add hid device: -71
[  308.640462][ T5993] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  308.668516][   T48] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  308.733895][   T48] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.789202][   T48] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  308.971346][ T5993] usb 1-1: USB disconnect, device number 14
[  309.047640][ T8268] Symlink component flag not implemented
[  309.053537][ T8268] Symlink component flag not implemented (101)
[  309.962212][   T48] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  309.971379][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.001881][   T48] usb 3-1: config 0 descriptor??
[  310.122011][ T8273] loop4: detected capacity change from 0 to 512
[  310.703235][ T8273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  310.810635][ T8273] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.773: inline data xattr refers to an external xattr inode
[  310.851647][ T8273] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.773: couldn't read orphan inode 17 (err -117)
[  310.867948][ T8273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.955062][   T48] usb 3-1: can't set config #0, error -71
[  310.981461][   T48] usb 3-1: USB disconnect, device number 19
[  311.190654][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.755151][ T8300] loop0: detected capacity change from 0 to 764
[  312.411507][ T8305] Symlink component flag not implemented
[  312.417243][ T8305] Symlink component flag not implemented (101)
[  314.661146][ T8316] loop3: detected capacity change from 0 to 512
[  314.701911][ T8316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  314.778681][ T8316] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.788: inline data xattr refers to an external xattr inode
[  314.796675][ T8316] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.788: couldn't read orphan inode 17 (err -117)
[  314.831761][ T8316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.333050][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.402904][ T8324] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  316.671252][ T5987] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  316.852901][ T5987] usb 1-1: Using ep0 maxpacket: 8
[  316.863165][ T5987] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  316.880806][ T5987] usb 1-1: config 0 has no interface number 0
[  316.909435][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  316.957741][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  317.367475][ T5987] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  317.390267][ T5987] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  317.478800][ T5987] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  317.644792][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.800976][ T5987] usb 1-1: config 0 descriptor??
[  318.865889][ T8376] loop4: detected capacity change from 0 to 764
[  318.902971][ T5845] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  319.070831][  T972] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  319.231662][  T972] usb 4-1: Using ep0 maxpacket: 32
[  319.250868][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  319.257989][ T5845] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  319.268488][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.280384][ T5845] usb 3-1: config 0 has no interface number 0
[  319.316560][ T5845] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  319.358052][ T8385] Symlink component flag not implemented
[  319.364166][ T8385] Symlink component flag not implemented (101)
[  319.589668][ T5845] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  319.660926][ T5845] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  319.738568][ T5845] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  319.838214][ T5845] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  319.916919][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.978008][ T5987] usb 1-1: can't set config #0, error -71
[  319.986041][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.999732][  T972] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  320.008913][  T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.039627][ T5845] usb 3-1: config 0 descriptor??
[  320.041377][  T972] usb 4-1: config 0 descriptor??
[  320.050257][ T5987] usb 1-1: USB disconnect, device number 15
[  320.080078][  T972] hub 4-1:0.0: USB hub found
[  320.224702][ T5845] usb 3-1: can't set config #0, error -71
[  320.257290][ T5845] usb 3-1: USB disconnect, device number 20
[  320.271495][  T972] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  320.494736][  T972] usbhid 4-1:0.0: can't add hid device: -71
[  320.522214][  T972] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  320.701790][  T972] usb 4-1: USB disconnect, device number 12
[  321.606657][ T8419] loop2: detected capacity change from 0 to 764
[  321.706373][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  321.715904][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  322.162232][ T8430] Symlink component flag not implemented
[  322.168045][ T8430] Symlink component flag not implemented (101)
[  324.540945][ T5987] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  324.608199][ T8461] loop4: detected capacity change from 0 to 4096
[  325.707220][ T8461] ntfs3(loop4): ino=1a, mi_enum_attr
[  325.712733][ T8461] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  325.986154][ T8473] loop2: detected capacity change from 0 to 512
[  326.511258][ T8473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  326.556297][ T8473] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #17: comm syz.2.843: inline data xattr refers to an external xattr inode
[  326.582518][ T5987] usb 4-1: Using ep0 maxpacket: 8
[  326.591244][ T8473] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.843: couldn't read orphan inode 17 (err -117)
[  326.605494][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.989252][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.170940][ T5987] usb 4-1: device descriptor read/all, error -71
[  327.437907][ T8491] loop2: detected capacity change from 0 to 764
[  328.196435][ T8511] loop0: detected capacity change from 0 to 764
[  329.199349][ T5993] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  329.260933][ T5987] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  329.411197][ T5993] usb 5-1: Using ep0 maxpacket: 8
[  329.435836][ T8520] Symlink component flag not implemented
[  329.442428][ T8520] Symlink component flag not implemented (101)
[  329.469328][ T5993] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  329.561024][ T5987] usb 4-1: Using ep0 maxpacket: 32
[  329.671161][ T5993] usb 5-1: config 0 has no interface number 0
[  329.688201][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.764114][ T8523] loop2: detected capacity change from 0 to 4096
[  329.800925][ T5993] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  329.832630][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.886004][ T5993] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  329.935132][ T5987] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  329.981776][ T5993] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  330.008919][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.037649][ T8523] ntfs3(loop2): ino=1a, mi_enum_attr
[  330.043079][ T8523] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  330.077077][ T5993] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  330.094697][ T5987] usb 4-1: config 0 descriptor??
[  330.148830][ T5987] hub 4-1:0.0: USB hub found
[  330.155919][ T5993] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  330.209070][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.256912][ T5993] usb 5-1: config 0 descriptor??
[  330.295580][ T5993] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  330.355126][ T5987] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  330.691188][ T5987] usbhid 4-1:0.0: can't add hid device: -71
[  330.697295][ T5987] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  331.347623][ T8539] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.869'.
[  331.361889][ T5987] usb 4-1: USB disconnect, device number 15
[  331.443337][ T5945] usb 5-1: USB disconnect, device number 15
[  331.486691][ T5945] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  332.999169][ T8560] loop3: detected capacity change from 0 to 764
[  333.401904][ T8566] Symlink component flag not implemented
[  333.407976][ T8566] Symlink component flag not implemented (101)
[  334.661925][ T8579] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.885'.
[  334.949320][ T8586] loop3: detected capacity change from 0 to 512
[  334.990805][ T8586] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  335.147295][ T8586] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.883: inline data xattr refers to an external xattr inode
[  335.168497][ T8586] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.883: couldn't read orphan inode 17 (err -117)
[  335.202877][ T8586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.614374][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.311584][ T8606] loop0: detected capacity change from 0 to 512
[  336.349154][ T8606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  336.536021][ T8606] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.891: inline data xattr refers to an external xattr inode
[  336.577043][ T8606] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.891: couldn't read orphan inode 17 (err -117)
[  336.613906][ T8606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.004632][ T5856] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  337.187569][ T5856] usb 3-1: Using ep0 maxpacket: 8
[  337.209514][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.289801][ T5856] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  337.462918][ T5856] usb 3-1: config 0 has no interface number 0
[  337.587839][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  337.756927][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  338.010494][ T5856] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  338.030519][ T5856] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  338.044877][ T5856] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  338.054244][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.836944][ T5856] usb 3-1: config 0 descriptor??
[  339.055327][ T5856] usb 3-1: can't set config #0, error -71
[  339.127439][ T5856] usb 3-1: USB disconnect, device number 21
[  339.889315][ T8640] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.901'.
[  341.026674][ T8665] loop3: detected capacity change from 0 to 512
[  341.057120][ T8665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  341.084138][ T8665] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #17: comm syz.3.908: inline data xattr refers to an external xattr inode
[  341.101783][ T8665] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.908: couldn't read orphan inode 17 (err -117)
[  341.118436][ T8665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.503126][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.357906][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  344.690418][  T119] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  344.710847][   T24] usb 1-1: Using ep0 maxpacket: 8
[  344.722675][   T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  344.731136][   T24] usb 1-1: config 0 has no interface number 0
[  344.737293][   T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  344.752715][   T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  344.874203][ T8716] loop4: detected capacity change from 0 to 512
[  344.925958][ T8716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  345.075537][ T8716] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.923: inline data xattr refers to an external xattr inode
[  345.098471][ T8716] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.923: couldn't read orphan inode 17 (err -117)
[  345.159297][ T8716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  345.386894][ T8718] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  345.470820][   T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  345.486317][   T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  345.499688][   T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  345.513308][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.538498][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.580802][  T119] usb 3-1: Using ep0 maxpacket: 8
[  345.587434][   T24] usb 1-1: config 0 descriptor??
[  345.993407][  T119] usb 3-1: device descriptor read/all, error -71
[  346.002467][   T24] usb 1-1: can't set config #0, error -71
[  346.028522][   T24] usb 1-1: USB disconnect, device number 16
[  346.777680][ T8733] loop4: detected capacity change from 0 to 512
[  347.195300][ T8733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  347.437488][ T8733] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.929: inline data xattr refers to an external xattr inode
[  347.481004][ T8733] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.929: couldn't read orphan inode 17 (err -117)
[  347.510386][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.796881][ T8747] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  348.419439][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.921966][ T5987] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  351.983376][ T5993] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  352.571077][ T5987] usb 4-1: Using ep0 maxpacket: 8
[  352.751725][ T5993] usb 1-1: Using ep0 maxpacket: 8
[  352.981251][ T5937] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  353.027674][ T5987] usb 4-1: device descriptor read/all, error -71
[  354.077258][ T5993] usb 1-1: device descriptor read/all, error -71
[  354.101197][ T5937] usb 5-1: Using ep0 maxpacket: 16
[  354.131965][ T5937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  354.150819][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  354.183312][ T5861] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  354.207926][ T5937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  356.599037][ T5937] usb 5-1: string descriptor 0 read error: -71
[  356.621655][ T5937] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  356.668635][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.733209][ T5937] usb 5-1: config 0 descriptor??
[  356.936112][ T8832] loop0: detected capacity change from 0 to 764
[  356.956551][ T8833] loop4: detected capacity change from 0 to 764
[  356.979982][ T5937] usb 5-1: can't set config #0, error -71
[  356.988395][ T5937] usb 5-1: USB disconnect, device number 16
[  358.161179][ T8841] Symlink component flag not implemented
[  358.167406][ T8841] Symlink component flag not implemented (101)
[  359.549596][ T8847] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  359.602070][ T8852] loop3: detected capacity change from 0 to 16
[  359.713454][ T8852] erofs (device loop3): mounted with root inode @ nid 36.
[  361.091114][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'.
[  361.363590][ T8870] loop3: detected capacity change from 0 to 2048
[  361.425756][ T8870] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  362.040906][ T8870] NILFS (loop3): ifile inode (checkpoint number=2) corrupted
[  362.064881][ T8870] NILFS (loop3): error -5 while loading last checkpoint (checkpoint number=2)
[  363.530903][ T5856] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  364.641048][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  364.686514][ T8889] loop4: detected capacity change from 0 to 512
[  364.797637][ T8889] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  364.857582][ T8889] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.979: inline data xattr refers to an external xattr inode
[  364.874284][ T8889] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.979: couldn't read orphan inode 17 (err -117)
[  364.905692][ T8889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.325424][ T8891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  365.422187][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.484747][ T5856] usb 4-1: unable to read config index 0 descriptor/start: -71
[  365.514134][ T5856] usb 4-1: can't read configurations, error -71
[  365.742153][ T8897] loop3: detected capacity change from 0 to 764
[  368.484283][ T8902] Symlink component flag not implemented
[  368.490053][ T8902] Symlink component flag not implemented (101)
[  371.409553][ T8934] loop3: detected capacity change from 0 to 764
[  371.460925][ T5945] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  371.771171][ T8934] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  371.885341][ T8942] xt_CT: You must specify a L4 protocol and not use inversions on it
[  371.941799][ T5945] usb 1-1: Using ep0 maxpacket: 16
[  371.949679][ T5857] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  372.551638][ T5857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  372.559528][ T5857] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  372.569666][ T5857] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  372.577386][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  372.588153][ T5857] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  372.630881][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  372.654327][ T5945] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  372.669639][ T5945] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  372.681139][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.689186][ T5945] usb 1-1: Product: syz
[  372.693743][ T5945] usb 1-1: Manufacturer: syz
[  372.699751][ T5945] usb 1-1: SerialNumber: syz
[  372.707965][ T5945] usb 1-1: config 0 descriptor??
[  372.713955][ T8930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  372.775464][ T8946] loop4: detected capacity change from 0 to 764
[  373.029275][ T5945] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  373.045149][ T5945] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  373.104805][ T8949] Symlink component flag not implemented
[  373.110941][ T8949] Symlink component flag not implemented (101)
[  373.170948][ T5945] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  373.872127][ T5945] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  373.878638][ T5945] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  373.907873][ T5945] usb 1-1: USB disconnect, device number 19
[  373.927308][ T5945] mcba_usb 1-1:0.0 can0: device disconnected
[  374.652218][ T5861] Bluetooth: hci6: command tx timeout
[  375.362444][ T8960] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'.
[  376.590629][ T8970] loop0: detected capacity change from 0 to 32768
[  376.740941][ T5861] Bluetooth: hci6: command tx timeout
[  376.989426][ T8979] loop4: detected capacity change from 0 to 512
[  377.492770][ T8979] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  377.568001][ T8979] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.1009: inline data xattr refers to an external xattr inode
[  377.592970][ T8979] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1009: couldn't read orphan inode 17 (err -117)
[  377.627587][ T8979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.971874][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.988248][ T8938] chnl_net:caif_netlink_parms(): no params data found
[  378.975553][ T5861] Bluetooth: hci6: command tx timeout
[  379.505301][ T8999] loop0: detected capacity change from 0 to 1024
[  379.628065][ T8999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.962379][ T8938] bridge0: port 1(bridge_slave_0) entered blocking state
[  380.537459][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state
[  380.545162][ T8938] bridge_slave_0: entered allmulticast mode
[  380.553930][ T8938] bridge_slave_0: entered promiscuous mode
[  380.586512][ T8938] bridge0: port 2(bridge_slave_1) entered blocking state
[  380.600944][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state
[  380.610300][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.619447][ T8938] bridge_slave_1: entered allmulticast mode
[  380.665191][ T8938] bridge_slave_1: entered promiscuous mode
[  381.081261][ T5861] Bluetooth: hci6: command tx timeout
[  381.155445][ T8938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  381.226645][ T9030] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  381.256427][ T9030] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  382.028430][ T8938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.146365][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1024'.
[  383.462153][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  383.468577][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  387.782036][ T8938] team0: Port device team_slave_0 added
[  387.813704][ T8938] team0: Port device team_slave_1 added
[  388.283740][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'.
[  388.462994][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.470422][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.755522][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.839562][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.114818][ T8938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  389.134853][ T8938] batman_adv: batadv0: Adding interface: batadv_slave_1
[  389.156557][ T8938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  389.827449][ T8938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.100547][ T9086] loop4: detected capacity change from 0 to 764
[  390.661813][ T9094] Symlink component flag not implemented
[  390.667649][ T9094] Symlink component flag not implemented (101)
[  390.872527][ T9095] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  392.114803][ T9095] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1040'.
[  392.395240][ T8938] hsr_slave_0: entered promiscuous mode
[  392.421880][ T8938] hsr_slave_1: entered promiscuous mode
[  392.453036][ T8938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  392.482066][ T8938] Cannot create hsr debugfs directory
[  392.502334][ T9089] IPVS: Error joining to the multicast group
[  392.587453][ T9101] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  396.028918][ T9125] loop4: detected capacity change from 0 to 512
[  396.080864][ T9125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  396.159617][ T9125] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.1052: inline data xattr refers to an external xattr inode
[  396.177975][ T9125] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1052: couldn't read orphan inode 17 (err -117)
[  396.210841][ T9125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.548335][ T8805] Set syz1 is full, maxelem 65536 reached
[  396.608812][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.670806][ T5987] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  397.698611][ T8938] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  397.775984][ T8938] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  397.847363][ T8938] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  397.900825][ T5987] usb 1-1: Using ep0 maxpacket: 8
[  397.921224][ T5945] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  397.932083][ T8938] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  398.100832][ T5945] usb 5-1: Using ep0 maxpacket: 16
[  398.119194][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  398.143416][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  398.176244][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  398.224244][ T5945] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  398.249932][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.548821][ T5945] usb 5-1: Product: syz
[  398.567868][ T5945] usb 5-1: Manufacturer: syz
[  399.063071][ T5987] usb 1-1: device descriptor read/all, error -71
[  399.106106][ T5945] usb 5-1: SerialNumber: syz
[  399.266894][ T5945] usb 5-1: config 0 descriptor??
[  399.296731][ T9141] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  399.449561][ T8938] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.719413][ T8938] 8021q: adding VLAN 0 to HW filter on device team0
[  399.819308][ T5945] mcba_usb 5-1:0.0 can0: failed tx_urb -90
[  399.829387][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.831334][ T5945] mcba_usb 5-1:0.0 can0: Failed to send cmd (169)
[  399.836606][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.843039][ T5945] mcba_usb 5-1:0.0 can0: failed tx_urb -90
[  399.862215][ T5945] mcba_usb 5-1:0.0 can0: Failed to send cmd (169)
[  399.868740][ T5945] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected
[  400.587760][ T5945] usb 5-1: USB disconnect, device number 17
[  401.178268][ T5945] mcba_usb 5-1:0.0 can0: device disconnected
[  401.184174][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.192779][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.465651][ T5993] IPVS: starting estimator thread 0...
[  401.563541][ T9177] IPVS: using max 26 ests per chain, 62400 per kthread
[  401.918889][ T8938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  401.935425][ T8938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  402.471758][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.483785][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.497217][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.509036][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.528910][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.541351][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.553246][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.565323][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.577880][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  402.589821][ T9172] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  403.279377][ T9205] loop4: detected capacity change from 0 to 764
[  403.329272][ T9187] 8021q: adding VLAN 0 to HW filter on device bond1
[  403.435702][ T9187] bond0: (slave bond1): Enslaving as an active interface with an up link
[  403.754997][ T3449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.562544][ T3449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.640364][ T8938] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.741419][ T5987] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  404.804324][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.804481][ T6049] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  404.812455][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.970869][ T5987] usb 5-1: Using ep0 maxpacket: 8
[  404.981246][ T6049] usb 1-1: Using ep0 maxpacket: 8
[  404.993832][ T5987] usb 5-1: config 0 has an invalid interface number: 78 but max is 0
[  405.003592][ T6049] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  405.021201][ T5987] usb 5-1: config 0 has no interface number 0
[  405.040766][ T6049] usb 1-1: config 0 has no interface number 0
[  405.067130][ T6049] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  405.090823][ T5987] usb 5-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  405.100023][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.120408][ T6049] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  405.140796][ T5987] usb 5-1: Product: syz
[  405.149034][ T5987] usb 5-1: Manufacturer: syz
[  405.163840][ T6049] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  405.182220][ T5987] usb 5-1: SerialNumber: syz
[  405.191948][ T5987] usb 5-1: config 0 descriptor??
[  405.200876][ T6049] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  405.232594][ T6049] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  405.252122][ T6049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.274038][ T6049] usb 1-1: config 0 descriptor??
[  405.289234][ T6049] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  405.305761][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.339435][ T9224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.409777][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.419318][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.446268][ T5987] usbhid 5-1:0.78: couldn't find an input interrupt endpoint
[  405.501479][ T5987] usb 5-1: USB disconnect, device number 18
[  405.699103][ T9224] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.745698][ T9224] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.793905][ T9224] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  405.828628][ T9224] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  406.124031][ T3449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.594425][    C0] ldusb 1-1:0.55: usb_submit_urb failed (-1)
[  406.626045][ T9239] usb 1-1: USB disconnect, device number 22
[  406.740390][ T9239] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  407.396088][ T9264] loop4: detected capacity change from 0 to 764
[  408.021383][ T3449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.120061][ T9273] loop3: detected capacity change from 0 to 8
[  408.564185][ T9277] SQUASHFS error: xz decompression failed, data probably corrupt
[  408.572492][ T9277] SQUASHFS error: Failed to read block 0xa8: -5
[  408.634316][ T9277] SQUASHFS error: xz decompression failed, data probably corrupt
[  408.644375][ T9277] SQUASHFS error: Failed to read block 0xa8: -5
[  408.654973][   T30] audit: type=1800 audit(1752893062.152:6): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1088" name="file0" dev="loop3" ino=3 res=0 errno=0
[  408.872487][ T9277] syz.3.1088 (9277) used greatest stack depth: 19784 bytes left
[  410.107071][ T3449] bridge_slave_1: left allmulticast mode
[  410.134578][ T3449] bridge_slave_1: left promiscuous mode
[  410.142152][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.478247][ T9297] loop0: detected capacity change from 0 to 32768
[  410.487534][ T9297] XFS: ikeep mount option is deprecated.
[  410.767341][ T9297] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  411.065630][ T9299] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  411.086286][ T9297] XFS (loop0): Ending clean mount
[  411.106723][ T9297] XFS (loop0): Quotacheck needed: Please wait.
[  411.340264][ T9297] XFS (loop0): Quotacheck: Done.
[  411.400254][ T3449] bridge_slave_0: left allmulticast mode
[  411.457195][ T3449] bridge_slave_0: left promiscuous mode
[  411.585679][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.560751][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  413.207809][ T9336] kAFS: unparsable volume name
[  415.668739][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.680905][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.692088][ T3449] bond0 (unregistering): Released all slaves
[  416.555461][ T8938] veth0_vlan: entered promiscuous mode
[  416.613636][ T9355] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  416.626542][ T8938] veth1_vlan: entered promiscuous mode
[  418.595928][ T9371] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  419.847261][ T9381] loop0: detected capacity change from 0 to 1024
[  419.977022][ T8938] veth0_macvtap: entered promiscuous mode
[  420.015601][ T8938] veth1_macvtap: entered promiscuous mode
[  420.109438][ T9381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  420.151012][ T9381] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  420.915233][ T9400] loop4: detected capacity change from 0 to 764
[  421.066528][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.462371][ T8938] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.836327][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.998071][ T8938] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.063955][ T8938] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.106136][ T8938] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.141973][ T8938] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.005120][ T3449] hsr_slave_0: left promiscuous mode
[  423.008175][ T9429] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  423.241627][ T3449] hsr_slave_1: left promiscuous mode
[  423.247814][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  423.266356][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  423.306526][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  423.328968][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.418852][ T3449] veth1_macvtap: left promiscuous mode
[  423.446975][ T3449] veth0_macvtap: left promiscuous mode
[  423.474788][ T3449] veth1_vlan: left promiscuous mode
[  423.480734][ T3449] veth0_vlan: left promiscuous mode
[  423.818871][ T9449] loop3: detected capacity change from 0 to 764
[  424.164116][ T9452] Symlink component flag not implemented
[  424.169920][ T9452] Symlink component flag not implemented (101)
[  424.224268][ T9455] loop0: detected capacity change from 0 to 8
[  424.997620][ T9455] SQUASHFS error: xz decompression failed, data probably corrupt
[  425.005447][ T9455] SQUASHFS error: Failed to read block 0xa8: -5
[  425.018114][ T9455] SQUASHFS error: xz decompression failed, data probably corrupt
[  425.026788][ T9455] SQUASHFS error: Failed to read block 0xa8: -5
[  425.042666][   T30] audit: type=1800 audit(1752893078.532:7): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1134" name="file0" dev="loop0" ino=3 res=0 errno=0
[  425.204938][ T9460] loop4: detected capacity change from 0 to 2048
[  425.218396][ T9462] loop3: detected capacity change from 0 to 764
[  425.254512][ T9460] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  425.332893][ T9460] NILFS (loop4): mounting unchecked fs
[  425.373194][ T9145] udevd[9145]: incorrect nilfs2 checksum on /dev/loop4
[  425.438533][ T9460] NILFS (loop4): recovery complete
[  425.468083][ T9466] loop0: detected capacity change from 0 to 1024
[  425.468269][ T9469] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  427.018351][ T9479] overlayfs: failed to clone upperpath
[  427.488584][   T13] hfsplus: b-tree write err: -5, ino 4
[  427.682564][ T9489] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  428.395539][ T3449] team0 (unregistering): Port device team_slave_1 removed
[  428.435072][ T3449] team0 (unregistering): Port device team_slave_0 removed
[  428.705935][ T9495] loop0: detected capacity change from 0 to 764
[  429.062640][ T9498] Symlink component flag not implemented
[  429.068399][ T9498] Symlink component flag not implemented (101)
[  430.071859][ T9505] loop0: detected capacity change from 0 to 256
[  430.185165][ T9505] FAT-fs (loop0): Directory bread(block 64) failed
[  430.192146][ T9505] FAT-fs (loop0): Directory bread(block 65) failed
[  430.198944][ T9505] FAT-fs (loop0): Directory bread(block 66) failed
[  430.205751][ T9505] FAT-fs (loop0): Directory bread(block 67) failed
[  430.212442][ T9505] FAT-fs (loop0): Directory bread(block 68) failed
[  430.218995][ T9505] FAT-fs (loop0): Directory bread(block 69) failed
[  430.225729][ T9505] FAT-fs (loop0): Directory bread(block 70) failed
[  430.232335][ T9505] FAT-fs (loop0): Directory bread(block 71) failed
[  430.239041][ T9505] FAT-fs (loop0): Directory bread(block 72) failed
[  430.246911][ T9505] FAT-fs (loop0): Directory bread(block 73) failed
[  430.499904][ T9509] loop0: detected capacity change from 0 to 764
[  430.583158][ T9511] comedi comedi0: 8255: I/O port conflict (0xffffffff80008000,4)
[  430.591316][ T9511] comedi comedi0: 8255: I/O port conflict (0xc,4)
[  430.598067][ T9511] comedi comedi0: 8255: I/O port conflict (0xffffffff80000000,4)
[  430.776694][ T9513] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  430.792000][ T9513] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  431.071162][ T9482] netlink: 'syz.5.1142': attribute type 12 has an invalid length.
[  431.093120][ T9518] loop0: detected capacity change from 0 to 256
[  431.120018][ T9519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  431.135013][ T9519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  431.166619][ T9519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  431.703007][ T9519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  431.793907][ T9519] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  431.998236][ T9233] IPVS: starting estimator thread 0...
[  432.190856][ T9532] IPVS: using max 27 ests per chain, 64800 per kthread
[  432.350569][ T9538] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  432.419617][ T9539] loop3: detected capacity change from 0 to 764
[  433.413116][ T9547] Symlink component flag not implemented
[  433.419853][ T9547] Symlink component flag not implemented (101)
[  433.851034][ T5861] Bluetooth: hci5: command tx timeout
[  434.573920][ T9559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  435.356065][ T9562] loop4: detected capacity change from 0 to 764
[  435.576986][ T9568] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1168'.
[  436.020894][ T5861] Bluetooth: hci5: command tx timeout
[  436.487712][ T9576] loop0: detected capacity change from 0 to 2048
[  436.512433][ T9576] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  436.733923][ T9576] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  436.744335][ T9576] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  437.034996][ T9567] netlink: 'syz.5.1168': attribute type 25 has an invalid length.
[  437.045637][ T9567] netlink: 'syz.5.1168': attribute type 8 has an invalid length.
[  438.150779][ T5861] Bluetooth: hci5: command tx timeout
[  438.251133][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1168'.
[  438.390266][ T3449] IPVS: stop unused estimator thread 0...
[  440.800274][ T9517] chnl_net:caif_netlink_parms(): no params data found
[  440.807436][ T5861] Bluetooth: hci5: command tx timeout
[  441.121310][ T9606] loop0: detected capacity change from 0 to 512
[  441.129723][ T9606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  441.261146][ T9606] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.1175: inline data xattr refers to an external xattr inode
[  441.276604][ T9606] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1175: couldn't read orphan inode 17 (err -117)
[  441.290510][ T9606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.318945][ T9616] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  442.975692][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.984850][ T9517] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.001009][ T9517] bridge_slave_0: entered allmulticast mode
[  443.008981][ T9517] bridge_slave_0: entered promiscuous mode
[  443.010931][ T9632] loop3: detected capacity change from 0 to 764
[  443.019380][ T9517] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.028326][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.079090][ T9517] bridge_slave_1: entered allmulticast mode
[  443.140381][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.154554][ T9517] bridge_slave_1: entered promiscuous mode
[  443.371253][ T9637] loop4: detected capacity change from 0 to 256
[  444.010965][ T9247] IPVS: starting estimator thread 0...
[  444.162009][ T9517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.231865][ T9645] IPVS: using max 23 ests per chain, 55200 per kthread
[  444.285097][ T9517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.536952][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  444.543461][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  445.924781][ T9517] team0: Port device team_slave_0 added
[  446.082687][ T9517] team0: Port device team_slave_1 added
[  446.116430][ T9662] loop0: detected capacity change from 0 to 764
[  446.666377][ T9681] Symlink component flag not implemented
[  446.672517][ T9681] Symlink component flag not implemented (101)
[  447.560237][ T9684] vivid-007: =================  START STATUS  =================
[  447.568660][ T9684] vivid-007: Enable Output Cropping: true
[  447.575968][ T9684] vivid-007: Enable Output Composing: true
[  447.582508][ T9684] vivid-007: Enable Output Scaler: true
[  447.589275][ T9684] vivid-007: Tx RGB Quantization Range: Automatic
[  447.597853][ T9684] vivid-007: Transmit Mode: HDMI
[  447.603579][ T9684] vivid-007: Hotplug Present: 0x00000000
[  447.609461][ T9684] vivid-007: RxSense Present: 0x00000000
[  447.615983][ T9684] vivid-007: EDID Present: 0x00000000
[  447.621995][ T9684] vivid-007: ==================  END STATUS  ==================
[  447.990014][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.160048][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.366971][ T9517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.382098][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.389107][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.424386][ T9517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.393041][ T9701] loop0: detected capacity change from 0 to 512
[  449.441144][ T9701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  449.455476][ T3449] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.498343][ T9701] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.1195: inline data xattr refers to an external xattr inode
[  449.514397][ T9701] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1195: couldn't read orphan inode 17 (err -117)
[  449.529368][ T9701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.839741][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.315627][ T3449] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.433163][ T9728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1202'.
[  451.485242][ T9517] hsr_slave_0: entered promiscuous mode
[  451.493287][ T9517] hsr_slave_1: entered promiscuous mode
[  451.504160][ T9721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1202'.
[  451.676769][ T9737] loop0: detected capacity change from 0 to 512
[  451.715920][ T9737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  451.796731][ T9737] EXT4-fs (loop0): 1 truncate cleaned up
[  451.990551][ T9737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.533007][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.564550][ T3449] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  452.621211][ T9731] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1202'.
[  452.898280][ T9749] loop0: detected capacity change from 0 to 764
[  454.349643][ T3449] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.877722][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1217'.
[  457.324185][ T9774] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.333464][ T9774] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.342516][ T9774] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.351435][ T9774] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.457102][ T9774] vxlan0: entered promiscuous mode
[  459.151550][ T3449] bridge_slave_1: left allmulticast mode
[  459.280184][ T3449] bridge_slave_1: left promiscuous mode
[  459.325636][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.438658][ T3449] bridge_slave_0: left allmulticast mode
[  459.462801][ T3449] bridge_slave_0: left promiscuous mode
[  459.495727][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.818324][ T9821] loop0: detected capacity change from 0 to 2048
[  459.834786][ T9821] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  459.953859][ T9821] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  459.963614][ T9821] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  461.215736][ T9846] loop0: detected capacity change from 0 to 256
[  463.442751][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.492304][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.497552][ T9862] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1244'.
[  463.539149][ T3449] bond0 (unregistering): Released all slaves
[  463.660837][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1236'.
[  463.695143][ T9831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1235'.
[  464.258553][ T3449] hsr_slave_0: left promiscuous mode
[  464.361234][ T3449] hsr_slave_1: left promiscuous mode
[  464.411808][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.459997][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.387199][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.446482][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.784333][ T9896] loop4: detected capacity change from 0 to 256
[  466.827276][ T3449] veth1_macvtap: left promiscuous mode
[  468.109159][ T3449] veth0_macvtap: left promiscuous mode
[  468.195224][ T3449] veth1_vlan: left promiscuous mode
[  468.225012][ T3449] veth0_vlan: left promiscuous mode
[  468.600272][ T9919] netlink: 'syz.0.1262': attribute type 21 has an invalid length.
[  468.998698][ T3449] team0 (unregistering): Port device team_slave_1 removed
[  469.049522][ T3449] team0 (unregistering): Port device team_slave_0 removed
[  469.594312][ T9890] netlink: 'syz.1.1252': attribute type 29 has an invalid length.
[  469.623735][ T9912] netlink: 'syz.4.1259': attribute type 25 has an invalid length.
[  469.655374][ T9912] netlink: 'syz.4.1259': attribute type 1 has an invalid length.
[  469.678440][ T9912] bridge0: port 1(bridge_slave_0) entered learning state
[  469.687159][ T9904] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  469.761962][ T9904] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  470.485057][ T9517] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  470.498243][ T9942] netlink: 'syz.4.1270': attribute type 10 has an invalid length.
[  470.544477][ T9517] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  470.659590][ T9942] bridge0: port 3(netdevsim0) entered blocking state
[  470.671031][ T9942] bridge0: port 3(netdevsim0) entered disabled state
[  470.687233][ T9942] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  470.763631][ T9942] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  470.955909][ T9517] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  470.988766][ T9517] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  471.447248][ T9517] 8021q: adding VLAN 0 to HW filter on device bond0
[  471.714027][ T9517] 8021q: adding VLAN 0 to HW filter on device team0
[  471.775417][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.782703][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  471.866122][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.873375][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.996059][ T9517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.853161][ T9517] veth0_vlan: entered promiscuous mode
[  476.927002][ T9517] veth1_vlan: entered promiscuous mode
[  477.359532][ T9517] veth0_macvtap: entered promiscuous mode
[  477.427798][ T9517] veth1_macvtap: entered promiscuous mode
[  477.525971][ T9517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.577272][ T9517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.648267][ T9517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.706973][ T9517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.739534][ T9517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.770187][ T9517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.357104][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.391054][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.776506][T10103] loop0: detected capacity change from 0 to 512
[  479.508766][T10103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  480.510979][T10103] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.1316: inline data xattr refers to an external xattr inode
[  480.531293][ T6040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.539163][ T6040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.567145][T10103] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.1316: couldn't read orphan inode 17 (err -117)
[  480.583851][T10103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  480.631770][T10112] netlink: 'syz.4.1317': attribute type 29 has an invalid length.
[  480.681500][T10115] netlink: 'syz.4.1317': attribute type 29 has an invalid length.
[  480.893689][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.112520][T10131] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1324'.
[  482.425588][T10140] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  482.451088][ T9234] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  482.625936][T10145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1327'.
[  482.682217][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1327'.
[  482.772911][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1327'.
[  482.867903][ T9234] usb 4-1: Using ep0 maxpacket: 8
[  482.910832][ T9234] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  482.919006][ T9234] usb 4-1: config 0 has no interface number 0
[  482.931136][ T9234] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  484.109878][ T9234] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  484.128420][ T9234] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  484.140031][ T9234] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  484.153808][ T9234] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  484.163509][ T9234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.178555][ T9234] usb 4-1: config 0 descriptor??
[  484.202753][ T9234] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  484.731476][T10168] overlayfs: failed to clone upperpath
[  485.708874][ T9233] usb 4-1: USB disconnect, device number 20
[  485.732845][ T9233] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  486.079105][T10184] loop0: detected capacity change from 0 to 8
[  486.359824][T10194] lo speed is unknown, defaulting to 1000
[  486.366810][T10194] lo speed is unknown, defaulting to 1000
[  486.380947][T10194] lo speed is unknown, defaulting to 1000
[  486.565178][T10194] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  486.900789][  T972] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  487.096355][T10194] lo speed is unknown, defaulting to 1000
[  487.104390][T10194] lo speed is unknown, defaulting to 1000
[  487.130095][T10194] lo speed is unknown, defaulting to 1000
[  487.138070][T10194] lo speed is unknown, defaulting to 1000
[  487.146198][T10194] lo speed is unknown, defaulting to 1000
[  487.154337][T10194] lo speed is unknown, defaulting to 1000
[  487.420192][T10197] SQUASHFS error: xz decompression failed, data probably corrupt
[  487.428137][T10197] SQUASHFS error: Failed to read block 0xa8: -5
[  487.444678][T10197] SQUASHFS error: xz decompression failed, data probably corrupt
[  487.452784][T10197] SQUASHFS error: Failed to read block 0xa8: -5
[  487.474737][   T30] audit: type=1800 audit(1752893140.952:8): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1339" name="file0" dev="loop0" ino=3 res=0 errno=0
[  487.494227][  T972] usb 5-1: Using ep0 maxpacket: 16
[  487.511406][  T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  487.577483][  T972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  487.630823][  T972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  487.943718][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1346'.
[  488.849002][  T972] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  488.861841][  T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.882906][  T972] usb 5-1: Product: syz
[  488.887155][  T972] usb 5-1: Manufacturer: syz
[  488.892152][  T972] usb 5-1: SerialNumber: syz
[  488.900234][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1346'.
[  488.921664][  T972] usb 5-1: config 0 descriptor??
[  488.953580][T10189] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  489.407059][T10220] overlayfs: failed to clone upperpath
[  489.974540][  T972] mcba_usb 5-1:0.0 can0: failed tx_urb -90
[  489.980470][  T972] mcba_usb 5-1:0.0 can0: Failed to send cmd (169)
[  490.175793][  T972] mcba_usb 5-1:0.0 can0: failed tx_urb -90
[  490.221596][  T972] mcba_usb 5-1:0.0 can0: Failed to send cmd (169)
[  490.247715][  T972] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected
[  490.315258][  T972] usb 5-1: USB disconnect, device number 19
[  490.338375][  T972] mcba_usb 5-1:0.0 can0: device disconnected
[  493.028253][T10250] loop3: detected capacity change from 0 to 764
[  493.250931][   T30] audit: type=1326 audit(1752893146.722:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.4.1358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d58e9a9 code=0x0
[  493.364569][ T9234] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  493.379847][T10250] Symlink component flag not implemented
[  493.385737][T10250] Symlink component flag not implemented (101)
[  493.610852][ T9234] usb 1-1: Using ep0 maxpacket: 8
[  493.667136][ T9234] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  493.693638][ T9234] usb 1-1: config 0 has no interface number 0
[  493.731352][ T9234] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  493.910515][ T9234] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  493.924410][ T9234] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  493.938398][ T9234] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  493.952098][ T9234] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  493.999652][ T9234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.059951][ T9234] usb 1-1: config 0 descriptor??
[  494.689000][ T9234] usb 1-1: can't set config #0, error -71
[  494.697478][ T9234] usb 1-1: USB disconnect, device number 23
[  495.403178][T10292] loop6: detected capacity change from 0 to 256
[  495.552284][  T972] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  495.851275][  T972] usb 4-1: Using ep0 maxpacket: 16
[  495.901101][ T9247] IPVS: starting estimator thread 0...
[  496.432866][  T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  496.466861][  T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  496.523597][T10295] IPVS: using max 23 ests per chain, 55200 per kthread
[  496.545453][  T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  496.910602][  T972] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  497.150856][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.167859][  T972] usb 4-1: Product: syz
[  497.183352][  T972] usb 4-1: Manufacturer: syz
[  497.188077][  T972] usb 4-1: SerialNumber: syz
[  497.274560][T10306] loop6: detected capacity change from 0 to 512
[  497.409897][T10306] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  497.638898][T10306] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #17: comm syz.6.1373: inline data xattr refers to an external xattr inode
[  497.667288][T10306] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1373: couldn't read orphan inode 17 (err -117)
[  497.701988][T10306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  497.702837][  T972] usb 4-1: config 0 descriptor??
[  497.788003][    C0] raw-gadget.1 gadget.3: ignoring, device is not running
[  497.812644][  T972] usb 4-1: can't set config #0, error -32
[  497.848057][  T972] usb 4-1: USB disconnect, device number 21
[  498.063036][ T9517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.517961][T10328] loop6: detected capacity change from 0 to 2048
[  499.600594][T10328] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  499.649817][ T9292] udevd[9292]: incorrect nilfs2 checksum on /dev/loop6
[  499.698612][T10328] NILFS (loop6): mounting unchecked fs
[  499.816152][T10328] NILFS (loop6): recovery complete
[  499.867465][T10349] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.555894][T10353] loop4: detected capacity change from 0 to 764
[  501.870854][ T6014] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  501.943198][T10359] Symlink component flag not implemented
[  501.948970][T10359] Symlink component flag not implemented (101)
[  502.860842][ T6014] usb 1-1: Using ep0 maxpacket: 8
[  504.528412][ T6014] usb 1-1: unable to read config index 0 descriptor/start: -71
[  504.536227][ T6014] usb 1-1: can't read configurations, error -71
[  505.317518][T10396] loop4: detected capacity change from 0 to 40427
[  505.346956][T10396] F2FS-fs (loop4): invalid crc value
[  505.482823][T10396] F2FS-fs (loop4): Start checkpoint disabled!
[  505.509774][T10396] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  506.063634][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  506.082268][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  506.131269][T10406] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  507.406147][ T6042] kworker/u8:12: attempt to access beyond end of device
[  507.406147][ T6042] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  507.433257][T10415] loop3: detected capacity change from 0 to 764
[  507.793210][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: kworker/u8:12 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) 
[  507.793246][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.793263][ T6042] Workqueue: writeback wb_workfn (flush-7:4)
[  507.793300][ T6042] Call Trace:
[  507.793310][ T6042]  <TASK>
[  507.793320][ T6042]  dump_stack_lvl+0x189/0x250
[  507.793358][ T6042]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.793385][ T6042]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  507.793411][ T6042]  ? __pfx_queue_work_on+0x10/0x10
[  507.793444][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.793472][ T6042]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  507.793496][ T6042]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  507.793561][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.793588][ T6042]  ? f2fs_hw_is_readonly+0x39b/0x470
[  507.793636][ T6042]  f2fs_handle_critical_error+0x37c/0x540
[  507.793678][ T6042]  f2fs_write_end_io+0x495/0x810
[  507.793706][ T6042]  ? blkg_put+0x22/0x240
[  507.793765][ T6042]  __submit_merged_bio+0x27a/0x6a0
[  507.793816][ T6042]  __submit_merged_write_cond+0x255/0x530
[  507.793867][ T6042]  f2fs_write_data_pages+0x261d/0x3000
[  507.793948][ T6042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  507.794090][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794122][ T6042]  ? f2fs_write_meta_pages+0x357/0x450
[  507.794162][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794189][ T6042]  ? __lock_acquire+0xab9/0xd20
[  507.794221][ T6042]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  507.794251][ T6042]  do_writepages+0x32e/0x550
[  507.794291][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794317][ T6042]  ? reacquire_held_locks+0x127/0x1d0
[  507.794346][ T6042]  ? writeback_sb_inodes+0x372/0x1000
[  507.794391][ T6042]  __writeback_single_inode+0x145/0xff0
[  507.794423][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794450][ T6042]  ? do_raw_spin_unlock+0x122/0x240
[  507.794492][ T6042]  writeback_sb_inodes+0x6b5/0x1000
[  507.794544][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794590][ T6042]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  507.794690][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794716][ T6042]  ? rcu_is_watching+0x15/0xb0
[  507.794746][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.794786][ T6042]  wb_writeback+0x43b/0xaf0
[  507.794831][ T6042]  ? queue_io+0x311/0x590
[  507.794868][ T6042]  ? __pfx_wb_writeback+0x10/0x10
[  507.794913][ T6042]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.794945][ T6042]  wb_workfn+0x409/0xef0
[  507.794995][ T6042]  ? __pfx_wb_workfn+0x10/0x10
[  507.795028][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795055][ T6042]  ? __lock_acquire+0xab9/0xd20
[  507.795097][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795129][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795161][ T6042]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.795183][ T6042]  ? process_scheduled_works+0x9ef/0x17b0
[  507.795211][ T6042]  ? process_scheduled_works+0x9ef/0x17b0
[  507.795242][ T6042]  process_scheduled_works+0xae1/0x17b0
[  507.795316][ T6042]  ? __pfx_process_scheduled_works+0x10/0x10
[  507.795357][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795397][ T6042]  worker_thread+0x8a0/0xda0
[  507.795432][ T6042]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  507.795483][ T6042]  ? __kthread_parkme+0x7b/0x200
[  507.795530][ T6042]  kthread+0x711/0x8a0
[  507.795570][ T6042]  ? __pfx_worker_thread+0x10/0x10
[  507.795598][ T6042]  ? __pfx_kthread+0x10/0x10
[  507.795629][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795661][ T6042]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.795687][ T6042]  ? srso_alias_return_thunk+0x5/0xfbef5
[  507.795714][ T6042]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.795737][ T6042]  ? __pfx_kthread+0x10/0x10
[  507.795774][ T6042]  ret_from_fork+0x3fc/0x770
[  507.795805][ T6042]  ? __pfx_ret_from_fork+0x10/0x10
[  507.795841][ T6042]  ? __switch_to_asm+0x39/0x70
[  507.795872][ T6042]  ? __switch_to_asm+0x33/0x70
[  507.795901][ T6042]  ? __pfx_kthread+0x10/0x10
[  507.795938][ T6042]  ret_from_fork_asm+0x1a/0x30
[  507.795996][ T6042]  </TASK>
[  507.796006][ T6042] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  508.199842][T10424] Symlink component flag not implemented
[  508.205659][T10424] Symlink component flag not implemented (101)
[  510.020340][ T9247] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  511.063907][ T9247] usb 1-1: Using ep0 maxpacket: 8
[  511.198498][ T9247] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  511.271797][ T9247] usb 1-1: config 0 has no interface number 0
[  511.706193][ T9247] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  511.808622][ T9247] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  512.054765][ T9247] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  512.167411][  T972] IPVS: starting estimator thread 0...
[  512.800861][ T9247] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  512.814152][ T9247] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  512.823362][ T9247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.844815][ T9247] usb 1-1: config 0 descriptor??
[  512.860860][T10454] IPVS: using max 23 ests per chain, 55200 per kthread
[  513.008975][ T9247] usb 1-1: can't set config #0, error -71
[  513.030445][ T9247] usb 1-1: USB disconnect, device number 26
[  516.737996][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1424'.
[  516.813257][T10501] netlink: 'syz.4.1424': attribute type 10 has an invalid length.
[  517.219873][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1422'.
[  519.769321][T10501] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  519.808364][T10510] geneve2: entered promiscuous mode
[  519.813737][T10510] geneve2: entered allmulticast mode
[  520.128687][T10501] syz.4.1424 (10501) used greatest stack depth: 19208 bytes left
[  521.772341][T10570] loop3: detected capacity change from 0 to 512
[  522.298664][T10570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  522.386835][T10570] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  522.464209][T10570] EXT4-fs (loop3): 1 truncate cleaned up
[  522.566094][T10570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.699397][T10533] loop6: detected capacity change from 0 to 32768
[  522.870968][T10533] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  524.967131][T10533] XFS (loop6): Ending clean mount
[  524.981292][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.070613][T10533] XFS (loop6): Quotacheck needed: Please wait.
[  525.340778][T10533] XFS (loop6): Quotacheck: Done.
[  525.570029][ T9517] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  527.913984][T10640] binder: 10633:10640 ioctl c018620c 200000000000 returned -1
[  529.240331][T10646] loop3: detected capacity change from 0 to 4096
[  529.527305][T10646] ntfs3(loop3): ino=1a, mi_enum_attr
[  529.532956][T10646] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  531.776039][T10663] loop0: detected capacity change from 0 to 2048
[  532.924260][T10663] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  533.055825][T10663] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  533.103077][T10663] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  533.579036][T10685] loop6: detected capacity change from 0 to 512
[  533.591904][T10685] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  533.631117][T10685] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #17: comm syz.6.1470: inline data xattr refers to an external xattr inode
[  533.661049][T10685] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.1470: couldn't read orphan inode 17 (err -117)
[  533.729213][T10685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  533.805772][T10692] loop4: detected capacity change from 0 to 256
[  534.736951][ T9517] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  534.844397][T10699] loop3: detected capacity change from 0 to 2048
[  534.958962][T10699] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  534.959006][T10699] NILFS (loop3): mounting unchecked fs
[  535.121153][T10699] NILFS (loop3): recovery complete
[  535.417382][T10708] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  537.242660][T10718] loop4: detected capacity change from 0 to 4096
[  537.579370][T10718] ntfs3(loop4): ino=1a, mi_enum_attr
[  537.584899][T10718] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  538.847613][   T30] audit: type=1800 audit(1752893192.332:10): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1478" name="file1" dev="loop4" ino=30 res=0 errno=0
[  538.914827][T10730] netlink: 'syz.1.1480': attribute type 10 has an invalid length.
[  539.032263][T10730] bridge0: port 3(netdevsim0) entered blocking state
[  539.177619][T10730] bridge0: port 3(netdevsim0) entered disabled state
[  539.228900][T10730] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  539.249601][T10730] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  542.320883][ T9236] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  542.444403][T10779] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1495'.
[  542.520881][ T9236] usb 7-1: Using ep0 maxpacket: 8
[  542.539005][ T9236] usb 7-1: config 0 has an invalid interface number: 78 but max is 0
[  542.678529][ T9236] usb 7-1: config 0 has no interface number 0
[  542.792748][ T9236] usb 7-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  542.865478][ T9236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.902482][ T9236] usb 7-1: Product: syz
[  542.981044][ T9236] usb 7-1: Manufacturer: syz
[  543.844492][ T9236] usb 7-1: SerialNumber: syz
[  543.865003][T10786] loop3: detected capacity change from 0 to 764
[  543.872620][ T9236] usb 7-1: config 0 descriptor??
[  543.903265][T10786] Symlink component flag not implemented
[  543.909566][T10786] Symlink component flag not implemented (101)
[  545.254392][ T9236] pcwd_usb: This driver only supports 1 device
[  545.261232][ T9236] usbhid 7-1:0.78: couldn't find an input interrupt endpoint
[  545.396391][ T9236] usb 7-1: USB disconnect, device number 2
[  545.652218][T10804] loop0: detected capacity change from 0 to 2048
[  546.414332][T10804] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  546.530402][T10804] NILFS (loop0): ifile inode (checkpoint number=2) corrupted
[  546.541188][T10804] NILFS (loop0): error -5 while loading last checkpoint (checkpoint number=2)
[  547.074486][    C0] vkms_vblank_simulate: vblank timer overrun
[  547.278911][    C0] vkms_vblank_simulate: vblank timer overrun
[  547.345045][    C0] vkms_vblank_simulate: vblank timer overrun
[  547.525902][    C0] vkms_vblank_simulate: vblank timer overrun
[  547.954287][T10825] loop4: detected capacity change from 0 to 2048
[  548.296195][T10825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  548.630823][ T6014] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  549.347724][T10837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'.
[  550.225003][T10836] loop0: detected capacity change from 0 to 32768
[  550.248825][ T6014] usb 5-1: Using ep0 maxpacket: 16
[  550.269214][ T6014] usb 5-1: device descriptor read/all, error -71
[  551.371936][T10836] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  551.372009][T10836]   allowing incompatible features above 0.0: (unknown version)
[  551.372025][T10836]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  551.419055][T10836] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  551.427436][T10836] bcachefs (loop0): initializing new filesystem
[  551.443043][T10836] bcachefs (loop0): going read-write
[  551.600998][T10836] bcachefs (loop0): bch2_copygc_start(): error creating copygc thread EINTR
[  551.610234][T10836] bcachefs (loop0): __bch2_fs_read_write(): error error starting copygc thread EINTR
[  551.619915][T10836] bcachefs (loop0): going read-only
[  551.625512][T10836] bcachefs (loop0): finished waiting for writes to stop
[  551.633180][T10836] bcachefs (loop0): flushing journal and stopping allocators, journal seq 0
[  551.642625][T10836] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 0
[  551.697350][T10871] loop4: detected capacity change from 0 to 512
[  551.727293][T10871] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  551.746525][T10836] bcachefs (loop0): unclean shutdown complete, journal seq 1
[  551.759772][T10836] bcachefs (loop0): done going read-only, filesystem not clean
[  551.767470][T10836] bcachefs (loop0): bch2_fs_initialize(): error EINTR
[  551.774263][T10836] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR
[  551.782439][T10836] bcachefs (loop0): shutting down
[  551.803411][T10836] bcachefs (loop0): shutdown complete
[  551.820540][ T9519] ==================================================================
[  551.828624][ T9519] BUG: KASAN: slab-use-after-free in bch2_get_next_dev+0x371/0x4c0
[  551.836550][ T9519] Write of size 8 at addr ffff88805203a040 by task kworker/u9:0/9519
[  551.844604][ T9519] 
[  551.846919][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: kworker/u9:0 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) 
[  551.846943][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  551.846956][ T9519] Workqueue: bcachefs_journal journal_write_done
[  551.846983][ T9519] Call Trace:
[  551.846991][ T9519]  <TASK>
[  551.846999][ T9519]  dump_stack_lvl+0x189/0x250
[  551.847023][ T9519]  ? __kasan_check_byte+0x12/0x40
[  551.847053][ T9519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  551.847075][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847097][ T9519]  ? lock_release+0x4b/0x3e0
[  551.847120][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847141][ T9519]  ? __virt_addr_valid+0x4a5/0x5c0
[  551.847168][ T9519]  print_report+0xca/0x230
[  551.847185][ T9519]  ? bch2_get_next_dev+0x371/0x4c0
[  551.847203][ T9519]  kasan_report+0x118/0x150
[  551.847231][ T9519]  ? bch2_get_next_dev+0x371/0x4c0
[  551.847254][ T9519]  kasan_check_range+0x2b0/0x2c0
[  551.847285][ T9519]  bch2_get_next_dev+0x371/0x4c0
[  551.847302][ T9519]  ? bch2_get_next_dev+0x27/0x4c0
[  551.847322][ T9519]  bch2_do_discards+0x20/0x160
[  551.847342][ T9519]  journal_write_done+0x119a/0x13d0
[  551.847375][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847399][ T9519]  ? __pfx_journal_write_done+0x10/0x10
[  551.847427][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847450][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847474][ T9519]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.847490][ T9519]  ? process_scheduled_works+0x9ef/0x17b0
[  551.847512][ T9519]  ? process_scheduled_works+0x9ef/0x17b0
[  551.847534][ T9519]  process_scheduled_works+0xae1/0x17b0
[  551.847571][ T9519]  ? __pfx_process_scheduled_works+0x10/0x10
[  551.847596][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847622][ T9519]  worker_thread+0x8a0/0xda0
[  551.847646][ T9519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  551.847682][ T9519]  ? __kthread_parkme+0x7b/0x200
[  551.847716][ T9519]  kthread+0x711/0x8a0
[  551.847744][ T9519]  ? __pfx_worker_thread+0x10/0x10
[  551.847766][ T9519]  ? __pfx_kthread+0x10/0x10
[  551.847791][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847815][ T9519]  ? _raw_spin_unlock_irq+0x23/0x50
[  551.847831][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  551.847853][ T9519]  ? lockdep_hardirqs_on+0x9c/0x150
[  551.847871][ T9519]  ? __pfx_kthread+0x10/0x10
[  551.847898][ T9519]  ret_from_fork+0x3fc/0x770
[  551.847919][ T9519]  ? __pfx_ret_from_fork+0x10/0x10
[  551.847941][ T9519]  ? __switch_to_asm+0x39/0x70
[  551.847966][ T9519]  ? __switch_to_asm+0x33/0x70
[  551.847991][ T9519]  ? __pfx_kthread+0x10/0x10
[  551.848018][ T9519]  ret_from_fork_asm+0x1a/0x30
[  551.848052][ T9519]  </TASK>
[  551.848059][ T9519] 
[  552.107296][ T9519] Allocated by task 10836:
[  552.111716][ T9519]  kasan_save_track+0x3e/0x80
[  552.116397][ T9519]  __kasan_kmalloc+0x93/0xb0
[  552.120992][ T9519]  __kmalloc_cache_noprof+0x230/0x3d0
[  552.126396][ T9519]  __bch2_dev_alloc+0xa7/0xc30
[  552.131165][ T9519]  bch2_dev_alloc+0xcd/0x180
[  552.135746][ T9519]  bch2_fs_open+0x2472/0x2600
[  552.140411][ T9519]  bch2_fs_get_tree+0x44f/0x1520
[  552.145348][ T9519]  vfs_get_tree+0x92/0x2b0
[  552.149766][ T9519]  do_new_mount+0x24a/0xa40
[  552.154273][ T9519]  __se_sys_mount+0x317/0x410
[  552.158939][ T9519]  do_syscall_64+0xfa/0x3b0
[  552.163438][ T9519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.169346][ T9519] 
[  552.171658][ T9519] Freed by task 10836:
[  552.175713][ T9519]  kasan_save_track+0x3e/0x80
[  552.180386][ T9519]  kasan_save_free_info+0x46/0x50
[  552.185404][ T9519]  __kasan_slab_free+0x62/0x70
[  552.190167][ T9519]  kfree+0x18e/0x440
[  552.194062][ T9519]  kobject_put+0x22b/0x480
[  552.198473][ T9519]  bch2_fs_free+0x440/0x5a0
[  552.202987][ T9519]  bch2_fs_get_tree+0xb6e/0x1520
[  552.207928][ T9519]  vfs_get_tree+0x92/0x2b0
[  552.212349][ T9519]  do_new_mount+0x24a/0xa40
[  552.216859][ T9519]  __se_sys_mount+0x317/0x410
[  552.221527][ T9519]  do_syscall_64+0xfa/0x3b0
[  552.226028][ T9519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.231914][ T9519] 
[  552.234225][ T9519] The buggy address belongs to the object at ffff88805203a000
[  552.234225][ T9519]  which belongs to the cache kmalloc-4k of size 4096
[  552.248267][ T9519] The buggy address is located 64 bytes inside of
[  552.248267][ T9519]  freed 4096-byte region [ffff88805203a000, ffff88805203b000)
[  552.262054][ T9519] 
[  552.264367][ T9519] The buggy address belongs to the physical page:
[  552.270763][ T9519] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52038
[  552.279517][ T9519] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  552.288004][ T9519] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  552.295542][ T9519] page_type: f5(slab)
[  552.299516][ T9519] raw: 00fff00000000040 ffff88801a442140 dead000000000100 dead000000000122
[  552.308092][ T9519] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  552.316672][ T9519] head: 00fff00000000040 ffff88801a442140 dead000000000100 dead000000000122
[  552.325339][ T9519] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  552.334003][ T9519] head: 00fff00000000003 ffffea0001480e01 00000000ffffffff 00000000ffffffff
[  552.342667][ T9519] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  552.351326][ T9519] page dumped because: kasan: bad access detected
[  552.357732][ T9519] page_owner tracks the page as allocated
[  552.363434][ T9519] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5915, tgid 5915 (udevd), ts 132922970767, free_ts 132883239951
[  552.383578][ T9519]  post_alloc_hook+0x240/0x2a0
[  552.388351][ T9519]  get_page_from_freelist+0x21e4/0x22c0
[  552.393890][ T9519]  __alloc_frozen_pages_noprof+0x181/0x370
[  552.399690][ T9519]  alloc_pages_mpol+0x232/0x4a0
[  552.404546][ T9519]  allocate_slab+0x8a/0x3b0
[  552.409046][ T9519]  ___slab_alloc+0xbfc/0x1480
[  552.413720][ T9519]  __kmalloc_noprof+0x305/0x4f0
[  552.418575][ T9519]  tomoyo_realpath_from_path+0xe3/0x5d0
[  552.424122][ T9519]  tomoyo_path_perm+0x213/0x4b0
[  552.428966][ T9519]  security_inode_getattr+0x12f/0x330
[  552.434343][ T9519]  __x64_sys_newfstat+0xfc/0x200
[  552.439273][ T9519]  do_syscall_64+0xfa/0x3b0
[  552.443774][ T9519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.449663][ T9519] page last free pid 5210 tgid 5210 stack trace:
[  552.455982][ T9519]  __free_frozen_pages+0xc71/0xe70
[  552.461098][ T9519]  __put_partials+0x161/0x1c0
[  552.465765][ T9519]  put_cpu_partial+0x17c/0x250
[  552.470520][ T9519]  __slab_free+0x2f7/0x400
[  552.474928][ T9519]  qlist_free_all+0x97/0x140
[  552.479516][ T9519]  kasan_quarantine_reduce+0x148/0x160
[  552.484973][ T9519]  __kasan_slab_alloc+0x22/0x80
[  552.489825][ T9519]  __kmalloc_cache_noprof+0x1be/0x3d0
[  552.495197][ T9519]  kernfs_fop_open+0x397/0xca0
[  552.499959][ T9519]  do_dentry_open+0xdf3/0x1970
[  552.504722][ T9519]  vfs_open+0x3b/0x340
[  552.508784][ T9519]  path_openat+0x2ee5/0x3830
[  552.513373][ T9519]  do_filp_open+0x1fa/0x410
[  552.517875][ T9519]  do_sys_openat2+0x121/0x1c0
[  552.522564][ T9519]  __x64_sys_openat+0x138/0x170
[  552.527408][ T9519]  do_syscall_64+0xfa/0x3b0
[  552.531907][ T9519] 
[  552.534219][ T9519] Memory state around the buggy address:
[  552.539851][ T9519]  ffff888052039f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  552.547900][ T9519]  ffff888052039f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  552.555951][ T9519] >ffff88805203a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  552.563998][ T9519]                                            ^
[  552.570139][ T9519]  ffff88805203a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  552.578196][ T9519]  ffff88805203a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  552.586244][ T9519] ==================================================================
[  552.594351][    C0] vkms_vblank_simulate: vblank timer overrun
[  552.611773][T10871] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.1516: inline data xattr refers to an external xattr inode
[  552.652038][ T9519] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  552.659249][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: kworker/u9:0 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(full) 
[  552.671405][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  552.681460][ T9519] Workqueue: bcachefs_journal journal_write_done
[  552.687808][ T9519] Call Trace:
[  552.691070][ T9519]  <TASK>
[  552.693985][ T9519]  dump_stack_lvl+0x99/0x250
[  552.698566][ T9519]  ? __asan_memcpy+0x40/0x70
[  552.703149][ T9519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.708336][ T9519]  ? __pfx__printk+0x10/0x10
[  552.712923][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.718550][ T9519]  panic+0x2db/0x790
[  552.722440][ T9519]  ? __pfx_panic+0x10/0x10
[  552.726848][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.732473][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.738107][ T9519]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  552.744002][ T9519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  552.750325][ T9519]  ? print_memory_metadata+0x314/0x400
[  552.755773][ T9519]  ? bch2_get_next_dev+0x371/0x4c0
[  552.760871][ T9519]  check_panic_on_warn+0x89/0xb0
[  552.765814][ T9519]  ? bch2_get_next_dev+0x371/0x4c0
[  552.770912][ T9519]  end_report+0x78/0x160
[  552.775301][ T9519]  kasan_report+0x129/0x150
[  552.779819][ T9519]  ? bch2_get_next_dev+0x371/0x4c0
[  552.784942][ T9519]  kasan_check_range+0x2b0/0x2c0
[  552.789893][ T9519]  bch2_get_next_dev+0x371/0x4c0
[  552.794836][ T9519]  ? bch2_get_next_dev+0x27/0x4c0
[  552.799861][ T9519]  bch2_do_discards+0x20/0x160
[  552.804624][ T9519]  journal_write_done+0x119a/0x13d0
[  552.809832][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.815480][ T9519]  ? __pfx_journal_write_done+0x10/0x10
[  552.821061][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.826699][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.832333][ T9519]  ? _raw_spin_unlock_irq+0x23/0x50
[  552.837524][ T9519]  ? process_scheduled_works+0x9ef/0x17b0
[  552.843242][ T9519]  ? process_scheduled_works+0x9ef/0x17b0
[  552.848964][ T9519]  process_scheduled_works+0xae1/0x17b0
[  552.854529][ T9519]  ? __pfx_process_scheduled_works+0x10/0x10
[  552.860512][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.866151][ T9519]  worker_thread+0x8a0/0xda0
[  552.870750][ T9519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  552.877088][ T9519]  ? __kthread_parkme+0x7b/0x200
[  552.882031][ T9519]  kthread+0x711/0x8a0
[  552.886104][ T9519]  ? __pfx_worker_thread+0x10/0x10
[  552.891209][ T9519]  ? __pfx_kthread+0x10/0x10
[  552.895798][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.901426][ T9519]  ? _raw_spin_unlock_irq+0x23/0x50
[  552.906618][ T9519]  ? srso_alias_return_thunk+0x5/0xfbef5
[  552.912259][ T9519]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.917448][ T9519]  ? __pfx_kthread+0x10/0x10
[  552.922043][ T9519]  ret_from_fork+0x3fc/0x770
[  552.926629][ T9519]  ? __pfx_ret_from_fork+0x10/0x10
[  552.931734][ T9519]  ? __switch_to_asm+0x39/0x70
[  552.936492][ T9519]  ? __switch_to_asm+0x33/0x70
[  552.941248][ T9519]  ? __pfx_kthread+0x10/0x10
[  552.945844][ T9519]  ret_from_fork_asm+0x1a/0x30
[  552.950618][ T9519]  </TASK>
[  552.953899][ T9519] Kernel Offset: disabled
[  552.958235][ T9519] Rebooting in 86400 seconds..