last executing test programs:

16m47.184968852s ago: executing program 2 (id=3):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000006480)=ANY=[@ANYBLOB="02c8201e001a00010004ff16"], 0x23)

16m46.97964465s ago: executing program 2 (id=7):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

16m46.558516327s ago: executing program 3 (id=4):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r3, 0x6, 0x2, 0x0, &(0x7f0000002840))
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0)

16m44.404138375s ago: executing program 3 (id=9):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fdatasync(r0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
r2 = dup(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000300)=""/102376, 0x18fe8)
sendfile(r1, r2, 0x0, 0x80006)

16m44.33510842s ago: executing program 2 (id=10):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'})

16m42.25463596s ago: executing program 3 (id=12):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x840)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8000)

16m42.161073514s ago: executing program 2 (id=13):
mmap(&(0x7f0000d59000/0x3000)=nil, 0x3000, 0xfffffffffffffff4, 0x20031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0xffffff7d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
close(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'})
r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x400)
ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080))
syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x840)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x7, 0x4, 0x4, 0x6ff})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0xfffffdaf}}, 0xfffffffffffffffb)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00", @ANYBLOB="0a813d5ac1740ecabefa47b0ed059b6beb94660011bd1cf4b0b51e649cf0688e78e8"], 0x38}}, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")

16m41.867718768s ago: executing program 3 (id=16):
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
process_vm_readv(r0, &(0x7f0000001cc0)=[{&(0x7f0000000340)=""/190, 0xbe}, {0x0}, {&(0x7f00000004c0)=""/80, 0x50}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001e80)=""/5, 0x5}], 0x1, 0x0)

16m37.176958223s ago: executing program 3 (id=18):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

16m35.494517622s ago: executing program 2 (id=20):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x22020600)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0)

16m21.952548638s ago: executing program 32 (id=18):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

16m18.688563389s ago: executing program 33 (id=20):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
unshare(0x22020600)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0)

1m13.294679738s ago: executing program 0 (id=2789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(0x0, r0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x0)

1m10.038861821s ago: executing program 7 (id=2799):
unshare(0x8040600)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101402, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)
fsmount(0xffffffffffffffff, 0x0, 0x80)

1m10.038491449s ago: executing program 0 (id=2801):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
clock_nanosleep(0x7, 0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1685}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000)

1m9.706683533s ago: executing program 7 (id=2804):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x3c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x23, 0x0, 0x0, 0x1, [@generic="25dc00ae07d1ef04c8de396d1073884d095537a2e7044884f17912923e15e6"]}]}, 0x3c}], 0x1}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x40, 0x161802)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

1m9.648842337s ago: executing program 0 (id=2805):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c0005"], 0x54}}, 0x0)

1m9.256375142s ago: executing program 0 (id=2809):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x3829410, 0x0)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x554, &(0x7f0000000440)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xd, 0x2, 0x804, 0x0, 0x100000000}, {0xffffffff, 0xa52f, 0x0, 0x2}]})

1m8.85475816s ago: executing program 0 (id=2811):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x25a5, 0x0)

1m5.702745683s ago: executing program 7 (id=2824):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$eJzs3W1rZFcdAPD/vcnsZndTM1WRtWBbbGVXdGeSxrZBpF1B9FVBre/XmExCyCQTMpO6CUVT/ACCiAp+AN8IfgBB+hFEKOh7UVHEbvWl7pU7c6NJZiaZTSaZNPn94GTOuQ/nf84lc+c+HO4N4Mp6PiLuR8RYRHw2IqaK6WmRYreT8uU+ePT2Qp6SyLI3/5FEUkzbqysvj0fErWK1iYj45tcivpN0x21u76zO1+u1zaJcba1tVJvbO/dW1uaXa8u19dnZmVfmXp17eW46K5yqn+WIeO0rf/nJD3/x1dd+8/nv/vHB3+5+L2/Wlz7RaXdELAxQzdiTxu3UXWpviz35Ntp80oousLw/pSfeMgAAjEJ+jP/RiPh0+/h/KsbaR3MAAADAZZK9Phn/TiIyAAAA4NJKI2IykrRSjAWYjDStVDpjeD8eN9N6o9n63FJja30xnxdRjlK6tFKvTRdjhctRSvLyTDHGdq/80qHybEQ8HRE/nrrRLlcWGvXFUV/8AAAAgCvi1nMHz///NZW2893uT5574wAAAIDhKfctAAAAAJeFU34AAAC4/Jz/AwAAwKX29TfeyFO29x7vxbe2t1Ybb91brDVXK2tbC5WFxuZGZbnRWG4/s2/tuPrqjcbGF2J962G1VWu2qs3tnQdrja311oOVA6/ABgAAAM7R08+9+4ckIna/eKOdongOIMABfx51A4BhGht1A4CRGR91A4CRKR27RO89xI0zaAswGskx87sH7xR7gN+eTXsAAIDhu/PJ7vv/14p5x18bAD7MjPUBgKvH/X+4ukonHQF4e9gtAUblI52P6/3m9314xwD3/zvXGLLsRA0DAACGZrKdkrRSHKdPRppWKhFPtV8LUEqWVuq16eL84PdTpet5eaa9ZnLsmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCPLksgAAACASy0i/WvSfpp/xJ2pFycPXh049Navn7/504fzrdbmTMS15P2pfNK1iGj9rJj+UuaVAAAAAHABdM7T43oU5/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMEwfPHp7YS+dZ9y/fzkiyr3ij8dE+3MiShFx859JjO9bL4mIsSHE330nIm73ip/E4yzLykUresW/ccbxy+1N0zt+GhG3hhAfrrJ38/3P/V7fvzSeb3/2/v6NF+m0+u//0v/t/8b67H+eOlTu55n3flXtG/+diGfGe+9/9uInnfgHQuSFFwbs47e/tbPTc8a+KnvF3x+r2lrbqDa3d+6trM0v15Zr67OzM6/MvTr38tx0dWmlXiv+9gzzo0/9+vFR/b/ZJ375YP+7tv+LA/U+i/+89/DRxzqFUq/4d1/o/ft7u0/8tPjt+0yRz+ff2cvvdvL7PfvL3z17VP8Xe/c/mTim/3cH6n+8n33jB3/qOadrawAA56G5vbM6X6/XNo/ITAywzDlnXr8YzRhiJi5GM0aVyb7f+X88XT2nXL0rk51m9fEYQjOudX1Px+KkFSYRu3ldA/5DAgAAl8z/D/qPuoMEAAAAAAAAAAAAAAAAAAAAnKUTPpZsIiIGXvhwzN3RdBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA//9kR9Lv")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file1'}, 0xb)
fadvise64(r0, 0x7, 0x400, 0x4)

1m5.022646601s ago: executing program 7 (id=2831):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441e, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @adiantum, 0x4, '\x00', @auto="048ead0d131ada270173ab0f68bb9c6d"})

1m4.530733705s ago: executing program 0 (id=2834):
r0 = socket$netlink(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff818326230e227f000001925aa8002000ffbbcfa7c14f15587b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee0000000000", 0x58}], 0x1)

1m4.018024902s ago: executing program 34 (id=2834):
r0 = socket$netlink(0x10, 0x3, 0x10)
writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff818326230e227f000001925aa8002000ffbbcfa7c14f15587b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee0000000000", 0x58}], 0x1)

1m4.001533052s ago: executing program 7 (id=2837):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000000)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4de, &(0x7f0000000dc0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_GET_IO_FLUSHER(0x4)
syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='clear_refs\x00')
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x80, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x6c, 0x1, [@m_tunnel_key={0x38, 0x17, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, 'vP'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_simple={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x80}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f00000011c0)=[{0x44}, {0x6}]})

1m2.282590535s ago: executing program 7 (id=2848):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x802, 0x1)
unlink(0x0)
connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
write(r2, &(0x7f0000000440)="08008edf773c8000", 0x8)

1m0.909766877s ago: executing program 35 (id=2848):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x802, 0x1)
unlink(0x0)
connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
write(r2, &(0x7f0000000440)="08008edf773c8000", 0x8)

28.316631194s ago: executing program 5 (id=2980):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close_range(r0, 0xffffffffffffffff, 0x0)

26.766006202s ago: executing program 5 (id=2985):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

26.526718675s ago: executing program 5 (id=2986):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x4, @desc4})

25.497768732s ago: executing program 5 (id=2991):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffff5, 0x1)
r1 = epoll_create1(0x80000)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x85, &(0x7f0000000180)={[0x1000000000006]}, 0x8)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113920000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000f500000000003ee8d1e9147e4890698064b82bfcc3fa537707e5aec14184353b81404b946edde0d28ab0fdb5379ebf52a37d7c235aaf70af81df7bfb4f303b01895f25aea828a130dd343ef5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0)
r2 = semget$private(0x0, 0x6, 0x0)
semtimedop(r2, &(0x7f0000000000)=[{0x3, 0x101, 0xc8010663881ff1a5}, {0x0, 0x7, 0x1000}], 0x2, &(0x7f0000000100))
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000480)={0xc})
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x3000)=nil)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nobh}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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")
mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB])

24.870899405s ago: executing program 5 (id=2993):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746, @void, @value}, 0x94)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050009000000140004"], 0x58}}, 0x0)

23.967666664s ago: executing program 5 (id=3000):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(0x0, 0x101800, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00')
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd", 0x81}], 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

22.218467403s ago: executing program 36 (id=3000):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(0x0, 0x101800, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00')
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd", 0x81}], 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

7.558872478s ago: executing program 6 (id=3054):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close_range(r0, 0xffffffffffffffff, 0x0)

6.458761187s ago: executing program 6 (id=3056):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x5b, 0xf, 0xfc, 0x40, 0x1199, 0x9041, 0x5c09, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x8, 0x0, 0x5c, 0xfc, 0xad, 0x80}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x40045506, 0xfffffffffffffffe)

5.462057117s ago: executing program 6 (id=3061):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd", 0x81}], 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

5.22661364s ago: executing program 6 (id=3063):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./file0\x00', 0x20, &(0x7f0000001140)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="4315cc13ac94e9c3f0e2a8fafa5c9e4056273145be0c4331799b7e8df2ae24e73ba617968a52ecc15024f5995d84c2fde4920b700c711be5c87dcf179ee64e91619613a7f80dc5732438031843cf24457cbf5c844745d13eaa9248fba73776f8284069ffa18933269237037b352c1e236db691ab072d0fce5a9c7e6d9bb27ff13028d9d36f68d92a0a313b6d635419baeaebd57a394952846ccda1a950f90995fe13c4e506a4241a4ebb201ab59e3f9c86e074e13cef696364b07e94eaf2912bb4abfe", @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="c0dd326b825326b4ead2e2c4133006cadd65190444b37dc11727acecbeb870445fb008be08a9a03546f0274146164ceae57313603528e464e93c959cb3455beecde1077dc9c4e05748d800479c46041dfb246401b58b4a80ed7d5c10630a6fff5177c188d6c3c5bd8952dc1e37abd7683208f58ec53b66fa7ac8f54fd65739ebc634da17da39e8b0ca4ada", @ANYBLOB="c02e3b43c8e47c23ada7fc231df8e9dcb69d0d3fb84c48a5280270dc1be7b9bcbe71e49a4006cac7d98f09bbbc6d7563efeb29623237e83dd0edf11ee06c98be050ffdaf07ca64dfa178b0322dc510e23296adca5f3dd0da3d5cfe3ebf6fc2802b43a8c4d2be3f2f9dc8a80b7dd14eb4655f4703fec8aabd7e9f6282fa23514771dee0ba3634827347dbf2b333c34b041c5d9ee36b38fcbcd890545fb5e4b38abc02d2e7335a71b4d4a8d877f7c109e71e8611f7d05df96a7cb13241d51c8cf57df86208b6198e8b093dadc347eabf5a2a7ffe18ac6aace6533403b0fa6d2abeb1ec6b180ff48e1cbc79f1c8e3ed940d79b6533d5d91c4c8e0b82e7e764425f74e6d62fc53232aa35760a3e0", @ANYRESOCT=r1, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

4.978775271s ago: executing program 6 (id=3065):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close_range(r0, 0xffffffffffffffff, 0x0)

3.863937551s ago: executing program 6 (id=3066):
unshare(0x40020000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0)

3.019589237s ago: executing program 4 (id=3070):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc004)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
write(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ac0), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044)

2.287114535s ago: executing program 4 (id=3072):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd", 0x81}], 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

2.129830025s ago: executing program 4 (id=3074):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x1, 0x9}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000200))

1.826784296s ago: executing program 1 (id=3075):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fscache'])
chdir(&(0x7f0000000000)='./file0\x00')
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

1.498199991s ago: executing program 1 (id=3076):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4)

1.342660157s ago: executing program 1 (id=3077):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x20, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x100000000, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

1.070549478s ago: executing program 4 (id=3078):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r1, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

863.354918ms ago: executing program 1 (id=3079):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@grpjquota, 0x4a}, {@nobarrier}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@bsdgroups}, {@sb={'sb', 0x3d, 0x5}, 0x22}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO")
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, 0x0)

542.131153ms ago: executing program 1 (id=3080):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff})
r1 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
syz_io_uring_submit(r2, r3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
syz_io_uring_setup(0x110, 0x0, &(0x7f0000000340), 0x0)
getsockname(0xffffffffffffffff, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000140)=0x80)
r7 = syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffff1, 0x14f301)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x810, r7, 0xdb945000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)

326.853952ms ago: executing program 4 (id=3081):
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0xd8, 0x0, 0x206, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x687c, 0x30}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xb0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa9, 0x3, "261b0249a8fdae426fba3e1f2d308a9a0e160c24ec2810c1ef0b974626512028ab5e128dcaf0adf97fdc14621674dcb4628a58d9227f936d503980908366e74009c06cb986e815721f8899f0c4f60a96d560534ad13e7edf20e145cc41decb68c553a0f48e5f28f348e3c0025643dcee616b2814446287542a5220bbe735b936b63b33dd416e606035308c17765793d8935630cb5e1dc6f9bebbab08f698a5f94179beafa2"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x20008045)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8)
sendmmsg$inet6(r0, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)

56.7489ms ago: executing program 4 (id=3082):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140))

0s ago: executing program 1 (id=3083):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)="f4660840854bbd99dff2d608f65160d8b7167e5618904aa41d48ac1bd75caa8fd7e3927f5f21ab33ea7a672a6ce9a41b73fdf30daaca9929948d99f66e020dd8f3309ade190ba4d3e3f7ee6099e3520c7178196572d1ff629e257df16f1187eac57979b53881ce418ee4d200841478ae8ad6e8507a0c7ab1ddb4bb35de204f62bd", 0x81}], 0x1)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

kernel console output (not intermixed with test programs):

(loop5): Quotacheck needed: Please wait.
[  912.908408][T13794] XFS (loop5): Quotacheck: Done.
[  912.943464][T13794] __nla_validate_parse: 42 callbacks suppressed
[  912.943486][T13794] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2172'.
[  913.073039][ T5842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  913.901174][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.722309][ T6079] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  914.902026][ T6079] usb 7-1: Using ep0 maxpacket: 8
[  914.921559][ T6079] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  914.952069][ T6079] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  914.961280][ T6079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  915.192240][T13821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2180'.
[  915.844535][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.853746][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.862828][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.871758][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.880850][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.889851][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.898833][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  915.907897][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'.
[  916.069326][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short
[  916.112270][ T5936] usb 1-1: unable to read config index 0 descriptor/start: -32
[  916.142249][ T5936] usb 1-1: chopping to 0 config(s)
[  916.149312][ T5936] usb 1-1: can't read configurations, error -32
[  916.749595][T13844] binder: 13839:13844 ioctl 4018620d 0 returned -22
[  918.070797][ T5936] usb 7-1: USB disconnect, device number 42
[  918.331976][    T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  918.522075][    T9] usb 5-1: Using ep0 maxpacket: 16
[  918.575075][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  918.637409][    T9] usb 5-1: unable to read config index 0 descriptor/start: -71
[  918.652142][    T9] usb 5-1: can't read configurations, error -71
[  919.119868][T13893] binder: 13887:13893 ioctl 4018620d 0 returned -22
[  919.670148][T13886] __nla_validate_parse: 95 callbacks suppressed
[  919.670171][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.685589][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.694547][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.703753][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.712732][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.721647][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.730711][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.739656][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.749029][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  919.758002][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2209'.
[  920.028889][ T6079] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  920.232235][ T6079] usb 7-1: Using ep0 maxpacket: 8
[  920.263696][ T6079] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  920.286558][ T6079] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  920.324461][ T6079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  921.607182][T13914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  921.927703][T13934] binder: 13930:13934 ioctl 4018620d 0 returned -22
[  922.653774][T13941] loop4: detected capacity change from 0 to 1024
[  922.674302][T13941] hfsplus: bad catalog file entry
[  922.679476][T13941] hfsplus: failed to load root directory
[  922.720156][ T5936] usb 7-1: USB disconnect, device number 43
[  923.346246][T13951] loop1: detected capacity change from 0 to 512
[  923.442179][T13951] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  924.170389][T13951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  924.185709][T13951] System zones: 1-12
[  924.208663][T13951] EXT4-fs (loop1): 1 truncate cleaned up
[  924.217247][T13951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  924.982172][ T6079] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  925.044686][T13975] binder: BINDER_SET_CONTEXT_MGR already set
[  925.050747][T13975] binder: 13971:13975 ioctl 4018620d 200000000040 returned -16
[  925.222554][ T6079] usb 1-1: Using ep0 maxpacket: 8
[  925.264290][ T6079] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  925.311379][ T6079] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  925.362911][ T6079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.353400][T13980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.822890][ T6037] usb 1-1: USB disconnect, device number 44
[  927.881989][ T5817] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  928.062147][ T5817] usb 7-1: Using ep0 maxpacket: 16
[  928.110510][ T5817] usb 7-1: unable to get BOS descriptor or descriptor too short
[  928.136429][ T5817] usb 7-1: unable to read config index 0 descriptor/start: -71
[  928.195139][ T5817] usb 7-1: can't read configurations, error -71
[  928.229398][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  928.289805][T14018] binder: BINDER_SET_CONTEXT_MGR already set
[  928.296248][T14018] binder: 14016:14018 ioctl 4018620d 200000000040 returned -16
[  929.083657][T14036] žÿ: renamed from team_slave_1 (while UP)
[  929.817489][T14033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  930.143496][T14055] __nla_validate_parse: 144 callbacks suppressed
[  930.143519][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.158934][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.167912][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.176842][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.185890][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.195213][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.204408][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.213508][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.223056][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.232229][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  930.882124][ T5817] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  931.081938][ T5817] usb 6-1: Using ep0 maxpacket: 16
[  931.127843][ T5817] usb 6-1: unable to get BOS descriptor or descriptor too short
[  931.149818][ T5817] usb 6-1: unable to read config index 0 descriptor/start: -71
[  931.195271][ T5817] usb 6-1: can't read configurations, error -71
[  931.293497][T14069] No control pipe specified
[  932.213812][T14081] loop0: detected capacity change from 0 to 1024
[  932.654851][T14078] binder: BINDER_SET_CONTEXT_MGR already set
[  932.660891][T14078] binder: 14073:14078 ioctl 4018620d 200000000040 returned -16
[  932.684494][T14081] hfsplus: bad catalog file entry
[  932.689686][T14081] hfsplus: failed to load root directory
[  932.955343][T14082] wg2: entered promiscuous mode
[  932.960289][T14082] wg2: entered allmulticast mode
[  934.212322][ T5817] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  934.427820][T14110] No control pipe specified
[  934.617920][T14108] loop0: detected capacity change from 0 to 32768
[  934.625539][T14108] XFS: ikeep mount option is deprecated.
[  934.754656][ T5817] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  934.771906][ T5817] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  934.791907][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  934.889759][T14108] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  934.908444][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  935.032047][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  935.049651][T14108] XFS (loop0): Ending clean mount
[  935.057212][T14108] XFS (loop0): Quotacheck needed: Please wait.
[  935.198126][T14108] XFS (loop0): Quotacheck: Done.
[  935.207145][ T5817] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  935.227418][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  935.251925][ T5817] usb 6-1: Product: syz
[  935.260954][ T5817] usb 6-1: Manufacturer: syz
[  935.278221][T14108] __nla_validate_parse: 92 callbacks suppressed
[  935.278241][T14108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2298'.
[  935.507540][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[  935.538395][ T5817] cdc_wdm 6-1:1.0: skipping garbage
[  935.582609][ T5817] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  935.613902][ T5817] cdc_wdm 6-1:1.0: Unknown control protocol
[  935.743903][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  935.844164][T14116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  935.972321][ T5817] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  935.976646][ T6079] usb 6-1: USB disconnect, device number 38
[  936.162284][ T5817] usb 5-1: Using ep0 maxpacket: 16
[  936.255818][ T5817] usb 5-1: unable to get BOS descriptor or descriptor too short
[  936.323141][ T5817] usb 5-1: unable to read config index 0 descriptor/start: -71
[  936.335369][T14130] binder: 14128:14130 ioctl c0306201 0 returned -14
[  936.364540][ T5817] usb 5-1: can't read configurations, error -71
[  936.383411][T14130] binder: BINDER_SET_CONTEXT_MGR already set
[  936.410706][T14130] binder: 14128:14130 ioctl 4018620d 200000000040 returned -16
[  938.019843][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.029370][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.038794][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.048264][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.057921][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.067671][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.077116][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.086593][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  938.096028][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'.
[  939.088212][    T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  939.139200][T14168] loop4: detected capacity change from 0 to 512
[  939.163586][T14168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  939.210913][T14167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  939.241491][T14168] EXT4-fs (loop4): 1 truncate cleaned up
[  939.265429][T14168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.282977][ T5905] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  939.288139][    T9] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  939.302121][    T9] usb 2-1: config 0 has no interface number 0
[  939.308286][    T9] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 44016, setting to 64
[  939.320459][    T9] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  939.331966][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.364415][    T9] usb 2-1: config 0 descriptor??
[  939.372426][T14161] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  939.424084][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input15
[  939.494611][ T5905] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  939.530385][ T5905] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  939.572401][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  939.581475][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  939.633169][T14168] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  939.635443][    T9] usb 2-1: USB disconnect, device number 38
[  939.643419][    C0] usbtouchscreen 2-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19
[  939.690913][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  939.712409][T14168] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  939.777910][ T5905] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  939.791996][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  939.822174][ T5905] usb 6-1: Product: syz
[  939.826484][ T5905] usb 6-1: Manufacturer: syz
[  939.901129][ T5905] cdc_wdm 6-1:1.0: skipping garbage
[  939.928098][ T5905] cdc_wdm 6-1:1.0: skipping garbage
[  939.955701][ T5905] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  939.961664][ T5905] cdc_wdm 6-1:1.0: Unknown control protocol
[  940.000037][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.434958][T14181] binder: 14179:14181 ioctl c0306201 0 returned -14
[  940.492199][ T5905] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  940.548694][T14185] loop1: detected capacity change from 0 to 256
[  940.569189][T14185] vfat: Bad value for 'fmask'
[  940.652720][ T5905] usb 5-1: Using ep0 maxpacket: 16
[  940.676060][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short
[  940.692173][ T5905] usb 5-1: unable to read config index 0 descriptor/start: -71
[  940.707595][ T5905] usb 5-1: can't read configurations, error -71
[  940.904787][T14187] binder: 14186:14187 ioctl 8010550e 0 returned -22
[  941.156640][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  941.164962][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  941.935798][T14197] __nla_validate_parse: 43 callbacks suppressed
[  941.935856][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  941.951820][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  941.961583][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  941.971503][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  941.981406][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  941.991279][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  942.000911][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  942.010611][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  942.020262][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  942.029933][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'.
[  942.825185][ T5905] usb 6-1: USB disconnect, device number 39
[  943.122171][T14202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  943.233817][T14208] loop4: detected capacity change from 0 to 8
[  943.549876][T14216] tap0: tun_chr_ioctl cmd 2147767517
[  943.662091][ T5905] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  943.850694][T14224] binder: 14219:14224 ioctl c0306201 0 returned -14
[  943.890187][ T5905] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[  943.910614][ T5905] usb 6-1: config 0 has no interface number 0
[  943.925564][ T5905] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 44016, setting to 64
[  943.969588][ T5905] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  943.989326][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.997739][ T6037] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  944.026738][ T5905] usb 6-1: config 0 descriptor??
[  944.040942][T14211] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  944.090492][ T5905] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input16
[  944.174726][ T6037] usb 1-1: Using ep0 maxpacket: 16
[  944.211507][ T6037] usb 1-1: unable to get BOS descriptor or descriptor too short
[  944.222967][ T6037] usb 1-1: unable to read config index 0 descriptor/start: -71
[  944.237768][ T6037] usb 1-1: can't read configurations, error -71
[  944.258527][T14232] loop1: detected capacity change from 0 to 128
[  944.273383][ T5905] usb 6-1: USB disconnect, device number 40
[  944.310787][T14232] EXT4-fs: Ignoring removed nobh option
[  944.397856][T14232] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  944.427838][T14232] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  944.731628][T14232] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  945.077226][T14251] loop7: detected capacity change from 0 to 256
[  945.136674][T14252] loop1: detected capacity change from 0 to 1024
[  945.186284][T14252] EXT4-fs: Ignoring removed nobh option
[  945.193172][T14252] EXT4-fs: Ignoring removed bh option
[  945.222918][T14254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  945.542120][ T6037] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  945.832907][T14252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  945.969138][ T6037] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  946.067579][ T6037] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  946.126178][ T6037] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  946.146403][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  946.176566][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.201135][T14261] loop7: detected capacity change from 0 to 2048
[  946.496115][ T6037] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  946.507950][T14261] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  946.597009][ T6037] usb 5-1: no configuration chosen from 1 choice
[  946.758982][T14261] UDF-fs: Scanning with blocksize 512 failed
[  946.887372][T14261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  947.047819][T14269] loop0: detected capacity change from 0 to 2048
[  947.120358][T14269] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  947.169018][T14269] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.2362: iget: bad i_size value: 8796093031208
[  947.439438][ T5847] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  947.730660][T14287] loop5: detected capacity change from 0 to 256
[  947.779209][T14287] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d)
[  948.003730][ T6079] usb 5-1: USB disconnect, device number 35
[  948.507966][T14300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  949.573492][ T5817] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  949.721968][ T5817] usb 2-1: device descriptor read/64, error -71
[  949.837154][T14326] loop4: detected capacity change from 0 to 128
[  950.032013][ T5817] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  950.192067][ T5817] usb 2-1: device descriptor read/64, error -71
[  950.326942][ T5817] usb usb2-port1: attempt power cycle
[  950.681971][ T5817] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  950.710296][ T5817] usb 2-1: device descriptor read/8, error -71
[  950.982183][ T5817] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  951.002737][ T5817] usb 2-1: device descriptor read/8, error -71
[  951.092567][T14337] binder: BINDER_SET_CONTEXT_MGR already set
[  951.098631][T14337] binder: 14333:14337 ioctl 4018620d 200000000040 returned -16
[  951.129159][ T5817] usb usb2-port1: unable to enumerate USB device
[  951.778043][T14341] __nla_validate_parse: 43 callbacks suppressed
[  951.778069][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.794331][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.803352][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.812292][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.821172][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.830144][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.839136][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.848064][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.856992][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  951.865919][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2390'.
[  952.344875][T14345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  952.345782][T14350] loop0: detected capacity change from 0 to 256
[  952.430478][T14350] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  952.476381][T14350] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  952.551398][T14350] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  953.049180][T14361] xt_CT: You must specify a L4 protocol and not use inversions on it
[  954.362001][ T5933] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  954.562551][ T5933] usb 6-1: Using ep0 maxpacket: 16
[  954.918965][T14384] loop0: detected capacity change from 0 to 32768
[  954.926718][T14384] XFS: ikeep mount option is deprecated.
[  955.005768][T14384] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  955.210315][T14384] XFS (loop0): Ending clean mount
[  955.219884][T14384] XFS (loop0): Quotacheck needed: Please wait.
[  955.291537][T14384] XFS (loop0): Quotacheck: Done.
[  955.392058][ T5936] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  955.484122][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  955.559586][ T5936] usb 7-1: device descriptor read/64, error -71
[  955.779577][T14397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.801984][ T5936] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  955.935599][T14400] loop7: detected capacity change from 0 to 512
[  955.952517][ T5936] usb 7-1: device descriptor read/64, error -71
[  955.983926][T14400] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  956.062902][ T5936] usb usb7-port1: attempt power cycle
[  956.077451][T14400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  956.092278][T14400] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  956.180411][T14400] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #12: comm syz.7.2412: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  956.541961][ T5936] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  956.582734][ T5936] usb 7-1: device descriptor read/8, error -71
[  956.761077][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  956.834677][ T5936] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  956.872810][ T5936] usb 7-1: device descriptor read/8, error -71
[  956.903379][ T6079] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  957.002847][ T5936] usb usb7-port1: unable to enumerate USB device
[  957.077418][ T6079] usb 1-1: unable to get BOS descriptor or descriptor too short
[  957.099761][ T6079] usb 1-1: not running at top speed; connect to a high speed hub
[  957.136069][ T6079] usb 1-1: config 3 has an invalid interface number: 98 but max is 0
[  957.157980][ T6079] usb 1-1: config 3 has no interface number 0
[  957.179594][ T6079] usb 1-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 4
[  957.212212][ T6079] usb 1-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0
[  957.252249][ T6079] usb 1-1: config 3 interface 98 has no altsetting 0
[  957.279667][ T6079] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8
[  957.297185][ T6079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.353368][ T6079] usb 1-1: Product: syz
[  957.357603][ T6079] usb 1-1: Manufacturer: syz
[  957.805524][T14420] loop7: detected capacity change from 0 to 1024
[  958.048589][T14420] hfsplus: bad catalog file entry
[  958.052126][ T6079] usb 1-1: SerialNumber: syz
[  958.054059][T14420] hfsplus: failed to load root directory
[  958.360739][ T6079] usb 1-1: USB disconnect, device number 47
[  958.709769][T14425] loop1: detected capacity change from 0 to 128
[  958.771720][T14425] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  958.886726][T14425] ext4 filesystem being mounted at /456/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  959.090684][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  959.147390][T14433] fuse: Bad value for 'fd'
[  959.423150][T14439] loop6: detected capacity change from 0 to 128
[  959.438547][T14439] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  959.705601][T14437] loop0: detected capacity change from 0 to 32768
[  959.713473][T14437] XFS: ikeep mount option is deprecated.
[  959.725727][ T5933] usb 6-1: unable to get BOS descriptor or descriptor too short
[  959.740224][ T5933] usb 6-1: unable to read config index 0 descriptor/start: -32
[  959.753728][ T5933] usb 6-1: chopping to 0 config(s)
[  959.758925][ T5933] usb 6-1: can't read configurations, error -32
[  959.774677][T14439] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  959.786074][T14437] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  959.853825][T14437] XFS (loop0): Ending clean mount
[  959.861341][T14437] XFS (loop0): Quotacheck needed: Please wait.
[  959.902407][ T5933] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  959.911985][T14437] XFS (loop0): Quotacheck: Done.
[  959.927193][T14437] __nla_validate_parse: 45 callbacks suppressed
[  959.927215][T14437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2422'.
[  960.055652][ T5933] usb 6-1: device descriptor read/64, error -32
[  960.058891][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  960.172208][ T5933] usb usb6-port1: attempt power cycle
[  960.380775][T14452] loop6: detected capacity change from 0 to 1024
[  960.582376][ T5933] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  960.623521][ T5933] usb 6-1: device descriptor read/8, error -32
[  960.901935][ T5933] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  960.966608][ T5933] usb 6-1: device descriptor read/8, error -32
[  961.024160][ T5817] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  961.094494][ T5933] usb usb6-port1: unable to enumerate USB device
[  961.152773][T14450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.194490][ T5817] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  961.205894][ T5817] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  961.215975][ T5817] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  961.226186][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.242188][ T6079] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  961.248944][T14455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  961.293010][ T5817] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  961.422236][ T6079] usb 7-1: Using ep0 maxpacket: 8
[  961.454962][ T6079] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  961.488580][ T6079] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  961.501020][ T6079] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.505749][ T5817] usb 1-1: USB disconnect, device number 48
[  962.517765][T14467] loop1: detected capacity change from 0 to 256
[  962.551304][T14467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  962.587853][T14467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  962.609207][T14467] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  962.626985][T14467] UDF-fs: Scanning with blocksize 512 failed
[  962.636586][T14467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  962.650737][T14467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  963.600472][T14481] loop5: detected capacity change from 0 to 32768
[  963.607940][T14481] XFS: ikeep mount option is deprecated.
[  963.651632][T14481] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  963.760847][T14481] XFS (loop5): Ending clean mount
[  963.768147][T14481] XFS (loop5): Quotacheck needed: Please wait.
[  963.832321][T14481] XFS (loop5): Quotacheck: Done.
[  963.864549][T14481] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2436'.
[  963.984957][ T5842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  965.169103][ T5905] usb 7-1: USB disconnect, device number 50
[  965.175305][T10328] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  965.386382][T10328] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  965.422455][T10328] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  965.446555][T10328] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  965.476478][T10328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.552529][T14496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  965.625252][T10328] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  965.774811][T14508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  965.872191][ T6079] usb 1-1: USB disconnect, device number 49
[  965.913135][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  966.032861][ T8207] udevd[8207]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  966.112163][    T9] usb 5-1: Using ep0 maxpacket: 8
[  966.144548][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  966.145293][T14500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  966.161967][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  966.198503][    T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  966.238306][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.304672][    T9] usb 5-1: config 0 descriptor??
[  966.935538][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  966.963916][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  966.971151][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.006346][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.021599][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.029061][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.037076][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.044370][    T9] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0
[  967.059769][    T9] hid-rmi 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0
[  967.271777][T14530] loop0: detected capacity change from 0 to 32768
[  967.279339][T14530] XFS: ikeep mount option is deprecated.
[  967.542128][T14530] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  967.562713][    T9] usb 5-1: USB disconnect, device number 36
[  968.399521][T14530] XFS (loop0): Ending clean mount
[  968.407255][T14530] XFS (loop0): Quotacheck needed: Please wait.
[  968.529041][T14547] loop6: detected capacity change from 0 to 256
[  968.545179][T14530] XFS (loop0): Quotacheck: Done.
[  968.608830][T14530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2455'.
[  968.979475][T14547] exfat: Invalid uid '0x00000000ffffffff'
[  969.148764][T14533] fido_id[14533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  969.269425][T14547] loop6: detected capacity change from 0 to 1024
[  969.294923][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  969.569307][T14553] loop5: detected capacity change from 0 to 512
[  969.806425][T14553] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  969.889693][T14553] EXT4-fs (loop5): 1 truncate cleaned up
[  969.990271][T14553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.262703][T14553] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2461: Logical block already allocated
[  970.442234][T14553] EXT4-fs (loop5): Remounting filesystem read-only
[  971.769941][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  971.942069][T14581] loop4: detected capacity change from 0 to 512
[  972.123757][T14581] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  972.401305][T14587] loop1: detected capacity change from 0 to 32768
[  972.408807][T14587] XFS: ikeep mount option is deprecated.
[  972.429586][T14581] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  972.651005][T14587] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  972.670388][T14581] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  973.393576][T14598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  973.413353][T14587] XFS (loop1): Ending clean mount
[  973.413405][T14581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  973.441135][T14587] XFS (loop1): Quotacheck needed: Please wait.
[  973.492158][T14581] System zones: 0-2, 18-18, 34-34
[  973.500303][T14607] loop0: detected capacity change from 0 to 512
[  973.524192][T14581] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2471: iget: bad i_size value: 360287970189639680
[  973.558796][T14587] XFS (loop1): Quotacheck: Done.
[  973.644897][T14607] EXT4-fs error (device loop0): ext4_iget_extra_inode:5034: inode #12: comm syz.0.2475: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  973.662217][T14587] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2472'.
[  973.699679][T14581] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2471: couldn't read orphan inode 15 (err -117)
[  975.903850][T14607] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2475: couldn't read orphan inode 12 (err -117)
[  975.989262][T14581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  976.023511][T14607] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  976.275684][T14619] loop7: detected capacity change from 0 to 512
[  976.307062][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  976.390396][T14619] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  976.438480][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  976.459132][ T5847] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  976.507002][T14619] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  976.551102][T14619] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended
[  976.662385][T14619] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  976.671010][T14619] System zones: 0-2, 18-18, 34-34
[  976.702384][T14619] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.2479: iget: bad i_size value: 360287970189639680
[  976.753462][T14619] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2479: couldn't read orphan inode 15 (err -117)
[  976.825523][T14619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  976.903176][T14619] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.2479: iget: bad i_size value: 360287970189639680
[  976.962083][    T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  977.067185][   T30] audit: type=1800 audit(1749254425.298:26): pid=14633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2479" name="file2" dev="loop7" ino=16 res=0 errno=0
[  977.132094][    T9] usb 6-1: Using ep0 maxpacket: 32
[  977.155770][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  977.188371][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  977.218921][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  977.241988][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.292640][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.292698][    T9] usb 6-1: config 0 descriptor??
[  977.324869][    T9] hub 6-1:0.0: USB hub found
[  977.374168][T14637] input: syz1 as /devices/virtual/input/input17
[  977.546861][    T9] hub 6-1:0.0: config failed, hub has too many ports! (err -19)
[  977.578288][T14640] loop7: detected capacity change from 0 to 512
[  977.641962][T14640] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  977.694043][T14640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  977.742096][T14640] System zones: 1-12
[  977.752432][T14640] EXT4-fs (loop7): 1 truncate cleaned up
[  977.802235][T14640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  979.585229][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  979.591345][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  979.654789][    T9] usb 6-1: USB disconnect, device number 45
[  979.768293][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  979.776452][T14657] loop1: detected capacity change from 0 to 32768
[  979.784949][T14657] XFS: ikeep mount option is deprecated.
[  979.903318][T14657] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  980.219535][T14653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  980.261229][T14657] XFS (loop1): Ending clean mount
[  980.278591][T14657] XFS (loop1): Quotacheck needed: Please wait.
[  980.442113][T14657] XFS (loop1): Quotacheck: Done.
[  980.477399][T14657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2493'.
[  982.933460][T14676] loop5: detected capacity change from 0 to 512
[  982.999610][T14676] EXT4-fs (loop5): Test dummy encryption mode enabled
[  983.270824][T14676] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  984.133731][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  984.220043][T14689] loop7: detected capacity change from 0 to 512
[  984.263779][ T5842] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  984.319119][T14689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  984.330116][T14694] loop0: detected capacity change from 0 to 16
[  984.440593][T14694] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 127766)
[  984.519182][T14689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  984.633980][T14689] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  985.498869][ T5905] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  985.765215][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  985.803971][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  985.839393][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.844285][ T5905] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  986.060850][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  986.071321][ T5905] usb 5-1: SerialNumber: syz
[  987.204161][T14714] loop1: detected capacity change from 0 to 2048
[  987.277087][T14714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  987.529604][ T5905] usb 5-1: 0:2 : does not exist
[  987.592609][ T5905] usb 5-1: USB disconnect, device number 37
[  988.030136][T14727] loop7: detected capacity change from 0 to 1024
[  988.070617][T14727] hfsplus: bad catalog file entry
[  988.076484][T14727] hfsplus: failed to load root directory
[  988.460763][T14728] loop4: detected capacity change from 0 to 1024
[  988.528393][T14723] loop5: detected capacity change from 0 to 4096
[  988.535934][T14723] EXT4-fs: Ignoring removed nobh option
[  988.700237][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  988.794902][T14723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  989.404705][T14740] ip6t_rpfilter: unknown options
[  989.462267][T14742] loop1: detected capacity change from 0 to 2048
[  989.469965][T14742] udf: Bad value for 'session'
[  989.474003][T14737] loop0: detected capacity change from 0 to 512
[  989.531226][T14728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  989.538438][T14728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  989.548418][T14728] vhci_hcd vhci_hcd.0: Device attached
[  989.552216][T14737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  989.587347][T14737] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.2514: iget: bad extra_isize 1568 (inode size 256)
[  989.616456][T14744] vhci_hcd: connection closed
[  989.692067][ T6251] vhci_hcd: stop threads
[  989.710795][T14737] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2514: couldn't read orphan inode 17 (err -117)
[  989.724538][ T6251] vhci_hcd: release socket
[  989.736934][T14738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  989.763902][T14737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  989.787169][ T6251] vhci_hcd: disconnect device
[  989.794992][    T9] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  989.824888][    T9] usb 41-1: enqueue for inactive port 0
[  989.907351][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  989.923537][    T9] vhci_hcd: vhci_device speed not set
[  989.933671][T14737] EXT4-fs error (device loop0): htree_dirblock_to_tree:1077: inode #2: block 13: comm syz.0.2514: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  990.237678][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.626961][T14762] loop1: detected capacity change from 0 to 2048
[  991.701415][T14762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  991.973171][T10488] kernel write not supported for file /snd/seq (pid: 10488 comm: kworker/0:3)
[  992.332360][T14779] loop0: detected capacity change from 0 to 1024
[  992.514427][T13781] hfsplus: b-tree write err: -5, ino 4
[  993.556818][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  994.542823][T14795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.761885][    T9] usb 2-1: Using ep0 maxpacket: 8
[  994.774886][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  994.796884][    T9] usb 2-1: config 11 has an invalid interface number: 153 but max is 0
[  994.817723][    T9] usb 2-1: config 11 has no interface number 0
[  994.846263][    T9] usb 2-1: config 11 interface 153 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  994.895603][    T9] usb 2-1: config 11 interface 153 has no altsetting 0
[  994.954842][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=14.a4
[  994.987919][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.999463][    T9] usb 2-1: Product: syz
[  995.009791][    T9] usb 2-1: Manufacturer: syz
[  995.017492][    T9] usb 2-1: SerialNumber: syz
[  995.051945][ T5933] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  995.208246][T14814] loop7: detected capacity change from 0 to 256
[  995.242261][ T5933] usb 1-1: Using ep0 maxpacket: 16
[  995.248875][T14814] exfat: Invalid uid '0x00000000ffffffff'
[  995.298542][    T9] keyspan 2-1:11.153: Keyspan 1 port adapter converter detected
[  995.302008][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short
[  995.371722][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 84
[  995.381929][ T5933] usb 1-1: unable to read config index 0 descriptor/start: -71
[  995.401610][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 81
[  995.409660][ T5933] usb 1-1: can't read configurations, error -71
[  995.494676][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 82
[  995.512623][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 1
[  995.533113][    T9] keyspan 2-1:11.153: unsupported endpoint type 0
[  995.539691][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 83
[  995.554483][T14818] loop5: detected capacity change from 0 to 1024
[  995.601070][    T9] keyspan 2-1:11.153: found no endpoint descriptor for endpoint 3
[  995.631282][    T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  995.636262][T14818] ext4: Unknown parameter 'noacl'
[  995.732755][    T9] usb 2-1: USB disconnect, device number 43
[  995.821944][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  995.823816][T14818] program syz.5.2543 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  995.832172][ T5855] udevd[5855]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory
[  995.892916][    T9] keyspan 2-1:11.153: device disconnected
[  995.929599][ T5855] udevd[5855]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  996.200285][T14828] loop7: detected capacity change from 0 to 512
[  996.388368][T14838] loop4: detected capacity change from 0 to 128
[  996.427933][T14838] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  996.435984][T14828] EXT4-fs (loop7): 1 orphan inode deleted
[  996.485402][T14838] ext4 filesystem being mounted at /458/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  996.490233][ T6249] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  996.579196][ T6249] EXT4-fs error (device loop7): ext4_release_dquot:6967: comm kworker/u8:12: Failed to release dquot type 1
[  996.612960][T14828] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  996.678700][T14828] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  996.804527][T14847] loop1: detected capacity change from 0 to 1024
[  996.815600][ T5846] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  996.901776][T14847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  996.902247][T10488] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  997.003697][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.573656][T14853] loop4: detected capacity change from 0 to 1024
[  997.666928][T14853] EXT4-fs: Ignoring removed nobh option
[  997.751949][T10488] usb 6-1: Using ep0 maxpacket: 8
[  997.775326][T14853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  997.794640][T10488] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  997.806113][T10488] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  997.822117][T10488] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  997.833469][T10488] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  997.846791][T10488] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  997.856207][T10488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.876587][T10488] usbtmc 6-1:16.0: bulk endpoints not found
[  997.906828][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  999.223321][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  999.563823][T14874] loop4: detected capacity change from 0 to 256
[  999.591664][T14874] exfat: Invalid uid '0x00000000ffffffff'
[  999.763641][T14879] loop0: detected capacity change from 0 to 128
[  999.783543][T14879] EXT4-fs: Ignoring removed nobh option
[  999.818853][T14879] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  999.854939][T14879] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1000.000147][T14879] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1000.593514][T14889] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1001.267669][T14875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1001.778034][T10488] usb 6-1: USB disconnect, device number 46
[ 1002.298951][T14896] loop4: detected capacity change from 0 to 512
[ 1002.325745][T14896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1002.369345][T14898] loop0: detected capacity change from 0 to 512
[ 1002.378471][T14896] EXT4-fs (loop4): 1 truncate cleaned up
[ 1002.404660][T14896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1002.429285][T14898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1003.391433][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1003.394841][T14898] EXT4-fs (loop0): 1 truncate cleaned up
[ 1003.398067][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1003.513012][T14898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1003.838928][   T30] audit: type=1800 audit(1749254452.058:27): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2571" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1004.635121][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.525272][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.577948][T14926] loop7: detected capacity change from 0 to 1024
[ 1006.483158][T14930] hfsplus: xattr searching failed
[ 1006.868502][ T2990] hfsplus: b-tree write err: -5, ino 3
[ 1006.984217][T14933] loop5: detected capacity change from 0 to 4096
[ 1007.049217][T14933] EXT4-fs: inline encryption not supported
[ 1007.121428][T14933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1007.255428][T14938] loop4: detected capacity change from 0 to 1024
[ 1007.313830][T14938] EXT4-fs: Ignoring removed nobh option
[ 1007.346511][T14938] EXT4-fs: Ignoring removed bh option
[ 1007.401485][T14940] loop7: detected capacity change from 0 to 2048
[ 1007.414379][    T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1007.471532][T14938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.025055][    T9] usb 1-1: Using ep0 maxpacket: 16
[ 1008.034936][T14940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1008.063351][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.068594][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1008.132398][T14940] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1008.148543][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1008.183331][    T9] usb 1-1: can't read configurations, error -71
[ 1008.293443][T14951] loop1: detected capacity change from 0 to 128
[ 1008.332637][T14953] autofs: Bad value for 'fd'
[ 1008.415844][ T5846] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.659350][T14955] loop5: detected capacity change from 0 to 1024
[ 1009.607388][ T2990] kworker/u8:6: attempt to access beyond end of device
[ 1009.607388][ T2990] loop1: rw=1, sector=145, nr_sectors = 896 limit=128
[ 1010.878707][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.018676][T14969] input: syz1 as /devices/virtual/input/input18
[ 1011.112086][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1011.322336][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1011.365612][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1011.438156][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1011.471053][T14971] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2594'.
[ 1011.557727][    T9] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1012.659439][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1012.673724][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1012.675371][T14975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1012.682940][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.693727][    T9] usbtmc 1-1:16.0: bulk endpoints not found
[ 1013.145719][T14984] loop5: detected capacity change from 0 to 2048
[ 1013.316100][T14991] loop4: detected capacity change from 0 to 256
[ 1013.351117][T14991] exfat: Invalid uid '0x00000000ffffffff'
[ 1013.395494][T14984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1013.498090][T14984] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1013.548323][T14997] autofs: Unknown parameter '0x0000000000000000'
[ 1013.751497][T14984] fs-verity: sha512 using implementation "sha512-avx2"
[ 1014.349825][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1014.583313][    T9] usb 1-1: USB disconnect, device number 54
[ 1015.757103][T15016] loop7: detected capacity change from 0 to 128
[ 1015.852744][T15016] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1015.932482][T15018] fuse: Bad value for 'fd'
[ 1016.059807][T15016] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1018.095629][  T189] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1018.220732][T15037] autofs: Unknown parameter '0x0000000000000000'
[ 1018.526854][T15041] loop7: detected capacity change from 0 to 2048
[ 1018.587547][T15045] autofs: Bad value for 'fd'
[ 1018.859156][T15041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1018.948073][T15044] loop5: detected capacity change from 0 to 40427
[ 1018.993575][T15044] F2FS-fs (loop5): invalid crc value
[ 1019.123157][T15044] F2FS-fs (loop5): Start checkpoint disabled!
[ 1019.152235][T15044] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1019.381422][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.461648][T13781] kworker/u8:0: attempt to access beyond end of device
[ 1019.461648][T13781] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1019.735271][T13781] CPU: 0 UID: 0 PID: 13781 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[ 1019.735325][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1019.735351][T13781] Workqueue: writeback wb_workfn (flush-7:5)
[ 1019.735400][T13781] Call Trace:
[ 1019.735412][T13781]  <TASK>
[ 1019.735426][T13781]  dump_stack_lvl+0x16c/0x1f0
[ 1019.735483][T13781]  f2fs_handle_critical_error+0x621/0x9f0
[ 1019.735532][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.735575][T13781]  ? f2fs_build_fault_attr+0x53/0x1f0
[ 1019.735625][T13781]  f2fs_write_end_io+0x785/0xc20
[ 1019.735678][T13781]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1019.735733][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.735792][T13781]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1019.735839][T13781]  bio_endio+0x70d/0x850
[ 1019.735884][T13781]  submit_bio_noacct+0x56d/0x1eb0
[ 1019.735956][T13781]  __submit_merged_bio+0x33c/0x770
[ 1019.736014][T13781]  __submit_merged_write_cond+0x319/0x3f0
[ 1019.736079][T13781]  f2fs_write_cache_pages+0x2067/0x2570
[ 1019.736170][T13781]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1019.736224][T13781]  ? ret_from_fork+0x5d7/0x6f0
[ 1019.736280][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736322][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736367][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736410][T13781]  ? unwind_get_return_address+0x59/0xa0
[ 1019.736472][T13781]  ? arch_stack_walk+0x88/0x100
[ 1019.736538][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736660][T13781]  ? __pfx___page_table_check_zero+0x10/0x10
[ 1019.736709][T13781]  ? mark_held_locks+0x49/0x80
[ 1019.736769][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736812][T13781]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1019.736866][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.736925][T13781]  f2fs_write_data_pages+0x4ad/0xd90
[ 1019.736994][T13781]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1019.737066][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.737109][T13781]  ? __lock_acquire+0xb8a/0x1c90
[ 1019.737167][T13781]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1019.737229][T13781]  do_writepages+0x27a/0x600
[ 1019.737271][T13781]  ? __pfx_do_writepages+0x10/0x10
[ 1019.737303][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.737346][T13781]  ? reacquire_held_locks+0xcd/0x1f0
[ 1019.737403][T13781]  ? writeback_sb_inodes+0x3a4/0xf90
[ 1019.737470][T13781]  __writeback_single_inode+0x160/0xfb0
[ 1019.737535][T13781]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1019.737595][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.737639][T13781]  ? do_raw_spin_unlock+0x172/0x230
[ 1019.737680][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.737732][T13781]  writeback_sb_inodes+0x601/0xf90
[ 1019.737819][T13781]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1019.737880][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.737929][T13781]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1019.738040][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738083][T13781]  ? rcu_is_watching+0x12/0xc0
[ 1019.738129][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738173][T13781]  ? queue_io+0x3f6/0x520
[ 1019.738233][T13781]  wb_writeback+0x419/0xb70
[ 1019.738307][T13781]  ? __pfx_wb_writeback+0x10/0x10
[ 1019.738364][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738423][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738466][T13781]  ? mark_held_locks+0x49/0x80
[ 1019.738533][T13781]  wb_workfn+0x14d/0xbe0
[ 1019.738574][T13781]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1019.738629][T13781]  ? __pfx_wb_workfn+0x10/0x10
[ 1019.738670][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738719][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738771][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.738814][T13781]  ? rcu_is_watching+0x12/0xc0
[ 1019.738869][T13781]  process_one_work+0x9cf/0x1b70
[ 1019.738935][T13781]  ? __pfx_process_one_work+0x10/0x10
[ 1019.738974][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739031][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739075][T13781]  ? assign_work+0x1a0/0x250
[ 1019.739116][T13781]  worker_thread+0x6c8/0xf10
[ 1019.739167][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739214][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739257][T13781]  ? __kthread_parkme+0x19e/0x250
[ 1019.739308][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739355][T13781]  ? __pfx_worker_thread+0x10/0x10
[ 1019.739395][T13781]  kthread+0x3c5/0x780
[ 1019.739431][T13781]  ? __pfx_kthread+0x10/0x10
[ 1019.739469][T13781]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1019.739513][T13781]  ? rcu_is_watching+0x12/0xc0
[ 1019.739559][T13781]  ? __pfx_kthread+0x10/0x10
[ 1019.739597][T13781]  ret_from_fork+0x5d7/0x6f0
[ 1019.739649][T13781]  ? __pfx_kthread+0x10/0x10
[ 1019.739686][T13781]  ret_from_fork_asm+0x1a/0x30
[ 1019.739753][T13781]  </TASK>
[ 1020.656060][T13781] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1021.159068][T15072] loop7: detected capacity change from 0 to 512
[ 1021.213458][T15072] ext4: Unknown parameter 'nouser_xattr'
[ 1021.581652][T15084] autofs: Unknown parameter '0x0000000000000000'
[ 1021.603476][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1021.612870][T15086] autofs: Bad value for 'fd'
[ 1021.819792][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1022.473923][T15094] loop7: detected capacity change from 0 to 1024
[ 1022.554667][T15094] EXT4-fs: Ignoring removed bh option
[ 1022.647224][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1022.656446][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.667763][    T9] usb 2-1: config 0 descriptor??
[ 1022.829099][T15094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1022.947455][    T9] usbhid 2-1:0.0: can't add hid device: -71
[ 1023.007662][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1023.081253][    T9] usb 2-1: USB disconnect, device number 44
[ 1023.174268][T15103] fuse: Unknown parameter 'grou00000000000000000000'
[ 1023.370623][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2625'.
[ 1023.390813][T15111] IPv6: Can't replace route, no match found
[ 1023.396643][T15110] loop0: detected capacity change from 0 to 2048
[ 1023.429360][T15110] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1023.463675][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1023.834282][T15122] autofs: Unknown parameter '0x0000000000000000'
[ 1023.930341][T15124] autofs: Bad value for 'fd'
[ 1024.642502][    T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1027.635257][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1027.682886][    T9] usb 2-1: device descriptor read/all, error -71
[ 1027.830410][T15144] fuse: Unknown parameter 'grou00000000000000000000'
[ 1028.126083][T15155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2658'.
[ 1028.702070][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1029.068381][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1029.101302][T15168] autofs: Unknown parameter '0x0000000000000000'
[ 1029.109986][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1029.182237][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1029.384823][    T9] usb 2-1: config 0 descriptor??
[ 1029.609394][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1029.635893][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1029.698233][ T6079] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1029.784051][T15183] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1029.889123][    T9] usbhid 2-1:0.0: can't add hid device: -71
[ 1029.895591][ T6079] usb 6-1: Using ep0 maxpacket: 8
[ 1029.915157][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1029.930831][ T6079] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1029.955497][ T6079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1029.972450][    T9] usb 2-1: USB disconnect, device number 46
[ 1029.993792][ T6079] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1030.014212][ T6079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1030.052878][ T6079] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1030.082512][ T6079] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1030.102466][ T6079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.180903][ T6079] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22
[ 1030.279529][T15198] loop0: detected capacity change from 0 to 512
[ 1030.306865][T15198] EXT4-fs: Ignoring removed nobh option
[ 1030.347375][T15198] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2678: iget: bad i_size value: 38620345925642
[ 1030.390361][T15198] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2678: couldn't read orphan inode 15 (err -117)
[ 1030.441420][T15198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.733687][T15200] EXT4-fs error (device loop0): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1031.334052][T15222] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1031.337401][T15216] loop1: detected capacity change from 0 to 8192
[ 1031.593292][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1031.751990][ T5933] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1031.879918][T15230] loop0: detected capacity change from 0 to 1024
[ 1031.912275][ T5933] usb 2-1: Using ep0 maxpacket: 16
[ 1031.942641][ T5933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1031.992243][ T5933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.020641][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1032.045250][ T5933] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1032.081293][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.113823][ T5933] usb 2-1: config 0 descriptor??
[ 1032.550849][ T6037] usb 6-1: USB disconnect, device number 47
[ 1032.602521][ T5933] hid (null): report_id 2853400251 is invalid
[ 1032.608669][ T5933] hid (null): unknown global tag 0xc
[ 1032.747645][ T5933] hid (null): unknown global tag 0xe
[ 1032.945155][ T5933] hid (null): report_id 0 is invalid
[ 1033.026170][ T5933] hid (null): global environment stack underflow
[ 1033.382277][ T5933] hid (null): unknown global tag 0xe
[ 1033.398357][ T5933] usb 2-1: USB disconnect, device number 47
[ 1036.443611][T15274] loop1: detected capacity change from 0 to 128
[ 1036.504507][T15274] EXT4-fs: Ignoring removed nobh option
[ 1036.606388][T15274] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1036.656773][T15274] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1036.667530][T15281] loop7: detected capacity change from 0 to 256
[ 1036.677349][T15281] udf: Unknown parameter '¥«‘¨Æî‘GÚ]'
[ 1037.035353][T15274] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1037.952751][ T6079] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1037.967990][T15294] loop0: detected capacity change from 0 to 512
[ 1038.067087][T15296] loop1: detected capacity change from 0 to 2048
[ 1038.067405][T15294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1038.154500][T15294] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1038.259018][T15296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1038.368655][T15296] ext4 filesystem being mounted at /500/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1038.428312][T15300] loop7: detected capacity change from 0 to 32768
[ 1038.440436][T15300] XFS: ikeep mount option is deprecated.
[ 1038.461883][ T6079] usb 6-1: Using ep0 maxpacket: 16
[ 1038.474057][ T6079] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 1038.490961][   T30] audit: type=1804 audit(1749254486.718:28): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2716" name="/newroot/500/file0/file0/file0" dev="loop1" ino=13 res=1 errno=0
[ 1038.497158][ T6079] usb 6-1: config 0 has no interface number 0
[ 1038.522672][ T6079] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1038.531753][ T6079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.549833][ T6079] usb 6-1: Product: syz
[ 1038.559750][T15300] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1038.575634][ T6079] usb 6-1: Manufacturer: syz
[ 1038.582406][ T6079] usb 6-1: SerialNumber: syz
[ 1038.587800][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.594308][ T6079] usb 6-1: config 0 descriptor??
[ 1038.632859][ T6079] hub 6-1:0.132: bad descriptor, ignoring hub
[ 1038.639060][ T6079] hub 6-1:0.132: probe with driver hub failed with error -5
[ 1038.741309][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.754040][T15300] XFS (loop7): Ending clean mount
[ 1038.761440][T15300] XFS (loop7): Quotacheck needed: Please wait.
[ 1038.787990][ T6079] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input19
[ 1038.868718][T15300] XFS (loop7): Quotacheck: Done.
[ 1039.765505][ T7656] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1040.400759][T15334] loop5: detected capacity change from 0 to 256
[ 1041.160434][T15342] loop5: detected capacity change from 0 to 1024
[ 1041.475427][T15348] autofs: Unknown parameter '0x0000000000000000'
[ 1042.740091][T15361] loop1: detected capacity change from 0 to 512
[ 1043.029289][T15361] EXT4-fs (loop1): 1 orphan inode deleted
[ 1043.080906][T15361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.135131][ T2990] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1043.161976][T15361] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1043.235040][T15363] loop0: detected capacity change from 0 to 4096
[ 1043.260621][ T2990] EXT4-fs error (device loop1): ext4_release_dquot:6967: comm kworker/u8:6: Failed to release dquot type 1
[ 1043.333195][T15361] EXT4-fs: Cannot change journaled quota options when quota turned on
[ 1043.464421][T15363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.525471][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1043.614985][   T30] audit: type=1800 audit(1749254491.848:29): pid=15363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2740" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1043.660354][T15381] loop7: detected capacity change from 0 to 1024
[ 1043.811987][ T5183] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 1043.908970][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.011895][ T5183] usb 6-1: device descriptor read/64, error -71
[ 1044.105892][T15388] autofs: Unknown parameter '0x0000000000000000'
[ 1044.272807][ T5183] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 1044.462844][ T5183] usb 6-1: device descriptor read/64, error -71
[ 1045.059684][ T5183] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 1045.159115][ T5183] usb 6-1: device descriptor read/8, error -71
[ 1045.316374][T15400] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1045.347715][T15404] loop0: detected capacity change from 0 to 512
[ 1045.390201][T15404] fscrypt (loop0, inode 2): Error -61 getting encryption context
[ 1045.420697][T15404] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[ 1045.482016][T15404] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.2753: iget: bad i_size value: 12154757448730
[ 1045.511902][ T5183] usb 6-1: reset high-speed USB device number 48 using dummy_hcd
[ 1045.532693][T15412] loop7: detected capacity change from 0 to 512
[ 1045.551287][T15404] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2753: couldn't read orphan inode 13 (err -117)
[ 1045.578794][ T5183] usb 6-1: device descriptor read/8, error -71
[ 1045.596573][T15412] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1045.642323][T15404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1045.698748][T15412] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[ 1045.717527][T15412] System zones: 1-12
[ 1045.721703][T15404] fscrypt (loop0, inode 2): Error -61 getting encryption context
[ 1045.730817][ T6079] usb 6-1: USB disconnect, device number 48
[ 1045.751979][T15412] EXT4-fs (loop7): 1 truncate cleaned up
[ 1045.791521][T15412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1046.166777][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1047.135240][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1047.208271][T15430] loop5: detected capacity change from 0 to 32768
[ 1047.215931][T15430] XFS: ikeep mount option is deprecated.
[ 1047.309779][T15430] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1047.491874][T15430] XFS (loop5): Ending clean mount
[ 1047.499465][T15430] XFS (loop5): Quotacheck needed: Please wait.
[ 1047.691163][T15430] XFS (loop5): Quotacheck: Done.
[ 1048.018670][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1048.118977][T15451] fuse: Bad value for 'user_id'
[ 1048.171085][T15451] fuse: Bad value for 'user_id'
[ 1048.891303][ T5842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1048.984124][T15458] netlink: 'syz.7.2773': attribute type 13 has an invalid length.
[ 1049.921986][    T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[ 1050.099414][    T9] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[ 1050.110978][    T9] usb 2-1: config 0 has no interface number 0
[ 1050.119659][    T9] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1050.135128][    T9] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1050.148867][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.169632][    T9] usb 2-1: config 0 descriptor??
[ 1050.203669][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input20
[ 1050.249251][T15488] loop5: detected capacity change from 0 to 32768
[ 1050.257486][T15488] XFS: ikeep mount option is deprecated.
[ 1050.265784][T15489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1050.297694][T15488] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1050.409968][ T5933] usb 2-1: USB disconnect, device number 48
[ 1050.441500][T15488] XFS (loop5): Ending clean mount
[ 1050.472273][T15488] XFS (loop5): Quotacheck needed: Please wait.
[ 1050.567992][T15488] XFS (loop5): Quotacheck: Done.
[ 1052.738190][T15511] loop1: detected capacity change from 0 to 1024
[ 1052.749325][ T5842] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1052.834191][T15511] hfsplus: xattr search failed
[ 1053.607051][ T5905] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1053.808832][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1053.842462][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1053.856736][T15543] loop5: detected capacity change from 0 to 512
[ 1053.867729][ T5905] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1053.888664][T15543] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1053.902749][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.929183][T15543] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1053.948447][T15543] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1053.955184][ T5905] usb 2-1: config 0 descriptor??
[ 1053.978968][T15543] EXT4-fs (loop5): 1 truncate cleaned up
[ 1053.989745][T15543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1054.121143][T15549] loop0: detected capacity change from 0 to 128
[ 1054.122438][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.161620][T15549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1054.180608][T15549] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1054.360287][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[ 1054.408865][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[ 1054.432544][ T5847] EXT4-fs error (device loop0): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1054.471657][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[ 1054.502462][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[ 1054.533504][ T5847] EXT4-fs error (device loop0): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1054.560613][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[ 1054.583759][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[ 1054.619509][ T5847] EXT4-fs error (device loop0): ext4_empty_dir:3105: inode #11: block 1: comm syz-executor: Directory block failed checksum
[ 1054.644111][ T5847] EXT4-fs error (device loop0): ext4_readdir:222: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[ 1054.823089][T15562] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2813'.
[ 1054.845054][T15562] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2813'.
[ 1054.861740][T15562] netlink: 'syz.5.2813': attribute type 5 has an invalid length.
[ 1054.866605][ T5905] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0
[ 1054.900021][T15562] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2813'.
[ 1054.985532][ T5905] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized
[ 1055.082712][ T5905] usb 2-1: USB disconnect, device number 49
[ 1055.149360][T15568] netlink: 'syz.6.2817': attribute type 12 has an invalid length.
[ 1055.308858][T15565] fido_id[15565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1057.533783][T15586] loop1: detected capacity change from 0 to 256
[ 1057.542539][T15586] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1057.709266][T15586] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1057.742478][T15588] loop5: detected capacity change from 0 to 2048
[ 1057.773507][T15588] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1057.797687][T15588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1057.850423][T15592] loop7: detected capacity change from 0 to 512
[ 1057.969447][T15592] EXT4-fs (loop7): 1 orphan inode deleted
[ 1057.977631][T15592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1057.992472][T15592] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1057.992876][   T13] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1058.076203][   T13] EXT4-fs error (device loop7): ext4_release_dquot:6967: comm kworker/u8:1: Failed to release dquot type 1
[ 1058.248384][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1058.323739][T15395] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1058.502910][T15607] loop7: detected capacity change from 0 to 512
[ 1058.541577][T15607] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1058.614165][T15607] EXT4-fs (loop7): 1 truncate cleaned up
[ 1058.632174][T10488] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1058.670487][T15607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1058.817975][T10488] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1058.863738][T10488] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1058.887328][T10488] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1058.888282][T15607] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1058.935694][T10488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.966921][T15605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1059.036533][T10488] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1059.149238][ T7656] EXT4-fs error (device loop7): ext4_readdir:262: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[ 1059.202799][ T7656] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1059.236252][ T7656] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1059.308750][T10488] usb 2-1: USB disconnect, device number 50
[ 1060.575702][T15629] capability: warning: `syz.1.2842' uses 32-bit capabilities (legacy support in use)
[ 1060.870710][ T7656] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1062.351629][T13781] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.605320][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1062.617829][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1062.631677][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1062.641563][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1062.654664][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1062.717898][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1062.729467][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1062.743766][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1062.774732][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1062.787878][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1063.282074][ T5933] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1063.380727][T15652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1063.736225][ T5933] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.823984][ T5933] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1063.874413][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.916278][ T5933] usb 2-1: config 0 descriptor??
[ 1063.948056][T13781] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.042247][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1064.048618][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1064.237746][T13781] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.522336][ T5933] usb 2-1: USB disconnect, device number 51
[ 1064.584193][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1064.770113][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1064.781328][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1064.795078][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1064.811674][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1064.830530][T15649] lo speed is unknown, defaulting to 1000
[ 1064.836692][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1064.914875][T15649] lo speed is unknown, defaulting to 1000
[ 1065.026516][T13781] bridge_slave_1: left allmulticast mode
[ 1065.061845][T13781] bridge_slave_1: left promiscuous mode
[ 1065.067753][T13781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1065.133780][T15680] loop5: detected capacity change from 0 to 512
[ 1065.154921][T13781] bridge_slave_0: left allmulticast mode
[ 1065.160620][T13781] bridge_slave_0: left promiscuous mode
[ 1065.190917][T13781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1065.238416][   T51] Bluetooth: hci0: command tx timeout
[ 1066.043923][T15680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1066.152115][T15680] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1066.153078][T15687] loop1: detected capacity change from 0 to 1024
[ 1066.706789][T15697] loop1: detected capacity change from 0 to 128
[ 1066.740667][T15697] EXT4-fs: Ignoring removed nobh option
[ 1066.755600][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1066.811682][T15697] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1066.865248][T15697] ext4 filesystem being mounted at /522/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1066.914341][   T51] Bluetooth: hci3: command tx timeout
[ 1067.050978][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1067.312682][   T51] Bluetooth: hci0: command tx timeout
[ 1067.587758][T13781] team0: Port device geneve0 removed
[ 1067.948754][T15703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1068.174502][T13781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1068.185445][T15727] 9pnet: Could not find request transport: xen
[ 1068.200542][T13781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1068.233098][T13781] bond0 (unregistering): Released all slaves
[ 1068.351565][T15675] lo speed is unknown, defaulting to 1000
[ 1068.428041][T15675] lo speed is unknown, defaulting to 1000
[ 1068.991910][   T51] Bluetooth: hci3: command tx timeout
[ 1069.023685][T15745] loop5: detected capacity change from 0 to 256
[ 1069.169332][T15745] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1069.411926][   T51] Bluetooth: hci0: command tx timeout
[ 1071.141943][   T51] Bluetooth: hci3: command tx timeout
[ 1071.272888][T15649] chnl_net:caif_netlink_parms(): no params data found
[ 1072.196647][   T51] Bluetooth: hci0: command tx timeout
[ 1073.151953][   T51] Bluetooth: hci3: command tx timeout
[ 1075.684968][T15788] loop5: detected capacity change from 0 to 1024
[ 1075.727508][T15788] EXT4-fs: Ignoring removed bh option
[ 1075.780547][T15793] No control pipe specified
[ 1075.834170][T15788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1075.852626][    T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1075.996910][T15788] EXT4-fs error (device loop5): mb_free_blocks:1945: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[ 1076.070734][    T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[ 1076.090682][T15649] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1076.112323][    T9] usb 2-1: config 0 has no interface number 0
[ 1076.118484][    T9] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1076.132350][T15649] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.160418][T15649] bridge_slave_0: entered allmulticast mode
[ 1076.169092][    T9] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1076.190544][T15649] bridge_slave_0: entered promiscuous mode
[ 1076.198976][    T9] usb 2-1: config 0 interface 255 has no altsetting 0
[ 1076.207355][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1076.217542][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.237358][T15649] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1076.258214][    T9] usb 2-1: config 0 descriptor??
[ 1076.262168][T15649] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.265114][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1076.295411][T15649] bridge_slave_1: entered allmulticast mode
[ 1076.299895][    T9] ums-realtek 2-1:0.255: USB Mass Storage device detected
[ 1076.306803][T15649] bridge_slave_1: entered promiscuous mode
[ 1078.335416][T15649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1078.416520][T15649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1078.506925][ T5933] usb 2-1: USB disconnect, device number 52
[ 1078.679886][T15831] No control pipe specified
[ 1079.834787][T15833] loop1: detected capacity change from 0 to 512
[ 1079.876557][T15833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1080.283980][T15833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[ 1080.362118][T15833] System zones: 1-12
[ 1080.382535][T15833] EXT4-fs (loop1): 1 truncate cleaned up
[ 1080.414024][T15833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1082.074104][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1082.075400][T15649] team0: Port device team_slave_0 added
[ 1082.558631][T15675] chnl_net:caif_netlink_parms(): no params data found
[ 1082.723571][T15867] loop1: detected capacity change from 0 to 128
[ 1082.774890][T13781] hsr_slave_0: left promiscuous mode
[ 1082.804552][T15867] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1082.836571][T13781] hsr_slave_1: left promiscuous mode
[ 1082.876676][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1082.886174][T15867] ext4 filesystem being mounted at /530/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1082.912027][T13781] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1082.948363][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1082.981860][T13781] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1083.095179][T13781] veth1_macvtap: left promiscuous mode
[ 1083.125530][T13781] veth0_macvtap: left promiscuous mode
[ 1083.166034][T13781] veth1_vlan: left promiscuous mode
[ 1083.199912][T13781] veth0_vlan: left promiscuous mode
[ 1083.382400][T15875] loop5: detected capacity change from 0 to 40427
[ 1083.405913][T15875] F2FS-fs (loop5): invalid crc value
[ 1083.429367][ T5850] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1083.498414][T15875] F2FS-fs (loop5): Start checkpoint disabled!
[ 1083.510707][T15875] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1084.020534][   T49] kworker/u8:3: attempt to access beyond end of device
[ 1084.020534][   T49] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1084.070770][   T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[ 1084.070824][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1084.070851][   T49] Workqueue: writeback wb_workfn (flush-7:5)
[ 1084.070905][   T49] Call Trace:
[ 1084.070918][   T49]  <TASK>
[ 1084.070933][   T49]  dump_stack_lvl+0x16c/0x1f0
[ 1084.070992][   T49]  f2fs_handle_critical_error+0x621/0x9f0
[ 1084.071045][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.071095][   T49]  ? f2fs_build_fault_attr+0x53/0x1f0
[ 1084.071148][   T49]  f2fs_write_end_io+0x785/0xc20
[ 1084.071211][   T49]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1084.071269][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.071326][   T49]  ? __pfx_f2fs_write_end_io+0x10/0x10
[ 1084.071375][   T49]  bio_endio+0x70d/0x850
[ 1084.071421][   T49]  submit_bio_noacct+0x56d/0x1eb0
[ 1084.071487][   T49]  __submit_merged_bio+0x33c/0x770
[ 1084.071546][   T49]  __submit_merged_write_cond+0x319/0x3f0
[ 1084.071612][   T49]  f2fs_write_cache_pages+0x2067/0x2570
[ 1084.071705][   T49]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[ 1084.071772][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.071823][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.071867][   T49]  ? __lock_acquire+0xb8a/0x1c90
[ 1084.071959][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072075][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072119][   T49]  ? lock_acquire+0x179/0x350
[ 1084.072191][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072245][   T49]  f2fs_write_data_pages+0x4ad/0xd90
[ 1084.072316][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1084.072389][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072434][   T49]  ? __lock_acquire+0xb8a/0x1c90
[ 1084.072493][   T49]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1084.072555][   T49]  do_writepages+0x27a/0x600
[ 1084.072599][   T49]  ? __pfx_do_writepages+0x10/0x10
[ 1084.072630][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072674][   T49]  ? reacquire_held_locks+0xcd/0x1f0
[ 1084.072727][   T49]  ? writeback_sb_inodes+0x3a4/0xf90
[ 1084.072783][   T49]  __writeback_single_inode+0x160/0xfb0
[ 1084.072838][   T49]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1084.072890][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.072929][   T49]  ? do_raw_spin_unlock+0x172/0x230
[ 1084.072970][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073022][   T49]  writeback_sb_inodes+0x601/0xf90
[ 1084.073111][   T49]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1084.073174][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073225][   T49]  ? unwind_next_frame+0x3fe/0x20a0
[ 1084.073359][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073402][   T49]  ? rcu_is_watching+0x12/0xc0
[ 1084.073451][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073494][   T49]  ? queue_io+0x3f6/0x520
[ 1084.073555][   T49]  wb_writeback+0x419/0xb70
[ 1084.073628][   T49]  ? __pfx_wb_writeback+0x10/0x10
[ 1084.073684][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073744][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.073787][   T49]  ? mark_held_locks+0x49/0x80
[ 1084.073855][   T49]  wb_workfn+0x14d/0xbe0
[ 1084.073897][   T49]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1084.073952][   T49]  ? __pfx_wb_workfn+0x10/0x10
[ 1084.073993][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074043][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074093][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074137][   T49]  ? rcu_is_watching+0x12/0xc0
[ 1084.074196][   T49]  process_one_work+0x9cf/0x1b70
[ 1084.074260][   T49]  ? __pfx_process_one_work+0x10/0x10
[ 1084.074300][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074359][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074402][   T49]  ? assign_work+0x1a0/0x250
[ 1084.074444][   T49]  worker_thread+0x6c8/0xf10
[ 1084.074510][   T49]  ? __pfx_worker_thread+0x10/0x10
[ 1084.074550][   T49]  kthread+0x3c5/0x780
[ 1084.074587][   T49]  ? __pfx_kthread+0x10/0x10
[ 1084.074625][   T49]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1084.074668][   T49]  ? rcu_is_watching+0x12/0xc0
[ 1084.074715][   T49]  ? __pfx_kthread+0x10/0x10
[ 1084.074752][   T49]  ret_from_fork+0x5d7/0x6f0
[ 1084.074805][   T49]  ? __pfx_kthread+0x10/0x10
[ 1084.074841][   T49]  ret_from_fork_asm+0x1a/0x30
[ 1084.074909][   T49]  </TASK>
[ 1084.499747][   T49] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1084.631835][ T5905] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1084.909036][ T5905] usb 2-1: Using ep0 maxpacket: 16
[ 1084.925311][ T5905] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[ 1084.937338][ T5905] usb 2-1: config 0 has no interface number 0
[ 1084.943963][ T5905] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1084.957526][ T5905] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1084.968837][ T5905] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice= 0.f4
[ 1084.979874][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.991812][ T5905] usb 2-1: config 0 descriptor??
[ 1084.997714][T15891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1085.012033][T15891] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1085.253762][ T5905] asix 2-1:0.251: probe with driver asix failed with error -71
[ 1085.277260][ T5905] usb 2-1: USB disconnect, device number 53
[ 1085.621454][T13781] team0 (unregistering): Port device team_slave_1 removed
[ 1085.702594][T13781] team0 (unregistering): Port device team_slave_0 removed
[ 1085.755240][T15904] loop5: detected capacity change from 0 to 512
[ 1085.764991][T15904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1085.775067][T15904] EXT4-fs (loop5): SIPHASH is not a valid default hash value
[ 1085.911354][T15906] loop1: detected capacity change from 0 to 512
[ 1085.937370][T15906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1086.012372][T15906] EXT4-fs (loop1): 1 truncate cleaned up
[ 1086.020311][T15906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1086.046221][T15906] EXT4-fs error (device loop1): ext4_lookup:1787: inode #16: comm syz.1.2923: iget: bad i_size value: 5497558147880
[ 1086.100447][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1086.352152][T15912] loop1: detected capacity change from 0 to 128
[ 1086.407271][T15912] FAT-fs (loop1): Directory bread(block 32) failed
[ 1086.414105][T15912] FAT-fs (loop1): Directory bread(block 33) failed
[ 1086.420738][T15912] FAT-fs (loop1): Directory bread(block 34) failed
[ 1086.444296][T15912] FAT-fs (loop1): Directory bread(block 35) failed
[ 1086.451044][T15912] FAT-fs (loop1): Directory bread(block 36) failed
[ 1086.462971][T15912] FAT-fs (loop1): Directory bread(block 37) failed
[ 1086.469624][T15912] FAT-fs (loop1): Directory bread(block 38) failed
[ 1086.476320][T15912] FAT-fs (loop1): Directory bread(block 39) failed
[ 1086.483014][T15912] FAT-fs (loop1): Directory bread(block 40) failed
[ 1086.489634][T15912] FAT-fs (loop1): Directory bread(block 41) failed
[ 1086.965042][T15649] team0: Port device team_slave_1 added
[ 1086.979599][T15918] loop1: detected capacity change from 0 to 128
[ 1086.987766][T15918] EXT4-fs: Ignoring removed nobh option
[ 1087.061339][T15918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1087.075440][T15918] ext4 filesystem being mounted at /537/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1087.249343][T15918] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1087.455134][T15649] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1087.523737][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.618940][T15649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1087.839445][T15942] ptrace attach of "./syz-executor exec"[5850] was attempted by ""[15942]
[ 1087.959132][T15649] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1087.979254][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.141170][T15649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1088.241696][T15948] loop1: detected capacity change from 0 to 256
[ 1088.290422][T15948] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[ 1088.396894][T15953] loop5: detected capacity change from 0 to 512
[ 1088.490484][T15953] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1088.546473][T15953] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2938: iget: bad i_size value: 38620345925642
[ 1088.576829][T15953] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2938: couldn't read orphan inode 15 (err -117)
[ 1088.605206][T15675] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.682224][T15675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1088.689700][T15675] bridge_slave_0: entered allmulticast mode
[ 1088.699725][T15953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1088.753377][T15675] bridge_slave_0: entered promiscuous mode
[ 1088.805719][T15675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.842453][T15953] EXT4-fs error (device loop5): empty_inline_dir:1784: inode #12: block 7: comm syz.5.2938: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[ 1088.877650][T15675] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1088.892494][T15675] bridge_slave_1: entered allmulticast mode
[ 1088.934032][T15675] bridge_slave_1: entered promiscuous mode
[ 1088.961863][T15953] EXT4-fs warning (device loop5): empty_inline_dir:1787: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[ 1089.086063][T15968] loop1: detected capacity change from 0 to 128
[ 1089.103143][T15968] EXT4-fs: Ignoring removed nobh option
[ 1089.165008][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.166401][T15968] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1089.281240][T15968] ext4 filesystem being mounted at /542/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1089.511360][T15968] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1089.647479][T15649] hsr_slave_0: entered promiscuous mode
[ 1089.673379][T15649] hsr_slave_1: entered promiscuous mode
[ 1089.692820][T15649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1089.700544][T15649] Cannot create hsr debugfs directory
[ 1089.767732][T15675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1089.809624][T15675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.046190][T16008] loop5: detected capacity change from 0 to 256
[ 1091.106697][T16008] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[ 1091.174587][T15675] team0: Port device team_slave_0 added
[ 1091.269438][T16012] loop1: detected capacity change from 0 to 512
[ 1091.297576][T16012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1091.347251][T16012] EXT4-fs (loop1): 1 truncate cleaned up
[ 1091.356003][T16012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1091.375304][T16012] EXT4-fs error (device loop1): ext4_lookup:1787: inode #16: comm syz.1.2958: iget: bad i_size value: 5497558147880
[ 1091.391237][T15675] team0: Port device team_slave_1 added
[ 1091.476954][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1091.753389][T15675] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.779186][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.789965][T16024] loop1: detected capacity change from 0 to 128
[ 1091.844728][T15675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.863051][T16024] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1091.917575][T15675] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.929955][T16024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1091.946938][T15675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.031235][T15675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.195891][T16031] loop5: detected capacity change from 0 to 256
[ 1092.488026][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2969'.
[ 1092.567725][T15675] hsr_slave_0: entered promiscuous mode
[ 1092.599765][T15675] hsr_slave_1: entered promiscuous mode
[ 1092.625695][T15675] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1092.767730][T15675] Cannot create hsr debugfs directory
[ 1092.828038][T16042] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2969'.
[ 1092.844206][T16042] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2969'.
[ 1092.996445][T16051] loop1: detected capacity change from 0 to 128
[ 1093.031435][T16051] EXT4-fs: Ignoring removed nobh option
[ 1093.079339][T16053] loop5: detected capacity change from 0 to 128
[ 1093.113309][T16051] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1093.175980][T16051] ext4 filesystem being mounted at /548/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1093.364502][T16051] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1095.082816][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'.
[ 1095.221710][T16081] loop1: detected capacity change from 0 to 2048
[ 1095.231236][T16081] EXT4-fs: inline encryption not supported
[ 1095.257637][T16081] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1095.279886][T16081] ext4: Unknown parameter 'audit'
[ 1095.461970][T15649] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1095.782982][T16090] Bluetooth: MGMT ver 1.23
[ 1095.841377][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2981'.
[ 1096.502063][T10328] usb 2-1: new low-speed USB device number 54 using dummy_hcd
[ 1096.694367][T10328] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1096.741805][T10328] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1096.785645][T10328] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1096.812322][T10328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.834957][T16102] loop5: detected capacity change from 0 to 128
[ 1096.853230][T10328] usb 2-1: config 0 descriptor??
[ 1096.904708][T15649] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1097.339759][T16102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1097.378346][T16102] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1097.382918][T16090] bridge0: entered promiscuous mode
[ 1097.395183][T16090] macsec1: entered allmulticast mode
[ 1097.400522][T16090] bridge0: entered allmulticast mode
[ 1097.408504][T16090] bridge0: port 3(macsec1) entered blocking state
[ 1097.415141][T16090] bridge0: port 3(macsec1) entered disabled state
[ 1097.459282][T16090] bridge0: left allmulticast mode
[ 1097.464479][T16090] bridge0: left promiscuous mode
[ 1097.471324][T16102] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes
[ 1097.611120][T15649] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1097.663649][T15649] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1097.766695][ T5842] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1097.914445][T15675] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1097.958735][T15675] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1098.031437][T15675] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1098.056419][T15675] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1098.114057][T16121] loop5: detected capacity change from 0 to 1024
[ 1098.139097][T16121] EXT4-fs: Ignoring removed nobh option
[ 1098.168359][T16121] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1098.234869][T16121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1098.375601][ T5842] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1098.430593][ T5842] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1098.597825][T15675] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.646939][T15649] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.904805][    T9] usb 2-1: USB disconnect, device number 54
[ 1099.089858][T15675] 8021q: adding VLAN 0 to HW filter on device team0
[ 1099.103823][ T5842] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1100.771102][T15649] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.868459][T16072] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.875719][T16072] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.947826][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.955086][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1101.154093][  T189] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.197697][T16164] loop1: detected capacity change from 0 to 2048
[ 1101.265606][T16164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1101.348332][T16164] cgroup: Unknown subsys name 'cpuset'
[ 1101.369416][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.376680][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1101.477895][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.485154][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1101.840157][  T189] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.001241][T15649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1102.060012][T15649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1102.527271][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1102.565812][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1102.578326][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1102.607483][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1102.639744][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1103.304420][  T189] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.692738][T16186] lo speed is unknown, defaulting to 1000
[ 1103.700511][T16186] lo speed is unknown, defaulting to 1000
[ 1104.050597][T15649] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1104.436826][  T189] bridge_slave_1: left allmulticast mode
[ 1104.461849][  T189] bridge_slave_1: left promiscuous mode
[ 1104.515118][  T189] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.312776][ T5148] Bluetooth: hci2: command tx timeout
[ 1105.363153][  T189] bridge_slave_0: left allmulticast mode
[ 1105.368881][  T189] bridge_slave_0: left promiscuous mode
[ 1105.472242][  T189] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1107.948472][ T5148] Bluetooth: hci2: command tx timeout
[ 1108.013519][ T6037] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1108.413437][T16249] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3027'.
[ 1108.437629][ T6037] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1108.452207][ T6037] usb 2-1: config 1 descriptor has 1 excess byte, ignoring
[ 1108.466023][ T6037] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1108.497236][ T6037] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1108.550584][ T6037] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1108.560278][ T6037] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1108.576264][ T6037] usb 2-1: Product: syz
[ 1108.580465][ T6037] usb 2-1: Manufacturer: syz
[ 1108.631501][ T6037] cdc_wdm 2-1:1.0: skipping garbage
[ 1108.655735][ T6037] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1109.055320][  T189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1109.070012][  T189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1109.083173][  T189] bond0 (unregistering): Released all slaves
[ 1109.673208][T15675] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1110.042851][ T5148] Bluetooth: hci2: command tx timeout
[ 1110.222522][T15649] veth0_vlan: entered promiscuous mode
[ 1110.329758][T10328] usb 2-1: USB disconnect, device number 55
[ 1110.343446][  T189] hsr_slave_0: left promiscuous mode
[ 1110.374549][  T189] hsr_slave_1: left promiscuous mode
[ 1110.412490][  T189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1110.420227][  T189] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1110.476802][  T189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1110.503448][  T189] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1110.584286][  T189] veth1_macvtap: left promiscuous mode
[ 1110.589910][  T189] veth0_macvtap: left promiscuous mode
[ 1110.612034][  T189] veth1_vlan: left promiscuous mode
[ 1110.617456][  T189] veth0_vlan: left promiscuous mode
[ 1112.122010][ T5148] Bluetooth: hci2: command tx timeout
[ 1113.992423][  T189] team0 (unregistering): Port device team_slave_1 removed
[ 1114.180567][  T189] team0 (unregistering): Port device team_slave_0 removed
[ 1116.958700][T16186] chnl_net:caif_netlink_parms(): no params data found
[ 1117.017795][ T5936] lo speed is unknown, defaulting to 1000
[ 1117.038378][ T5936] infiniband s…z0: ib_query_port failed (-19)
[ 1117.087730][T15649] veth1_vlan: entered promiscuous mode
[ 1117.171307][T15649] veth0_macvtap: entered promiscuous mode
[ 1117.196988][T15649] veth1_macvtap: entered promiscuous mode
[ 1117.295978][    T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1117.459366][    T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1117.482345][    T9] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config
[ 1117.493936][T15649] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1117.503053][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1117.521997][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1117.542808][T15649] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1117.561089][    T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1117.561932][T16186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1117.580010][    T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1117.598527][    T9] usb 2-1: Product: syz
[ 1117.605363][    T9] usb 2-1: Manufacturer: syz
[ 1117.616429][T16186] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1117.630250][T16186] bridge_slave_0: entered allmulticast mode
[ 1117.663399][T16186] bridge_slave_0: entered promiscuous mode
[ 1117.667188][    T9] cdc_wdm 2-1:1.0: skipping garbage
[ 1117.689335][T16186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1117.705253][    T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1117.732802][T16186] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.773566][T16186] bridge_slave_1: entered allmulticast mode
[ 1117.800540][T16186] bridge_slave_1: entered promiscuous mode
[ 1117.833687][T15649] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.851831][T15649] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.870869][T15649] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1117.901857][T15649] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1118.130538][T16186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1118.209104][T16186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1118.373063][T16186] team0: Port device team_slave_0 added
[ 1119.215510][T16186] team0: Port device team_slave_1 added
[ 1119.328504][T15675] veth0_vlan: entered promiscuous mode
[ 1119.466015][T16186] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1119.502118][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1119.561851][T16186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1119.625580][T16186] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1119.679437][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1119.752706][T16186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1119.808749][T16415] lo speed is unknown, defaulting to 1000
[ 1120.039382][T10488] usb 2-1: USB disconnect, device number 56
[ 1120.187976][T15675] veth1_vlan: entered promiscuous mode
[ 1120.359658][T16429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1120.551499][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1120.564130][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1120.572148][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1120.581051][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1120.587357][T16186] hsr_slave_0: entered promiscuous mode
[ 1120.596601][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1120.650246][T16186] hsr_slave_1: entered promiscuous mode
[ 1120.684226][ T6079] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[ 1120.700292][T16434] loop1: detected capacity change from 0 to 512
[ 1120.760827][ T6079] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[ 1120.774825][T16434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1120.791976][ T6079] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0
[ 1120.806949][T16434] ext4 filesystem being mounted at /566/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1120.871464][ T6079] hid-generic 0000:0004:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1121.054038][T16439] fido_id[16439]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1121.111675][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1121.245307][   T30] audit: type=1326 audit(1749254569.468:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16442 comm="syz.4.3074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa79718e929 code=0x0
[ 1121.578920][T16072] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1121.740899][T16431] lo speed is unknown, defaulting to 1000
[ 1121.799579][T15675] veth0_macvtap: entered promiscuous mode
[ 1121.949323][T16072] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.304947][T15675] veth1_macvtap: entered promiscuous mode
[ 1122.361087][T16072] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1122.513610][T16458] loop1: detected capacity change from 0 to 512
[ 1122.550673][T16458] ext4: Bad value for 'sb'
[ 1122.672394][ T5148] Bluetooth: hci6: command tx timeout
[ 1122.924340][T16072] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1123.321251][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1123.338541][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1123.346897][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1123.356179][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1123.375664][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1123.429678][T16186] ref_tracker: reference already released.
[ 1123.436579][T16186] ref_tracker: freed in:
[ 1123.440827][T16186] ------------[ cut here ]------------
[ 1123.446288][T16186] pool index 40991 out of bounds (1409) for stack id 44b6a020
[ 1123.454677][T16186] WARNING: CPU: 1 PID: 16186 at lib/stackdepot.c:451 depot_fetch_stack+0x95/0xc0
[ 1123.463878][T16186] Modules linked in:
[ 1123.468810][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[ 1123.480733][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1123.490983][T16186] RIP: 0010:depot_fetch_stack+0x95/0xc0
[ 1123.496617][T16186] Code: c7 d8 a7 1b 8f e8 eb 99 71 06 83 f8 01 75 b9 90 0f 0b 90 eb b3 90 48 c7 c7 28 43 d2 8d 89 e9 44 89 ea 89 de e8 2c db 6f fc 90 <0f> 0b 90 90 31 c0 eb bc 90 0f 0b 90 31 c0 eb b4 90 0f 0b 90 31 c0
[ 1123.516268][T16186] RSP: 0018:ffffc9000417f118 EFLAGS: 00010082
[ 1123.522452][T16186] RAX: 0000000000000000 RBX: 000000000000a01f RCX: ffffffff817ae368
[ 1123.530741][T16186] RDX: ffff88802aff1e00 RSI: ffffffff817ae375 RDI: 0000000000000001
[ 1123.538734][T16186] RBP: 0000000044b6a020 R08: 0000000000000001 R09: 0000000000000000
[ 1123.546752][T16186] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000025b0
[ 1123.554831][T16186] R13: 0000000000000581 R14: 0000000044b6a020 R15: ffff8880292e6818
[ 1123.562821][T16186] FS:  0000555565e70500(0000) GS:ffff88812485e000(0000) knlGS:0000000000000000
[ 1123.571775][T16186] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1123.578377][T16186] CR2: 00007f40720e5000 CR3: 00000000614b7000 CR4: 0000000000350ef0
[ 1123.586369][T16186] Call Trace:
[ 1123.589658][T16186]  <TASK>
[ 1123.592636][T16186]  stack_depot_fetch+0x28/0x60
[ 1123.597471][T16186]  stack_depot_print+0x1f/0x60
[ 1123.602277][T16186]  ref_tracker_free+0x6e8/0x830
[ 1123.607173][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.612837][T16186]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1123.618254][T16186]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[ 1123.624374][T16186]  ? in_dev_finish_destroy+0xae/0x1d0
[ 1123.629767][T16186]  ? inetdev_event+0xf8b/0x18a0
[ 1123.634651][T16186]  ? notifier_call_chain+0xbc/0x410
[ 1123.639881][T16186]  ? call_netdevice_notifiers_info+0xbe/0x140
[ 1123.645974][T16186]  ? unregister_netdevice_many_notify+0xf9d/0x2700
[ 1123.652519][T16186]  ? unregister_netdevice_queue+0x305/0x3f0
[ 1123.658454][T16186]  ? bpq_device_event+0x550/0x840
[ 1123.663595][T16186]  ? notifier_call_chain+0xbc/0x410
[ 1123.668846][T16186]  ? call_netdevice_notifiers_info+0xbe/0x140
[ 1123.674977][T16186]  ? unregister_netdevice_many_notify+0xf9d/0x2700
[ 1123.681524][T16186]  ? unregister_netdevice_queue+0x305/0x3f0
[ 1123.687460][T16186]  ? nsim_destroy+0x197/0x5d0
[ 1123.692189][T16186]  ? __nsim_dev_port_del+0x189/0x240
[ 1123.697689][T16186]  ? nsim_dev_reload_destroy+0x10a/0x4d0
[ 1123.703355][T16186]  ? nsim_drv_remove+0x52/0x1d0
[ 1123.708237][T16186]  ? device_remove+0xcb/0x170
[ 1123.712963][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.718713][T16186]  ? __neigh_ifdown.isra.0+0x385/0x440
[ 1123.724233][T16186]  in_dev_finish_destroy+0xae/0x1d0
[ 1123.729459][T16186]  inetdev_event+0xf8b/0x18a0
[ 1123.734602][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.740261][T16186]  ? ib_netdevice_event+0xfc/0x330
[ 1123.745412][T16186]  ? __pfx_inetdev_event+0x10/0x10
[ 1123.750570][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.756503][T16186]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1123.762432][T16186]  notifier_call_chain+0xbc/0x410
[ 1123.767503][T16186]  ? __pfx_inetdev_event+0x10/0x10
[ 1123.772656][T16186]  call_netdevice_notifiers_info+0xbe/0x140
[ 1123.778577][T16186]  unregister_netdevice_many_notify+0xf9d/0x2700
[ 1123.784970][T16186]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1123.791782][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.797622][T16186]  ? rcu_is_watching+0x12/0xc0
[ 1123.802420][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.808265][T16186]  ? ref_tracker_free+0x37c/0x830
[ 1123.813338][T16186]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1123.818764][T16186]  unregister_netdevice_queue+0x305/0x3f0
[ 1123.824525][T16186]  ? tun_device_event+0x74/0x1270
[ 1123.829591][T16186]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1123.835872][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.841556][T16186]  bpq_device_event+0x550/0x840
[ 1123.846441][T16186]  notifier_call_chain+0xbc/0x410
[ 1123.851501][T16186]  ? __pfx_bpq_device_event+0x10/0x10
[ 1123.856909][T16186]  call_netdevice_notifiers_info+0xbe/0x140
[ 1123.862842][T16186]  unregister_netdevice_many_notify+0xf9d/0x2700
[ 1123.869226][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.874889][T16186]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1123.881696][T16186]  ? __pfx___might_resched+0x10/0x10
[ 1123.887046][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.892709][T16186]  ? rcu_is_watching+0x12/0xc0
[ 1123.897515][T16186]  ? nsim_destroy+0xfc/0x5d0
[ 1123.902135][T16186]  ? __pfx___mutex_lock+0x10/0x10
[ 1123.907234][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.912902][T16186]  ? net_passive_dec+0xaa/0x1e0
[ 1123.917792][T16186]  unregister_netdevice_queue+0x305/0x3f0
[ 1123.923650][T16186]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1123.930024][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.935697][T16186]  nsim_destroy+0x197/0x5d0
[ 1123.940227][T16186]  ? kfree+0x2b4/0x4d0
[ 1123.944318][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1123.949990][T16186]  __nsim_dev_port_del+0x189/0x240
[ 1123.955151][T16186]  nsim_dev_reload_destroy+0x10a/0x4d0
[ 1123.960659][T16186]  nsim_drv_remove+0x52/0x1d0
[ 1123.965396][T16186]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 1123.970708][T16186]  device_remove+0xcb/0x170
[ 1123.975284][T16186]  device_release_driver_internal+0x44b/0x620
[ 1123.981380][T16186]  ? __entry_text_end+0x1020b5/0x1020b9
[ 1123.986990][T16186]  bus_remove_device+0x22f/0x420
[ 1123.992005][T16186]  device_del+0x396/0x9f0
[ 1123.996383][T16186]  ? __pfx_device_del+0x10/0x10
[ 1124.001289][T16186]  device_unregister+0x1d/0xc0
[ 1124.006122][T16186]  del_device_store+0x355/0x4a0
[ 1124.011004][T16186]  ? __pfx_del_device_store+0x10/0x10
[ 1124.016424][T16186]  ? find_held_lock+0x2b/0x80
[ 1124.021247][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.026914][T16186]  ? __pfx_del_device_store+0x10/0x10
[ 1124.032325][T16186]  bus_attr_store+0x74/0xb0
[ 1124.036861][T16186]  ? __pfx_bus_attr_store+0x10/0x10
[ 1124.042103][T16186]  sysfs_kf_write+0xf2/0x150
[ 1124.046732][T16186]  kernfs_fop_write_iter+0x354/0x510
[ 1124.052043][T16186]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1124.057372][T16186]  vfs_write+0x6c7/0x1150
[ 1124.061733][T16186]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1124.067598][T16186]  ? __pfx_vfs_write+0x10/0x10
[ 1124.072419][T16186]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1124.077698][T16186]  ksys_write+0x12a/0x250
[ 1124.082087][T16186]  ? __pfx_ksys_write+0x10/0x10
[ 1124.087002][T16186]  do_syscall_64+0xcd/0x4c0
[ 1124.091580][T16186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.097504][T16186] RIP: 0033:0x7f749e78d3df
[ 1124.101950][T16186] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1124.122110][T16186] RSP: 002b:00007ffc44fab0f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1124.130546][T16186] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f749e78d3df
[ 1124.138539][T16186] RDX: 0000000000000001 RSI: 00007ffc44fab140 RDI: 0000000000000005
[ 1124.146531][T16186] RBP: 00007f749e811d8d R08: 0000000000000000 R09: 00007ffc44faaf47
[ 1124.154519][T16186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1124.162504][T16186] R13: 00007ffc44fab140 R14: 00007f749f4e4620 R15: 0000000000000003
[ 1124.170520][T16186]  </TASK>
[ 1124.173574][T16186] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1124.180868][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) 
[ 1124.192806][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1124.202881][T16186] Call Trace:
[ 1124.206173][T16186]  <TASK>
[ 1124.209123][T16186]  dump_stack_lvl+0x3d/0x1f0
[ 1124.213771][T16186]  panic+0x71c/0x800
[ 1124.217715][T16186]  ? __pfx_panic+0x10/0x10
[ 1124.222174][T16186]  ? show_trace_log_lvl+0x29b/0x3e0
[ 1124.227430][T16186]  ? check_panic_on_warn+0x1f/0xb0
[ 1124.232592][T16186]  ? depot_fetch_stack+0x95/0xc0
[ 1124.237605][T16186]  check_panic_on_warn+0xab/0xb0
[ 1124.242599][T16186]  __warn+0xf6/0x3c0
[ 1124.246540][T16186]  ? depot_fetch_stack+0x95/0xc0
[ 1124.251526][T16186]  report_bug+0x3c3/0x580
[ 1124.255898][T16186]  ? depot_fetch_stack+0x95/0xc0
[ 1124.260923][T16186]  handle_bug+0x184/0x210
[ 1124.265304][T16186]  exc_invalid_op+0x17/0x50
[ 1124.269830][T16186]  asm_exc_invalid_op+0x1a/0x20
[ 1124.274813][T16186] RIP: 0010:depot_fetch_stack+0x95/0xc0
[ 1124.280403][T16186] Code: c7 d8 a7 1b 8f e8 eb 99 71 06 83 f8 01 75 b9 90 0f 0b 90 eb b3 90 48 c7 c7 28 43 d2 8d 89 e9 44 89 ea 89 de e8 2c db 6f fc 90 <0f> 0b 90 90 31 c0 eb bc 90 0f 0b 90 31 c0 eb b4 90 0f 0b 90 31 c0
[ 1124.300145][T16186] RSP: 0018:ffffc9000417f118 EFLAGS: 00010082
[ 1124.306368][T16186] RAX: 0000000000000000 RBX: 000000000000a01f RCX: ffffffff817ae368
[ 1124.314917][T16186] RDX: ffff88802aff1e00 RSI: ffffffff817ae375 RDI: 0000000000000001
[ 1124.322937][T16186] RBP: 0000000044b6a020 R08: 0000000000000001 R09: 0000000000000000
[ 1124.330931][T16186] R10: 0000000000000000 R11: 0000000000000001 R12: 00000000000025b0
[ 1124.339012][T16186] R13: 0000000000000581 R14: 0000000044b6a020 R15: ffff8880292e6818
[ 1124.347021][T16186]  ? __warn_printk+0x198/0x350
[ 1124.351835][T16186]  ? __warn_printk+0x1a5/0x350
[ 1124.356657][T16186]  ? depot_fetch_stack+0x94/0xc0
[ 1124.361637][T16186]  stack_depot_fetch+0x28/0x60
[ 1124.366444][T16186]  stack_depot_print+0x1f/0x60
[ 1124.371336][T16186]  ref_tracker_free+0x6e8/0x830
[ 1124.376238][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.381907][T16186]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1124.387346][T16186]  ? __pfx___try_to_del_timer_sync+0x10/0x10
[ 1124.393364][T16186]  ? in_dev_finish_destroy+0xae/0x1d0
[ 1124.398931][T16186]  ? inetdev_event+0xf8b/0x18a0
[ 1124.403818][T16186]  ? notifier_call_chain+0xbc/0x410
[ 1124.409055][T16186]  ? call_netdevice_notifiers_info+0xbe/0x140
[ 1124.415162][T16186]  ? unregister_netdevice_many_notify+0xf9d/0x2700
[ 1124.421711][T16186]  ? unregister_netdevice_queue+0x305/0x3f0
[ 1124.427652][T16186]  ? bpq_device_event+0x550/0x840
[ 1124.432705][T16186]  ? notifier_call_chain+0xbc/0x410
[ 1124.437947][T16186]  ? call_netdevice_notifiers_info+0xbe/0x140
[ 1124.444044][T16186]  ? unregister_netdevice_many_notify+0xf9d/0x2700
[ 1124.450605][T16186]  ? unregister_netdevice_queue+0x305/0x3f0
[ 1124.456560][T16186]  ? nsim_destroy+0x197/0x5d0
[ 1124.461376][T16186]  ? __nsim_dev_port_del+0x189/0x240
[ 1124.466691][T16186]  ? nsim_dev_reload_destroy+0x10a/0x4d0
[ 1124.472364][T16186]  ? nsim_drv_remove+0x52/0x1d0
[ 1124.477251][T16186]  ? device_remove+0xcb/0x170
[ 1124.482083][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.488267][T16186]  ? __neigh_ifdown.isra.0+0x385/0x440
[ 1124.493847][T16186]  in_dev_finish_destroy+0xae/0x1d0
[ 1124.499511][T16186]  inetdev_event+0xf8b/0x18a0
[ 1124.504225][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.509887][T16186]  ? ib_netdevice_event+0xfc/0x330
[ 1124.515026][T16186]  ? __pfx_inetdev_event+0x10/0x10
[ 1124.520174][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.525843][T16186]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1124.531776][T16186]  notifier_call_chain+0xbc/0x410
[ 1124.536855][T16186]  ? __pfx_inetdev_event+0x10/0x10
[ 1124.542009][T16186]  call_netdevice_notifiers_info+0xbe/0x140
[ 1124.547940][T16186]  unregister_netdevice_many_notify+0xf9d/0x2700
[ 1124.554327][T16186]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1124.561136][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.566807][T16186]  ? rcu_is_watching+0x12/0xc0
[ 1124.571810][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.577525][T16186]  ? ref_tracker_free+0x37c/0x830
[ 1124.582634][T16186]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1124.588220][T16186]  unregister_netdevice_queue+0x305/0x3f0
[ 1124.593989][T16186]  ? tun_device_event+0x74/0x1270
[ 1124.599072][T16186]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1124.605357][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.611034][T16186]  bpq_device_event+0x550/0x840
[ 1124.615947][T16186]  notifier_call_chain+0xbc/0x410
[ 1124.621010][T16186]  ? __pfx_bpq_device_event+0x10/0x10
[ 1124.626420][T16186]  call_netdevice_notifiers_info+0xbe/0x140
[ 1124.632344][T16186]  unregister_netdevice_many_notify+0xf9d/0x2700
[ 1124.638726][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.644417][T16186]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 1124.651247][T16186]  ? __pfx___might_resched+0x10/0x10
[ 1124.656569][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.662237][T16186]  ? rcu_is_watching+0x12/0xc0
[ 1124.667046][T16186]  ? nsim_destroy+0xfc/0x5d0
[ 1124.671664][T16186]  ? __pfx___mutex_lock+0x10/0x10
[ 1124.676753][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.682418][T16186]  ? net_passive_dec+0xaa/0x1e0
[ 1124.687386][T16186]  unregister_netdevice_queue+0x305/0x3f0
[ 1124.693152][T16186]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 1124.699442][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.705181][T16186]  nsim_destroy+0x197/0x5d0
[ 1124.709746][T16186]  ? kfree+0x2b4/0x4d0
[ 1124.713867][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.719577][T16186]  __nsim_dev_port_del+0x189/0x240
[ 1124.724799][T16186]  nsim_dev_reload_destroy+0x10a/0x4d0
[ 1124.730331][T16186]  nsim_drv_remove+0x52/0x1d0
[ 1124.735059][T16186]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 1124.740398][T16186]  device_remove+0xcb/0x170
[ 1124.744956][T16186]  device_release_driver_internal+0x44b/0x620
[ 1124.751093][T16186]  ? __entry_text_end+0x1020b5/0x1020b9
[ 1124.756684][T16186]  bus_remove_device+0x22f/0x420
[ 1124.761695][T16186]  device_del+0x396/0x9f0
[ 1124.766125][T16186]  ? __pfx_device_del+0x10/0x10
[ 1124.771035][T16186]  device_unregister+0x1d/0xc0
[ 1124.775870][T16186]  del_device_store+0x355/0x4a0
[ 1124.780749][T16186]  ? __pfx_del_device_store+0x10/0x10
[ 1124.786148][T16186]  ? find_held_lock+0x2b/0x80
[ 1124.790881][T16186]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1124.796553][T16186]  ? __pfx_del_device_store+0x10/0x10
[ 1124.801963][T16186]  bus_attr_store+0x74/0xb0
[ 1124.806503][T16186]  ? __pfx_bus_attr_store+0x10/0x10
[ 1124.811756][T16186]  sysfs_kf_write+0xf2/0x150
[ 1124.816513][T16186]  kernfs_fop_write_iter+0x354/0x510
[ 1124.821827][T16186]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1124.827089][T16186]  vfs_write+0x6c7/0x1150
[ 1124.831450][T16186]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 1124.837482][T16186]  ? __pfx_vfs_write+0x10/0x10
[ 1124.842285][T16186]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1124.847558][T16186]  ksys_write+0x12a/0x250
[ 1124.851945][T16186]  ? __pfx_ksys_write+0x10/0x10
[ 1124.856847][T16186]  do_syscall_64+0xcd/0x4c0
[ 1124.861515][T16186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.867436][T16186] RIP: 0033:0x7f749e78d3df
[ 1124.871872][T16186] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1124.891531][T16186] RSP: 002b:00007ffc44fab0f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1124.900069][T16186] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f749e78d3df
[ 1124.908059][T16186] RDX: 0000000000000001 RSI: 00007ffc44fab140 RDI: 0000000000000005
[ 1124.916052][T16186] RBP: 00007f749e811d8d R08: 0000000000000000 R09: 00007ffc44faaf47
[ 1124.924078][T16186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 1124.932078][T16186] R13: 00007ffc44fab140 R14: 00007f749f4e4620 R15: 0000000000000003
[ 1124.940096][T16186]  </TASK>
[ 1124.943422][T16186] Kernel Offset: disabled
[ 1124.947802][T16186] Rebooting in 86400 seconds..