last executing test programs:

5m24.811168491s ago: executing program 32 (id=101):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8010, &(0x7f0000000000), 0x1, 0x25d, &(0x7f0000000680)="$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")
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setresuid(r1, r1, r1)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

5m6.975038104s ago: executing program 33 (id=183):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$sndctrl(0x0, 0x5c9, 0x400)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

4m53.631469837s ago: executing program 2 (id=228):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x40)

4m53.438161456s ago: executing program 2 (id=230):
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
lchown(0x0, 0x0, 0x0)
chdir(0x0)
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
inotify_init()

4m53.244798245s ago: executing program 2 (id=231):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x25, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0x4]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@remote}, {@private=0xa010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@multicast1]}, @rr={0x7, 0xb, 0x0, [@remote, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m52.516867122s ago: executing program 2 (id=234):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@discard}]}, 0x1, 0x4d3, &(0x7f0000000c00)="$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")
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
chdir(&(0x7f0000000380)='./file0\x00')
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))

4m52.184495661s ago: executing program 2 (id=236):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m51.549094448s ago: executing program 2 (id=241):
syz_emit_ethernet(0x12, &(0x7f0000000140)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x8906}}}, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})

4m51.179981026s ago: executing program 34 (id=241):
syz_emit_ethernet(0x12, &(0x7f0000000140)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x8906}}}, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})

4m35.973945541s ago: executing program 6 (id=312):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @rr={0x7, 0xb, 0x0, [@multicast1, @private=0xa010102]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m34.615257485s ago: executing program 6 (id=323):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x401, 0x5]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0x7}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m32.826797157s ago: executing program 6 (id=329):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'ip6erspan0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000))

4m32.523718006s ago: executing program 6 (id=332):
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x500, 0x0, 0x1, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

4m32.260956475s ago: executing program 6 (id=334):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5a1, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f00000011c0)="95", 0x1}], 0x1, 0x47fff, 0x0, 0x0)

4m32.008267183s ago: executing program 6 (id=335):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

4m31.497250891s ago: executing program 35 (id=335):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

4m28.532217539s ago: executing program 4 (id=350):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0})

4m25.081084254s ago: executing program 4 (id=360):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="001116"], 0x0, 0x0})

4m22.490436562s ago: executing program 4 (id=371):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

4m22.370061222s ago: executing program 4 (id=372):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x3000400, &(0x7f0000000000)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$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")
mkdir(&(0x7f0000000080)='./file0/../file0/../file0/file0\x00', 0x134)

4m21.92095641s ago: executing program 4 (id=373):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x100000, 0x0, 0x1, 0x5, "907300000000ff06b770f8f990fce77fffffeb"})
r1 = dup(r0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x82fa, 0x0, "0911000000000300"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

4m20.328814683s ago: executing program 4 (id=377):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
fcntl$setown(r0, 0x8, 0x0)

4m19.919087471s ago: executing program 36 (id=377):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
fcntl$setown(r0, 0x8, 0x0)

3m32.806054468s ago: executing program 7 (id=582):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0)

3m32.460436837s ago: executing program 7 (id=586):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f00000004c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x103)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000340)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)

3m30.651679599s ago: executing program 7 (id=590):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3m26.894811053s ago: executing program 7 (id=608):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[], 0x9, 0xc21, &(0x7f0000001e80)="$eJzs3U9sHNd9B/DfG3HFld1WTOwodhsXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcmnAYGbfikuKshiRlCjr87Gp7+7sezPvzVvPyILevAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIn7/tYunTqeH3QoA4EG6PPrlU2fc/wHgsXLF//8DAAAAAAAAAAAAAMBBl6KIpyLF3OW1NF6976hfatdu3hobGt6+2pFU1TxUlS9/6qfPnD33hZcGz3fzUnvmI+rvtWfjjdErFxuvzt6Ym59aWJiabIzNtCdmJ6d2vIfd1t/qRHUCGjfevDl57dpC48yLZzd9fGvgw/4njw1cGHz+5HPdsmNDw8OjG0Xq933sbdxthsfhKOJkpHjhOz9OrYgoYvfnov5gx36rI1UnTlSdGBsarjoy3W7NLJYfjnRPRBHR6KnU7J6j7cci+moPtA9314xYKptfNvhE2b3RudZ86+r0VGOkNb/YXmzPzoykTmvL/jSiiPMpYjkiVvvv3F0tiuiLFN86upauRsSh7nn4fDUx+O7tKPaxjztQtrNRi1guHoExO8D6o4jXI8VP3jseE+U5yz/xuYjXy/xexDtlvhKRyi/GuYgPtvke8WjqiyL+ohz/C2tpsroedK8rl77S+NLMtdmest3ryi94f7jjSvGQ7g9HtuSDccCvTfUoolVd8dfS/f9mBwAAAAAAAAAAAAAAAIC9diSKeDZSvPbvf1zNK45qXvrRC4N/MPDLvXPGn7nHfsqyL0bEUrGzObmH88TAkTSS0kOeS/w4q0cRf5Ln/33jYTcGAAAAAAAAAAAAAAAAAADgsVbEjyLFy+8fT8vRu6Z4e+Z640rr6nRnVdju2r/dNdPX19fXG6mTzZzjOZdyLudcybmaM4pcP2cz53jOpZzLOVdyruaMQ7l+zmbO8ZxLOZdzruRczRl9uX7OZs7xnEs5l3Ou5FzNGbWI/y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA9U0QRP4sU3/zaWooUEc2I8ejkSv/Dbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUOpPRXw3UjT+sHl7W19EpOrfjuPlL+eiebjMT0ZzsMxXonkxZ6vKvuY3HkL72Z1aKuKHkaK//u7tAc/jX+u8u/01iHe+vvHuV/s6eaj74cCH/U8eO3phcPjXn7nb67RdA05cas/cvNUYGxoeHu3Z3JeP/smebQP5uMXedJ2IWHjr7Tdb09NT8/f/ovwK7KK6F14c1BfRdyCa8XD6zmOgvP9/ECl+5/3/6N7wu/f/X+q8u32Hj5/+6cb9/+WtO9rh/b9va7173P+f6tn2cv7dSK0vor54Y652LKK+8NbbJ9s3Wtenrk/NnDt16ouDg188e6p2OKJ+rT091fNqT04XAAAAAAAAAAAAAAAAwIOTivi9SNH64VpqRMStar7WwIXB508+dygOVfOtNs3bfmP0ysXGq7M35uanFhamJhtjM+2J2cmpnR6uXk33Ghsa3pfO3NORfW7/kfqrs3Nvzbev/9Hitp8/Ub94dWFxvjWx/cdxJIqIZu+WE1WDx4aGq0ZPt1szVdWRbSfT/+JqqYj/jBQT5xrps3lbnv+3dYb/pvn/S1t3tE/z/z/Rs608ZkpF/DRS/PZfPhOfrdr5RNxxznK5v40UJ85/JpeLw2W5bhs6zxXozAwsy/5vpPjHn20u250P+dRG2dM7PrGPiHL8j0aK7/75t+M38rbNz3/Yfvyf2LqjfRr/p3u2PbHpeQW77jp5/E9Gileeejd+M2/7qOd/dJ+9cTwXvv18jn0a/0/1bBvIx/2tvek6AAAAAAAAAADAI62Wivi7SPH94b70Ut62k7//N7l1R/v0978+3bNtcm/WK7rni12fVAAAAAA4IGqpiB9FiuuL796eQ715/nfP/M/f3Zj/OZS2fFr9Od+vVM8N2Ms//+s1kI87vvtuAwAAAAAAAAAAAAAAAAAAwIGSUhEv5fXUx6v5/J3nfW63nvpKpHjtv1/I5dKxKDbWgR+ofq1fnp05eXF6enaitdi6Oj3VGJ1rTUyVdZ+OFGt/85lct6jWV++uN99Z431jLfb5SDH8992ynbXYu2uTP71R9nRZ9hOR4r/+YXPZ7jrWn9ooe6Ys+9eR4qv/vH3ZYxtlz5Zlvx0pfvDVRrfsE2XZ7vNRP71R9sWJ2WLPxwQAAAAAAAAAAAAAAAAAAIDHTy0V8WeR4n9uLN+ey5/X/6/1vK288/We9f63uFWt8z9Qrf9/t9f3s/5/9VyBpbsdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi7vJZW+sv3HfVL7Zmbt8aGhrevdiRVNQ9V5cuf+ukzZ8994aXB89386Pp77dl4Y/TKxcarszfm5qcWFqYmG2Mz7YnZyakd72G39bc6UZ2Axo03b05eu7bQOPPi2U0f3xr4sP/JYwMXBp8/+Vy37NjQ8PBoT5m+2n0f/Q7pLtsPRxF/FSle+M6P0/f7I4rY/bm4x3dnvx2pOnGi6sTY0HDVkel2a2ax/HCkeyKKiEZPpWb3HD2AsdiVZsRS2fyywSfK7o3OteZbV6enGiOt+cX2Ynt2ZiR1Wlv2pxFFnE8RyxGx2n/n7mpRxJuR4ltH19K/9Ecc6p6Hz18e/fKpM3dvR7GPfdyBsp2NWsRy8QiM2QHWH0X8U6T4yXvH41/7I/qi8xOfi3i9zO9FvBOd8U7lF+NcxAfbfI94NPVFEf9Xjv+FtfRef3k96F5XLn2l8aWZa7M9ZbvXlUf+/vAgHfBrUz2K+EF1xV9L/+a/awAAAAAAAAAAAAAAAIADpIhfixQvv388VfODb88pbs9cb1xpXZ3uTOvrzv3rzpleX19fb6RONnOO51zKuZxzJedqzihy/ZzNMuvr6+P5/VLO5ZwrOVdzxqFcP2cz53jOpZzLOVdyruaMvlw/ZzPneM6lnMs5V3Ku5owDMncPAAAAAAAAAAAAAAAAAAD4eCmqf1J882trab2/s770eHRyxXqgH3s/DwAA//8W9v7w")
sync()
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2014c7f, 0x0)

3m26.21310084s ago: executing program 7 (id=613):
openat$bsg(0xffffffffffffff9c, 0x0, 0x2080, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

3m25.653770017s ago: executing program 7 (id=618):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x0, 0x27f})

3m25.201950455s ago: executing program 37 (id=618):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x1, 0x0, 0x27f})

2m46.172899677s ago: executing program 0 (id=767):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030008359638c720580"], 0x1, 0x489, &(0x7f0000000580)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0xc02, 0x0)
r0 = dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000002c0)={0x0, 0xb, 0x12, 0x0, 0x0, 0x0, 0x0})
symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./bus\x00')
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50)

2m44.824940641s ago: executing program 0 (id=770):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2a9, &(0x7f0000000500)="$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")
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c5, 0x82)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="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", 0x600)
sendfile(r0, r1, 0x0, 0xe065)

2m44.778644641s ago: executing program 0 (id=771):
socket$inet(0x2, 0x4000000000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804cd8, &(0x7f0000000e80)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRESHEX, @ANYBLOB="db7cdacdc93ee84dde64a5615008ffb65641bfe832ec4d4e2cd18e4338f57e062540629e5dc19de76dca76886a74ba62738989d45bf468950720dc1c90741f92c57b11440bb9963a5f39926a28228ba12513c03eaa2a8300b81d5ad60637908e2d5e642d202ad7882e8721cf9c57ed963ab3661031e9e48bb326a5cfe477f718a327bc927db4b3daadb2a7c625694065dd56d3d787bc47a6240e40fc0c3fef0850c56182c4af4f6b4f39f3e11ad5ff13dc89bb5064cc1f04ede92f5f4b106a93feb21a5d751996158eb9f8585d4ab2530c12b4fd406df2c81f693ace", @ANYRES32, @ANYRES64, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x3, 0x222, &(0x7f0000001d40)="$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")
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2m44.55833277s ago: executing program 0 (id=772):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
syz_mount_image$fuse(&(0x7f0000000840), &(0x7f0000000880)='./file0/../file0\x00', 0x84000, &(0x7f0000000d00)=ANY=[], 0x1, 0x0, 0x0)

2m44.218717789s ago: executing program 0 (id=778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}}, 0x400c840)

2m42.451883111s ago: executing program 0 (id=782):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = dup(0xffffffffffffffff)
write$UHID_INPUT(r0, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="6998f606000000d7"}, 0x21, 0x0, '\x00', @c})

2m42.07267971s ago: executing program 38 (id=782):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = dup(0xffffffffffffffff)
write$UHID_INPUT(r0, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="6998f606000000d7"}, 0x21, 0x0, '\x00', @c})

18.339688239s ago: executing program 8 (id=1244):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

18.178663498s ago: executing program 8 (id=1246):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe9e)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)

17.009396803s ago: executing program 8 (id=1250):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x52, 0xc0, 0xaf, 0x20, 0x2013, 0x248, 0x423d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0xd2, 0x2, 0x0, 0xc3, 0x61, 0x68}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0xc, 0x16, "26ad0189e0ec4f6880ae60449c51ff16448c49b180af"}, 0x0, 0x0, 0x0, 0x0, 0x0})

14.257920371s ago: executing program 3 (id=1256):
gettid()
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
r2 = socket$inet6(0xa, 0x802, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000100)=""/184)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pipe(0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20)

13.476632988s ago: executing program 3 (id=1257):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106)
syz_usb_connect(0x0, 0x24, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x81, 0xdd, 0x22, 0x10, 0x54c, 0x2e, 0x500, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf7, 0x4, 0xc9}}]}}]}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

12.724897685s ago: executing program 8 (id=1258):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

11.289542968s ago: executing program 3 (id=1262):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180))
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
io_cancel(0x0, 0x0, &(0x7f0000000100))
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

9.146021719s ago: executing program 3 (id=1268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x200000}, &(0x7f0000000340)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r6, 0x1)
syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x22ffffffff}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.076807148s ago: executing program 1 (id=1269):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x800080, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="755ac823bc00d7857d6a07812f245ac27fc64c70f0ed9e96b8bd8f98dac9cc7e072a2c681a2d7139ed8a6f67d852246f145357b16f7e55559d8b0bb49b7ca3b533d4161b0538394652168362df000b01c631d675", @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x9, 0x19d, &(0x7f0000000340)="$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")
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendmmsg$inet(r3, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)

5.757317834s ago: executing program 9 (id=1271):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
stat(0x0, &(0x7f0000003480))
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r4)
setregid(r4, 0xffffffffffffffff)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000003540), 0x54841, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

5.756972475s ago: executing program 3 (id=1272):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1, 0x2, 0x1c4)
r5 = fsmount(r1, 0x0, 0x1)
fchdir(r5)
socketpair(0x11, 0x3, 0x300, &(0x7f0000000000))
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r6, 0x8000, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/4089, 0xff9)
getdents(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, r7}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0)

5.747050904s ago: executing program 1 (id=1273):
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

5.746493294s ago: executing program 8 (id=1274):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0})

5.268433822s ago: executing program 9 (id=1275):
r0 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)

4.876811511s ago: executing program 1 (id=1276):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SET_PTRACER(0x59616d61, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})

4.855513841s ago: executing program 9 (id=1277):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x169)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.6047526s ago: executing program 5 (id=1278):
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
io_setup(0xbf5, &(0x7f0000000600))

3.660348576s ago: executing program 1 (id=1279):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6)

3.496983584s ago: executing program 9 (id=1280):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002"], 0x68}}, 0x64000004)

3.448064635s ago: executing program 9 (id=1281):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
pwritev(r2, &(0x7f0000000280), 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)

3.390128744s ago: executing program 1 (id=1282):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000840)

3.048837783s ago: executing program 5 (id=1283):
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)

2.767175922s ago: executing program 1 (id=1284):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
memfd_secret(0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

2.691673171s ago: executing program 3 (id=1285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
stat(0x0, &(0x7f0000003480))
r2 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r3)
setregid(r3, 0xffffffffffffffff)
ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000003540), 0x54841, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

1.632985027s ago: executing program 5 (id=1286):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000300)=0x1, 0x4)
sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

1.179568275s ago: executing program 5 (id=1287):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5}, 0x18)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)

458.650111ms ago: executing program 5 (id=1288):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046})

328.865461ms ago: executing program 8 (id=1289):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SET_PTRACER(0x59616d61, r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1})

160.92823ms ago: executing program 5 (id=1290):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)

0s ago: executing program 9 (id=1291):
chdir(0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000140)={0x11, 0x1a, 0x0, 0x1, 0xff, 0x6, @random="19ec0f877487"}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

kernel console output (not intermixed with test programs):

(block 65) failed
[  177.101986][ T6375] FAT-fs (loop8): Directory bread(block 66) failed
[  177.111847][ T6375] FAT-fs (loop8): Directory bread(block 67) failed
[  177.128494][ T6375] FAT-fs (loop8): Directory bread(block 68) failed
[  177.141855][ T6375] FAT-fs (loop8): Directory bread(block 69) failed
[  177.156471][ T6375] FAT-fs (loop8): Directory bread(block 70) failed
[  177.184522][ T6375] FAT-fs (loop8): Directory bread(block 71) failed
[  177.225159][ T6375] FAT-fs (loop8): Directory bread(block 72) failed
[  177.248706][ T6375] FAT-fs (loop8): Directory bread(block 73) failed
[  177.321993][ T4302] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  177.541856][ T4302] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.569338][ T4302] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.582968][ T6392] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  177.602420][ T4302] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.639234][ T4302] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.657214][ T4302] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.698454][ T4302] usb 10-1: config 0 descriptor??
[  177.879617][ T6399] loop7: detected capacity change from 0 to 1024
[  177.919628][ T6399] EXT4-fs: Ignoring removed i_version option
[  177.941856][ T4330] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  177.956491][ T6399] EXT4-fs: inline encryption not supported
[  177.963920][ T6399] EXT4-fs (loop7): Test dummy encryption mode enabled
[  178.154347][ T4302] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  178.179611][ T6399] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  178.199004][ T4302] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  178.316701][ T4330] usb 9-1: config 0 interface 0 has no altsetting 0
[  178.371636][ T4330] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  178.707574][ T4330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.873237][ T4330] usb 9-1: config 0 descriptor??
[  178.880097][ T4330] hub 9-1:0.0: bad descriptor, ignoring hub
[  178.888913][ T4330] hub: probe of 9-1:0.0 failed with error -5
[  178.899268][ T4330] cp210x 9-1:0.0: cp210x converter detected
[  178.933651][ T5390] EXT4-fs (loop7): unmounting filesystem.
[  179.099418][ T4330] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -71
[  179.115670][ T4330] cp210x 9-1:0.0: querying part number failed
[  179.128491][ T4330] usb 9-1: cp210x converter now attached to ttyUSB0
[  179.162536][ T4330] usb 9-1: USB disconnect, device number 2
[  179.193850][ T4330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  179.217884][ T4330] cp210x 9-1:0.0: device disconnected
[  179.425367][ T6426] No such timeout policy "syz1"
[  180.082272][ T4299] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  180.319668][ T4299] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.419201][ T4299] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.585628][ T4299] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  180.666719][   T41] usb 10-1: USB disconnect, device number 2
[  180.781817][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  180.796858][ T4299] usb 8-1: SerialNumber: syz
[  180.878180][ T6446] loop8: detected capacity change from 0 to 164
[  180.920505][ T6446] rock: directory entry would overflow storage
[  180.926924][ T6446] rock: sig=0x66, size=4, remaining=3
[  180.977931][ T6450] loop9: detected capacity change from 0 to 1024
[  181.017234][ T4299] usb 8-1: 0:2 : does not exist
[  181.025106][ T4299] usb 8-1: unit 5 not found!
[  181.029752][ T4299] usb 8-1: unit 120 not found!
[  181.059562][ T4299] usb 8-1: USB disconnect, device number 13
[  181.092683][ T6450] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  181.282367][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.360896][ T6026] EXT4-fs (loop9): unmounting filesystem.
[  181.619008][ T6467] netlink: 56 bytes leftover after parsing attributes in process `syz.5.489'.
[  183.056663][   T26] audit: type=1326 audit(1734509530.171:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.125277][ T6500] loop7: detected capacity change from 0 to 512
[  183.127076][   T26] audit: type=1326 audit(1734509530.191:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.154782][ T6500] journal_path: Lookup failure for './file0'
[  183.177601][ T6500] EXT4-fs: error: could not find journal device path
[  183.252290][   T26] audit: type=1326 audit(1734509530.191:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.287638][ T6500] loop7: detected capacity change from 0 to 1024
[  183.350801][   T26] audit: type=1326 audit(1734509530.201:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.389377][ T6500] hfsplus: xattr searching failed
[  183.461812][   T26] audit: type=1326 audit(1734509530.201:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.558059][   T26] audit: type=1326 audit(1734509530.201:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.634673][ T6509] loop8: detected capacity change from 0 to 256
[  183.652683][   T26] audit: type=1326 audit(1734509530.201:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.733203][ T6509] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  183.747462][   T26] audit: type=1326 audit(1734509530.201:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.821747][   T26] audit: type=1326 audit(1734509530.201:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.844603][ T6509] syz.8.500: attempt to access beyond end of device
[  183.844603][ T6509] loop8: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[  183.901778][ T6509] syz.8.500: attempt to access beyond end of device
[  183.901778][ T6509] loop8: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[  183.926364][   T26] audit: type=1326 audit(1734509530.201:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6496 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48fcd85d29 code=0x7ffc0000
[  183.952340][ T4360] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  184.153341][ T4360] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  184.172879][ T4360] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.216157][ T4360] usb 8-1: config 0 descriptor??
[  184.260853][ T4360] cp210x 8-1:0.0: cp210x converter detected
[  185.150478][ T4360] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -32
[  185.166075][ T4360] cp210x 8-1:0.0: querying part number failed
[  185.174508][ T4360] usb 8-1: cp210x converter now attached to ttyUSB0
[  185.339416][ T6536] loop8: detected capacity change from 0 to 1024
[  185.396203][ T6536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  185.435122][ T6536] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  185.482010][ T6536] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal
[  185.632545][ T6544] netlink: 3 bytes leftover after parsing attributes in process `syz.9.508'.
[  185.860073][ T6554] loop9: detected capacity change from 0 to 1024
[  185.920811][ T6554] hfsplus: extend alloc file! (8192,512,16777719)
[  188.534077][ T4360] usb 8-1: USB disconnect, device number 14
[  188.594242][ T4360] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  188.630802][ T4330] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  188.650747][ T6578] loop5: detected capacity change from 0 to 512
[  188.679971][ T4360] cp210x 8-1:0.0: device disconnected
[  188.702514][ T6578] EXT4-fs: inline encryption not supported
[  188.712397][ T6578] ext4: Unknown parameter 'nouser_xattr'
[  188.770574][ T4375] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.823774][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.860490][ T4330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.900137][ T4330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  188.953981][ T4330] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  188.985330][ T4330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.024763][ T4330] usb 1-1: config 0 descriptor??
[  189.062484][ T6590] loop5: detected capacity change from 0 to 256
[  189.104784][ T6590] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  189.326633][ T4330] usbhid 1-1:0.0: can't add hid device: -71
[  189.335834][ T4330] usbhid: probe of 1-1:0.0 failed with error -71
[  189.384056][ T4330] usb 1-1: USB disconnect, device number 13
[  189.608189][ T6599] loop5: detected capacity change from 0 to 1024
[  189.630325][ T6601] loop7: detected capacity change from 0 to 128
[  189.648444][ T6599] EXT4-fs: Ignoring removed orlov option
[  189.714087][ T6601] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  189.755340][ T6599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  189.795882][ T6601] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.930115][ T6601] syz.7.525 (pid 6601) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  189.986764][ T6613] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  190.018838][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  190.182147][ T5390] EXT4-fs (loop7): unmounting filesystem.
[  190.442595][ T6588] loop9: detected capacity change from 0 to 40427
[  190.482111][ T6588] F2FS-fs (loop9): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  190.491020][ T6588] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  190.563354][ T6588] F2FS-fs (loop9): invalid crc value
[  190.597663][ T6588] F2FS-fs (loop9): Found nat_bits in checkpoint
[  190.638566][ T6632] loop8: detected capacity change from 0 to 512
[  190.685008][ T6637] loop7: detected capacity change from 0 to 256
[  190.759194][ T6632] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  190.799761][ T6588] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  190.818085][ T6588] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  190.840232][ T6632] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.048153][ T6632] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  191.112152][ T6632] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28
[  191.146087][ T6632] EXT4-fs (loop8): This should not happen!! Data will be lost
[  191.146087][ T6632] 
[  191.150597][ T6644] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  191.174527][ T6632] EXT4-fs (loop8): Total free blocks count 0
[  191.180958][ T6644] EXT4-fs (loop8): This should not happen!! Data will be lost
[  191.180958][ T6644] 
[  191.264674][ T6651] input: syz1 as /devices/virtual/input/input13
[  191.393027][ T6632] EXT4-fs (loop8): Free/Dirty block details
[  191.550941][ T6644] EXT4-fs (loop8): Total free blocks count 0
[  191.560650][ T6632] EXT4-fs (loop8): free_blocks=65280
[  191.568562][ T6644] EXT4-fs (loop8): Free/Dirty block details
[  191.841772][ T6026] syz-executor: attempt to access beyond end of device
[  191.841772][ T6026] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.733725][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  193.733742][   T26] audit: type=1326 audit(1734509540.821:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.8.547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb538385d29 code=0x0
[  193.936770][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  193.944071][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  195.457392][ T6716] loop7: detected capacity change from 0 to 2048
[  195.670683][ T6721] Bluetooth: MGMT ver 1.22
[  196.641777][ T4330] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  196.721733][ T4360] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  196.823000][ T4330] usb 8-1: Using ep0 maxpacket: 32
[  196.830878][ T4330] usb 8-1: config 0 has an invalid interface number: 89 but max is 0
[  196.848756][ T4330] usb 8-1: config 0 has no interface number 0
[  196.864273][ T4330] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  196.907085][ T4330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.933266][ T4330] usb 8-1: Product: syz
[  196.944281][ T6743] binder_alloc: 6742: binder_alloc_buf, no vma
[  196.952035][ T4360] usb 6-1: Using ep0 maxpacket: 32
[  196.955974][ T4330] usb 8-1: Manufacturer: syz
[  196.959253][ T4360] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  196.986776][ T4330] usb 8-1: SerialNumber: syz
[  196.988963][ T4360] usb 6-1: config 0 has no interface number 0
[  197.000325][ T4330] usb 8-1: config 0 descriptor??
[  197.026430][ T4360] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  197.028288][ T4330] hub 8-1:0.89: bad descriptor, ignoring hub
[  197.045848][ T4360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.081773][ T4330] hub: probe of 8-1:0.89 failed with error -5
[  197.083516][ T4360] usb 6-1: Product: syz
[  197.106881][ T4330] option 8-1:0.89: GSM modem (1-port) converter detected
[  197.111077][ T4360] usb 6-1: Manufacturer: syz
[  197.118997][ T4360] usb 6-1: SerialNumber: syz
[  197.151017][ T4360] usb 6-1: config 0 descriptor??
[  197.162487][ T4330] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0
[  197.165472][ T4360] smsc95xx v2.0.0
[  197.431647][  T126] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  197.470804][ T6716] x_tables: ip6_tables: mh match: only valid for protocol 135
[  197.561128][ T6755] loop8: detected capacity change from 0 to 4096
[  197.568312][ T6755] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.582204][ T4360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  197.624312][ T4360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  197.642291][   T41] usb 8-1: USB disconnect, device number 15
[  197.664067][   T41] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  197.679694][   T41] option 8-1:0.89: device disconnected
[  197.703389][  T126] usb 1-1: Using ep0 maxpacket: 32
[  197.711148][  T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.762342][ T6755] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  197.947859][  T126] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.949754][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  197.965144][  T126] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  197.976181][  T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.000043][  T126] usb 1-1: config 0 descriptor??
[  198.009681][  T126] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  198.010075][ T6763] loop9: detected capacity change from 0 to 512
[  198.194053][ T6763] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  198.221906][ T6763] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.685771][ T6784] netlink: 'syz.9.566': attribute type 4 has an invalid length.
[  199.467876][ T6026] EXT4-fs (loop9): unmounting filesystem.
[  199.716689][ T4360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  199.741835][ T4360] smsc95xx: probe of 6-1:0.67 failed with error -61
[  199.781072][ T6797] loop7: detected capacity change from 0 to 2048
[  199.863436][ T6797] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  199.921433][ T6797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.974786][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.8.574'.
[  200.053311][ T6803] loop9: detected capacity change from 0 to 1764
[  200.309157][ T6806] loop8: detected capacity change from 0 to 1024
[  200.406580][ T6806] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  200.490465][ T4297] usb 1-1: USB disconnect, device number 14
[  200.670102][ T6828] loop7: detected capacity change from 0 to 1024
[  200.900635][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  201.066995][ T4299] usb 6-1: USB disconnect, device number 13
[  202.029943][ T6861] loop7: detected capacity change from 0 to 16
[  202.056069][ T6846] loop9: detected capacity change from 0 to 8192
[  202.064879][ T6861] erofs: (device loop7): mounted with root inode @ nid 36.
[  202.113238][ T6846] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.349986][ T6874] loop8: detected capacity change from 0 to 1024
[  203.575898][   T41] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  203.693003][ T4360] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  203.781895][   T41] usb 8-1: Using ep0 maxpacket: 32
[  203.788847][   T41] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.823549][   T41] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.858479][   T41] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  203.876802][   T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.892865][   T41] usb 8-1: config 0 descriptor??
[  203.911435][   T41] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  203.919434][ T4360] usb 6-1: Using ep0 maxpacket: 8
[  203.934585][ T4360] usb 6-1: no configurations
[  203.940850][ T4360] usb 6-1: can't read configurations, error -22
[  204.111939][ T4360] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  204.249397][ T6901] loop8: detected capacity change from 0 to 1024
[  204.300995][ T6901] hfsplus: request for non-existent node 3 in B*Tree
[  204.311888][ T4360] usb 6-1: Using ep0 maxpacket: 8
[  204.317994][ T4360] usb 6-1: no configurations
[  204.327199][ T6901] hfsplus: request for non-existent node 3 in B*Tree
[  204.328581][ T4360] usb 6-1: can't read configurations, error -22
[  204.368413][ T4360] usb usb6-port1: attempt power cycle
[  204.412428][   T41] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  204.601883][   T41] usb 1-1: Using ep0 maxpacket: 32
[  204.609307][   T41] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  204.638201][   T41] usb 1-1: config 0 has no interface number 0
[  204.655646][   T41] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  204.681792][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.710162][   T41] usb 1-1: Product: syz
[  204.717370][   T41] usb 1-1: Manufacturer: syz
[  204.726865][   T41] usb 1-1: SerialNumber: syz
[  204.746796][   T41] usb 1-1: config 0 descriptor??
[  204.764484][   T41] smsc95xx v2.0.0
[  204.807765][ T4360] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  204.872350][ T4360] usb 6-1: Using ep0 maxpacket: 8
[  204.878762][ T4360] usb 6-1: no configurations
[  204.904731][ T4360] usb 6-1: can't read configurations, error -22
[  204.914877][ T6914] loop8: detected capacity change from 0 to 1024
[  204.958319][ T6914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.081932][ T4360] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  205.149810][ T4360] usb 6-1: Using ep0 maxpacket: 8
[  205.156689][ T4360] usb 6-1: no configurations
[  205.161339][ T4360] usb 6-1: can't read configurations, error -22
[  205.169244][   T41] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  205.200347][   T41] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  205.206553][ T6923] loop8: detected capacity change from 0 to 1024
[  205.220401][ T4360] usb usb6-port1: unable to enumerate USB device
[  205.231137][ T6923] EXT4-fs: Ignoring removed i_version option
[  205.277754][ T6923] EXT4-fs: Ignoring removed bh option
[  205.289617][ T6927] loop9: detected capacity change from 0 to 512
[  205.290597][ T6923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  205.346660][ T6923] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  205.346684][ T6927] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.602: bg 0: block 7: invalid block bitmap
[  205.401761][ T6927] EXT4-fs (loop9): Remounting filesystem read-only
[  205.417008][ T6927] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  205.435258][ T6927] EXT4-fs (loop9): Remounting filesystem read-only
[  205.462519][ T6927] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2925: inode #11: comm syz.9.602: corrupted xattr block 95
[  205.479663][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  205.487905][ T6927] EXT4-fs (loop9): Remounting filesystem read-only
[  205.498347][ T6927] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117)
[  205.551207][ T6927] EXT4-fs (loop9): 1 orphan inode deleted
[  205.578140][ T6927] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  205.687105][ T6026] EXT4-fs (loop9): unmounting filesystem.
[  205.920131][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.8.606'.
[  205.937407][ T6954] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.947043][ T6954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  205.954764][ T6954] IPv6: NLM_F_CREATE should be set when creating new route
[  206.203289][ T4297] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  206.422018][ T4297] usb 10-1: Using ep0 maxpacket: 16
[  206.659601][ T4297] usb 10-1: unable to get BOS descriptor or descriptor too short
[  206.737342][ T4297] usb 10-1: unable to read config index 0 descriptor/start: -71
[  206.792794][  T126] usb 8-1: USB disconnect, device number 16
[  206.828253][ T4297] usb 10-1: can't read configurations, error -71
[  207.017672][ T6968] loop7: detected capacity change from 0 to 2048
[  207.062262][ T6968] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  207.084392][ T6968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.501970][ T5390] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  207.554597][ T5390] UDF-fs: error (device loop7): udf_read_inode: (ino 1317) failed !bh
[  208.141329][ T4316] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.245227][ T4316] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.280182][   T41] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  208.322817][   T41] smsc95xx: probe of 1-1:0.67 failed with error -71
[  208.351307][   T41] usb 1-1: USB disconnect, device number 15
[  208.476689][ T4316] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.531801][  T126] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  208.612832][ T4316] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.825079][ T7026] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  209.202258][  T126] usb 9-1: Using ep0 maxpacket: 32
[  209.210919][  T126] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.253397][  T126] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  209.296976][  T126] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  209.354373][  T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.400718][  T126] usb 9-1: config 0 descriptor??
[  209.536452][  T126] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  209.658684][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  209.671596][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  209.679965][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  209.692122][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  209.700551][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  209.708205][ T7042] netlink: 'syz.9.626': attribute type 4 has an invalid length.
[  209.708659][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  209.769010][ T7038] netlink: 'syz.9.626': attribute type 4 has an invalid length.
[  210.873196][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'.
[  211.031909][  T126] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  211.139693][ T7039] chnl_net:caif_netlink_parms(): no params data found
[  211.231867][  T126] usb 10-1: Using ep0 maxpacket: 32
[  211.239724][  T126] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  211.280177][ T7064] loop5: detected capacity change from 0 to 512
[  211.301031][  T126] usb 10-1: config 0 has no interface number 0
[  211.370738][  T126] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  211.387934][ T7064] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.631: invalid indirect mapped block 256 (level 2)
[  211.443310][  T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.476657][ T7064] EXT4-fs (loop5): Remounting filesystem read-only
[  211.496383][ T7064] EXT4-fs (loop5): 2 truncates cleaned up
[  211.501924][  T126] usb 10-1: Product: syz
[  211.506393][  T126] usb 10-1: Manufacturer: syz
[  211.511110][  T126] usb 10-1: SerialNumber: syz
[  211.521560][ T7064] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  211.540821][  T126] usb 10-1: config 0 descriptor??
[  211.549313][  T126] smsc95xx v2.0.0
[  211.655160][ T7064] nfs4: Unknown parameter '
err'
[  211.679475][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.696927][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.720487][ T7039] device bridge_slave_0 entered promiscuous mode
[  211.744716][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  211.772057][ T4265] Bluetooth: hci3: command 0x0409 tx timeout
[  211.811527][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.818939][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.827625][ T7039] device bridge_slave_1 entered promiscuous mode
[  211.835388][ T7078] netlink: 'syz.0.633': attribute type 4 has an invalid length.
[  211.843423][ T7078] netlink: 17 bytes leftover after parsing attributes in process `syz.0.633'.
[  211.899181][ T7081] loop5: detected capacity change from 0 to 1024
[  211.934675][   T22] usb 9-1: USB disconnect, device number 3
[  211.951896][ T7081] EXT4-fs: Ignoring removed nomblk_io_submit option
[  211.955144][  T126] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  212.011368][  T126] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  212.046914][ T7081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  212.059303][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.077022][ T7087] loop8: detected capacity change from 0 to 512
[  212.258383][ T7087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  212.277682][ T7087] System zones: 1-12
[  212.328737][ T7087] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.635: invalid indirect mapped block 1819239214 (level 1)
[  212.358498][ T7081] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  212.387873][ T7081] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28
[  212.405279][ T7081] EXT4-fs (loop5): This should not happen!! Data will be lost
[  212.405279][ T7081] 
[  212.423926][ T7081] EXT4-fs (loop5): Total free blocks count 0
[  212.439973][ T7081] EXT4-fs (loop5): Free/Dirty block details
[  212.453575][ T7081] EXT4-fs (loop5): free_blocks=68451041280
[  212.466443][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.476510][ T7087] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.635: bg 0: block 361: padding at end of block bitmap is not set
[  212.539673][ T7081] EXT4-fs (loop5): dirty_blocks=32
[  212.550690][ T7087] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  212.581459][ T7081] EXT4-fs (loop5): Block reservation details
[  212.619059][ T7087] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.635: attempt to clear invalid blocks 33619980 len 1
[  212.643947][ T7081] EXT4-fs (loop5): i_reserved_data_blocks=2
[  212.707705][ T7093] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  212.733303][ T7087] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.635: invalid indirect mapped block 1819239214 (level 0)
[  212.748152][ T7039] team0: Port device team_slave_0 added
[  212.762079][ T7087] EXT4-fs (loop8): 1 truncate cleaned up
[  212.767816][ T7087] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  212.869474][ T7039] team0: Port device team_slave_1 added
[  213.070683][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  213.341581][  T126] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  213.466292][  T126] smsc95xx: probe of 10-1:0.67 failed with error -61
[  213.862057][ T4265] Bluetooth: hci3: command 0x041b tx timeout
[  213.880403][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.897560][ T7109] loop8: detected capacity change from 0 to 2048
[  213.904577][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.017635][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.067756][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.114205][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.172768][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.219357][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.525303][ T4316] device hsr_slave_0 left promiscuous mode
[  214.545166][ T4316] device hsr_slave_1 left promiscuous mode
[  214.554135][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.591449][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.619667][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.654333][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.662524][ T4297] usb 10-1: USB disconnect, device number 5
[  214.702510][ T4316] device bridge_slave_1 left promiscuous mode
[  214.708776][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.739875][ T4316] device bridge_slave_0 left promiscuous mode
[  214.754690][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.827819][ T4316] device veth1_macvtap left promiscuous mode
[  214.834797][ T4316] device veth0_macvtap left promiscuous mode
[  214.849461][ T4316] device veth1_vlan left promiscuous mode
[  214.855638][ T4316] device veth0_vlan left promiscuous mode
[  214.911915][   T22] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  215.201754][   T22] usb 9-1: Using ep0 maxpacket: 32
[  215.209586][   T22] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.226376][   T22] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  215.248748][   T22] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  215.259036][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.287001][   T22] usb 9-1: config 0 descriptor??
[  215.308115][   T22] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  216.275886][ T4265] Bluetooth: hci3: command 0x040f tx timeout
[  216.611394][ T4316] team0 (unregistering): Port device team_slave_1 removed
[  216.690022][ T4316] team0 (unregistering): Port device team_slave_0 removed
[  216.868439][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.049927][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.697616][ T4297] usb 9-1: USB disconnect, device number 4
[  217.940437][   T22] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  218.333630][ T4265] Bluetooth: hci3: command 0x0419 tx timeout
[  218.352017][   T22] usb 10-1: Using ep0 maxpacket: 32
[  218.435862][   T22] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  218.712976][   T22] usb 10-1: config 0 has no interface number 0
[  218.755983][   T22] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  218.765322][   T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.773996][   T22] usb 10-1: Product: syz
[  218.778373][   T22] usb 10-1: Manufacturer: syz
[  218.783474][   T22] usb 10-1: SerialNumber: syz
[  218.793387][   T22] usb 10-1: config 0 descriptor??
[  218.800501][   T22] smsc95xx v2.0.0
[  219.281267][ T4316] bond0 (unregistering): Released all slaves
[  219.354359][   T22] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  219.365549][   T22] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  219.391495][ T7039] device hsr_slave_0 entered promiscuous mode
[  219.403051][ T7039] device hsr_slave_1 entered promiscuous mode
[  219.409634][ T7039] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.417609][ T7039] Cannot create hsr debugfs directory
[  219.736069][ T7199] loop5: detected capacity change from 0 to 512
[  219.951294][ T7199] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.660: invalid indirect mapped block 256 (level 2)
[  219.996327][ T7199] EXT4-fs (loop5): 2 truncates cleaned up
[  220.007260][ T7199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  220.216519][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  220.235412][ T5930] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  220.461826][ T5930] usb 9-1: Using ep0 maxpacket: 8
[  220.470059][ T5930] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.501164][ T5930] usb 9-1: config 0 has no interfaces?
[  220.509744][ T5930] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  220.531942][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.581491][ T5930] usb 9-1: Product: syz
[  220.586700][   T22] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  220.601769][ T5930] usb 9-1: Manufacturer: syz
[  220.606475][ T5930] usb 9-1: SerialNumber: syz
[  220.611401][   T22] smsc95xx: probe of 10-1:0.67 failed with error -61
[  220.646148][ T5930] usb 9-1: config 0 descriptor??
[  220.915420][ T4297] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  221.111856][ T4297] usb 6-1: Using ep0 maxpacket: 32
[  221.123954][ T4297] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.143240][ T4297] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  221.162673][ T4297] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  221.176828][ T4297] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.248581][ T4297] usb 6-1: config 0 descriptor??
[  221.343604][ T7229] input: syz1 as /devices/virtual/input/input14
[  221.612616][ T4269] Bluetooth: hci4: command 0x0406 tx timeout
[  222.015730][ T4297] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  222.042116][   T22] usb 10-1: USB disconnect, device number 6
[  223.469737][ T4330] usb 9-1: USB disconnect, device number 5
[  223.566971][ T7039] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  223.601402][ T7039] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  223.697718][   T41] usb 6-1: USB disconnect, device number 18
[  224.539442][ T7039] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  224.593806][ T7265] loop9: detected capacity change from 0 to 128
[  224.615301][ T7039] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  224.661395][ T7267] usb usb1: usbfs: process 7267 (syz.5.673) did not claim interface 0 before use
[  225.147445][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.168710][ T7039] 8021q: adding VLAN 0 to HW filter on device team0
[  225.195346][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  225.263066][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.297082][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  225.564098][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.892921][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.900092][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.033058][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  226.088680][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  226.117732][ T7289] loop8: detected capacity change from 0 to 1024
[  226.132376][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.139554][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.174314][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.185686][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.196965][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.209050][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.261199][   T26] audit: type=1800 audit(1734509573.374:103): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.679" name="file2" dev="loop8" ino=22 res=0 errno=0
[  226.269734][ T7298] loop5: detected capacity change from 0 to 8
[  226.360455][ T7298] squashfs: Unknown parameter 'Í)å¨íúþµÎ^õÀI5ç»åÆÛŸ@ÏIãø}õ$¢YãÔŒL8üªüK&ô+~}Õ©¶¢‘J\°ø$êºÑP·µnHš\IÄ@üh»€I`yñ¹
ÎønNÓZŠJ'æl+µRæÏŤ)>ùOC'
[  226.460683][ T4851] hfsplus: b-tree write err: -5, ino 4
[  226.499371][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  226.510778][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.561922][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.613165][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.622465][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.632373][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.488757][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.519946][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.615156][ T7314] device bridge0 entered promiscuous mode
[  227.686973][ T7313] device bridge0 left promiscuous mode
[  228.252130][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.343159][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  228.350582][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.174749][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.215985][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  229.340385][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  229.370948][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  229.418612][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.484796][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.574195][ T7039] device veth0_vlan entered promiscuous mode
[  229.678435][ T7355] loop8: detected capacity change from 0 to 512
[  229.689656][ T7039] device veth1_vlan entered promiscuous mode
[  229.826245][ T7355] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  229.935109][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  229.953172][ T7355] EXT4-fs (loop8): invalid journal inode
[  229.994457][ T7355] EXT4-fs (loop8): can't get journal size
[  230.248386][ T7355] EXT4-fs (loop8): 1 truncate cleaned up
[  230.300443][ T7355] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  230.672830][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  230.704275][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.717581][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  230.776322][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.789243][ T7368] loop8: detected capacity change from 0 to 128
[  230.820289][ T7039] device veth0_macvtap entered promiscuous mode
[  230.830674][ T7368] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  230.882176][ T7368] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  230.921540][ T7039] device veth1_macvtap entered promiscuous mode
[  232.302547][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.381447][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.426898][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.531394][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.558491][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.569219][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.579162][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.589666][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.602964][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.611625][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  232.616806][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.629522][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.639868][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.650724][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.661225][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.677082][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.687456][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.703017][  T126] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  232.709351][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.728248][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.736371][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.754520][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.777786][ T7396] loop8: detected capacity change from 0 to 256
[  232.788467][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.806072][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.821757][ T4300] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  232.831490][ T7039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.837463][ T7396] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  232.851378][ T7039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.861082][ T7039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.880552][ T7039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.916978][ T7396] exFAT-fs (loop8): hint_cluster is invalid (17)
[  232.929965][   T26] audit: type=1800 audit(1734509580.044:104): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.702" name="file1" dev="loop8" ino=1048643 res=0 errno=0
[  232.934386][  T126] usb 10-1: config 0 has an invalid interface number: 120 but max is 0
[  232.975000][  T126] usb 10-1: config 0 has no interface number 0
[  232.988372][ T7396] exFAT-fs (loop8): error, broken FAT chain.
[  232.990083][  T126] usb 10-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 65535, setting to 64
[  233.002043][ T4300] usb 6-1: Using ep0 maxpacket: 32
[  233.017628][ T7396] exFAT-fs (loop8): Filesystem has been set read-only
[  233.024674][  T126] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  233.025572][ T4300] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  233.041713][  T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.053371][ T7396] exFAT-fs (loop8): error, failed to bmap (inode : ffff888070b03560 iblock : 8, err : -5)
[  233.073436][  T126] usb 10-1: config 0 descriptor??
[  233.083150][ T7385] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  233.111300][  T126] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.120/input/input15
[  233.228093][ T4300] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  233.237728][ T4300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.258393][ T4300] usb 6-1: config 0 descriptor??
[  233.266172][ T4300] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  233.290680][ T4847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.763853][ T4847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.037885][  T126] usb 10-1: USB disconnect, device number 7
[  234.043973][    C1] usbtouchscreen 10-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19
[  234.067681][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.113427][ T4835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.157215][ T4835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.171278][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.388107][ T7427] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  235.735349][ T5930] usb 6-1: USB disconnect, device number 19
[  236.200973][ T7467] loop9: detected capacity change from 0 to 4096
[  236.311941][   T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  236.516383][   T14] usb 4-1: Using ep0 maxpacket: 16
[  236.550185][ T7467] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  236.578412][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.739643][ T7467] UDF-fs: Scanning with blocksize 512 failed
[  236.809388][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.882306][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  236.904101][   T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  236.915495][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.960395][ T7467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.989385][   T14] usb 4-1: config 0 descriptor??
[  237.012993][ T7467] UDF-fs: error (device loop9): udf_read_inode: (ino 1328) failed !bh
[  237.031520][ T7467] UDF-fs: error (device loop9): udf_fill_super: Error in udf_iget, block=32, partition=0
[  237.458139][   T14] HID 045e:07da: Invalid code 65791 type 1
[  237.495441][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input16
[  237.557202][   T14] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  237.610948][ T7500] loop9: detected capacity change from 0 to 4096
[  237.620958][ T7500] EXT4-fs: Ignoring removed nomblk_io_submit option
[  237.694216][   T14] usb 4-1: USB disconnect, device number 4
[  237.733360][ T7500] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  238.611963][   T22] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  238.632629][  T126] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  238.839904][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.862026][  T126] usb 10-1: Using ep0 maxpacket: 32
[  238.884384][  T126] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  239.016844][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.054844][  T126] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  239.071787][   T22] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  239.108737][  T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.138352][   T22] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  239.214655][  T126] usb 10-1: config 0 descriptor??
[  239.372390][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.477121][  T126] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  239.528027][ T7556] loop3: detected capacity change from 0 to 1024
[  239.569868][   T22] usb 9-1: config 0 descriptor??
[  239.609546][ T7556] EXT4-fs: Ignoring removed orlov option
[  239.666312][ T7556] EXT4-fs: Ignoring removed nomblk_io_submit option
[  239.789574][ T7556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  240.354853][ T7039] EXT4-fs (loop3): unmounting filesystem.
[  240.828929][   T22] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  240.852263][   T22] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  240.863672][   T22] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  240.916648][ T7590] loop5: detected capacity change from 0 to 512
[  240.977617][ T7590] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  241.049759][ T7590] EXT4-fs (loop5): 1 truncate cleaned up
[  241.085744][   T14] usb 9-1: USB disconnect, device number 6
[  241.100224][ T7590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  241.229723][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  241.804528][ T7627] loop3: detected capacity change from 0 to 1024
[  241.812598][ T7627] EXT4-fs: Ignoring removed nobh option
[  241.834428][ T7627] EXT4-fs: Ignoring removed bh option
[  241.840844][ T7627] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  241.893126][ T7627] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  241.930685][ T4302] usb 10-1: USB disconnect, device number 8
[  242.026902][ T7039] EXT4-fs (loop3): unmounting filesystem.
[  242.032907][ T4299] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  242.226316][ T4299] usb 9-1: Using ep0 maxpacket: 32
[  242.245528][ T4299] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  242.279429][ T4299] usb 9-1: config 0 has no interface number 0
[  242.303798][ T4299] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  242.338646][ T4299] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.367401][ T4299] usb 9-1: Product: syz
[  242.393590][ T4299] usb 9-1: Manufacturer: syz
[  242.408481][ T4299] usb 9-1: SerialNumber: syz
[  242.438062][ T4299] usb 9-1: config 0 descriptor??
[  243.452876][ T4299] smsc95xx v2.0.0
[  243.626649][ T7660] loop5: detected capacity change from 0 to 512
[  243.823188][ T7667] loop3: detected capacity change from 0 to 512
[  243.830403][ T7667] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  243.830561][ T7660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  243.850095][ T4299] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  243.851936][ T7660] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.861533][ T4299] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  243.980826][ T7660] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  244.019720][ T7660] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  244.042789][ T7660] EXT4-fs error (device loop5): ext4_acquire_dquot:6794: comm syz.5.742: Failed to acquire dquot type 0
[  244.248609][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  244.492212][ T4302] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  244.631085][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.751'.
[  244.701771][ T4302] usb 4-1: Using ep0 maxpacket: 32
[  244.708819][ T4302] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.751813][ T4302] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  244.771220][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.793686][ T4302] usb 4-1: config 0 descriptor??
[  244.804250][ T4302] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  245.731873][ T4299] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  245.757025][ T4299] smsc95xx: probe of 9-1:0.67 failed with error -61
[  245.824993][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'.
[  245.935495][ T4299] usb 9-1: USB disconnect, device number 7
[  246.055044][ T7717] loop5: detected capacity change from 0 to 8
[  246.113915][ T7717] SQUASHFS error: Failed to read block 0x2d7: -5
[  246.120671][ T7717] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  246.478343][ T7731] loop5: detected capacity change from 0 to 1024
[  246.982310][ T7731] EXT4-fs: Ignoring removed nobh option
[  247.044846][ T7731] EXT4-fs: Ignoring removed bh option
[  247.145790][ T7731] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  247.290630][   T14] usb 4-1: USB disconnect, device number 5
[  247.294167][ T7731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  247.419608][ T7743] loop8: detected capacity change from 0 to 512
[  247.465096][ T7743] EXT4-fs: inline encryption not supported
[  247.482028][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'.
[  247.539382][ T7743] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  247.620690][ T7743] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.641234][ T7743] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  247.656362][ T7743] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz.8.765: mark_inode_dirty error
[  247.708965][ T7743] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  247.822237][ T7753] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  248.136702][ T7754] loop3: detected capacity change from 0 to 4096
[  248.146251][ T7754] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.436616][ T7753] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz.8.765: mark_inode_dirty error
[  248.609222][ T7753] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  248.708199][ T7753] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.765: mark_inode_dirty error
[  248.740177][ T7753] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  248.764311][ T7754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  248.846812][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  248.945704][ T7753] EXT4-fs error (device loop8): ext4_dirty_inode:6089: inode #2: comm syz.8.765: mark_inode_dirty error
[  248.986916][ T7755] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #2: comm syz.8.765: corrupted inode contents
[  249.299397][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  249.926328][ T7786] loop8: detected capacity change from 0 to 256
[  250.047020][ T7786] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  250.152289][ T7786] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  250.256995][ T7786] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  250.301998][   T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  250.471978][   T26] audit: type=1804 audit(1734509597.584:105): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.776" name="/newroot/93/file0/file1" dev="loop8" ino=1048647 res=1 errno=0
[  250.521747][   T22] usb 6-1: Using ep0 maxpacket: 32
[  250.529828][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.604880][   T22] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  250.651747][   T26] audit: type=1804 audit(1734509597.624:106): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.776" name="/newroot/93/file0/file1" dev="loop8" ino=1048647 res=1 errno=0
[  250.712144][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.779255][   T22] usb 6-1: config 0 descriptor??
[  250.834754][   T22] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  251.160385][ T7801] loop8: detected capacity change from 0 to 512
[  251.184720][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  251.213594][ T7801] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  251.233266][ T7801] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.370419][ T4835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.401869][   T22] usb 4-1: Using ep0 maxpacket: 16
[  251.410206][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.456596][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.502183][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  251.530450][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  251.532061][   T22] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  251.554911][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.594364][   T22] usb 4-1: config 0 descriptor??
[  251.636405][ T4835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.843475][ T4835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.025342][ T4835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.040119][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x7
[  252.057741][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.083031][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.105521][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.126234][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.151022][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.170196][ T7829] loop8: detected capacity change from 0 to 128
[  252.173152][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.198194][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.214613][   T22] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  252.230527][   T22] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[  252.282956][   T22] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  252.310515][   T22] microsoft 0003:045E:07DA.0007: no inputs found
[  252.315277][ T7829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  252.323773][   T22] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[  252.337242][   T22] usb 4-1: USB disconnect, device number 6
[  252.410464][ T7829] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  252.521120][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  252.535605][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  252.547977][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  252.618452][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  252.628032][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  252.637660][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  252.645674][ T7842] binder: BINDER_SET_CONTEXT_MGR already set
[  252.670799][ T7842] binder: 7841:7842 ioctl 4018620d 20000040 returned -16
[  252.799422][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  253.234449][   T14] usb 6-1: USB disconnect, device number 20
[  254.874765][ T7873] loop8: detected capacity change from 0 to 1024
[  254.952283][ T7873] EXT4-fs: Ignoring removed i_version option
[  254.958333][ T7873] EXT4-fs: inline encryption not supported
[  255.093435][ T7839] chnl_net:caif_netlink_parms(): no params data found
[  255.112751][ T7873] EXT4-fs (loop8): Test dummy encryption mode enabled
[  255.255829][ T7873] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  255.533206][ T7839] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.592392][ T7839] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.603541][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.606117][ T4269] Bluetooth: hci0: command 0x0409 tx timeout
[  255.609846][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.641898][ T7839] device bridge_slave_0 entered promiscuous mode
[  255.665110][ T7839] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.673782][ T7839] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.682333][ T7839] device bridge_slave_1 entered promiscuous mode
[  255.761030][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  255.960373][ T7839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.996410][ T7839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.041751][ T5930] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  256.130875][ T7839] team0: Port device team_slave_0 added
[  256.156484][ T7839] team0: Port device team_slave_1 added
[  256.204191][ T4297] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  256.228401][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.242450][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.285029][ T7839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.369771][ T7839] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.384092][ T7839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.389687][ T5930] usb 6-1: Using ep0 maxpacket: 8
[  256.410844][ T4297] usb 4-1: Using ep0 maxpacket: 32
[  256.481789][ T5930] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  256.511232][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.520531][ T5930] usb 6-1: Product: syz
[  256.577295][ T5930] usb 6-1: Manufacturer: syz
[  256.582619][ T5930] usb 6-1: SerialNumber: syz
[  256.604897][ T5930] usb 6-1: config 0 descriptor??
[  256.639091][ T7839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.012963][ T5930] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  257.029335][ T7839] device hsr_slave_0 entered promiscuous mode
[  257.043659][ T7839] device hsr_slave_1 entered promiscuous mode
[  257.044178][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.062788][ T7839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.066607][ T4297] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  257.073706][ T7839] Cannot create hsr debugfs directory
[  257.097025][ T7908] 9pnet_fd: p9_fd_create_tcp (7908): problem connecting socket to 127.0.0.1
[  257.106015][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.115811][ T4297] usb 4-1: config 0 descriptor??
[  257.127716][ T4297] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  257.272735][ T5930] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[  257.377850][ T7910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  257.691776][ T4269] Bluetooth: hci0: command 0x041b tx timeout
[  257.837199][ T4835] device hsr_slave_0 left promiscuous mode
[  257.845157][ T4835] device hsr_slave_1 left promiscuous mode
[  257.851436][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.859214][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.870529][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.878684][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.886677][ T4835] device bridge_slave_1 left promiscuous mode
[  257.895059][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.904449][ T4835] device bridge_slave_0 left promiscuous mode
[  257.910654][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.935311][ T4835] device veth1_macvtap left promiscuous mode
[  257.941334][ T4835] device veth0_macvtap left promiscuous mode
[  257.947742][ T4835] device veth1_vlan left promiscuous mode
[  257.954112][ T4835] device veth0_vlan left promiscuous mode
[  258.598766][ T4835] team0 (unregistering): Port device team_slave_1 removed
[  258.610814][ T5930] usb 6-1: USB disconnect, device number 21
[  258.703587][ T7931] loop8: detected capacity change from 0 to 1024
[  258.743269][ T7931] EXT4-fs: Ignoring removed nobh option
[  258.812981][ T4835] team0 (unregistering): Port device team_slave_0 removed
[  258.833437][ T7931] EXT4-fs: Ignoring removed bh option
[  258.919147][ T7931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.988354][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.019618][ T7931] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  259.041746][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.800429][ T4269] Bluetooth: hci0: command 0x040f tx timeout
[  259.892917][ T4299] usb 4-1: USB disconnect, device number 7
[  260.212541][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  261.852513][ T4269] Bluetooth: hci0: command 0x0419 tx timeout
[  261.982658][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  262.040785][ T4835] bond0 (unregistering): Released all slaves
[  262.182001][ T5930] usb 4-1: Using ep0 maxpacket: 8
[  262.298933][ T4298] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  262.310638][ T5930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  262.321423][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.329758][ T5930] usb 4-1: Product: syz
[  262.336604][ T5930] usb 4-1: Manufacturer: syz
[  262.341261][ T5930] usb 4-1: SerialNumber: syz
[  262.392620][ T5930] usb 4-1: config 0 descriptor??
[  262.511851][ T4298] usb 9-1: Using ep0 maxpacket: 32
[  262.533349][ T4298] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.567190][ T4298] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  262.595241][ T4298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.626738][ T5930] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  262.645054][ T7839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  262.649785][ T4298] usb 9-1: config 0 descriptor??
[  262.682740][ T7839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  262.684090][ T4298] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  262.720243][ T7839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  262.787787][ T7839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  262.839742][ T5930] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  262.988763][ T7975] loop5: detected capacity change from 0 to 1024
[  263.026409][ T7839] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.043814][ T7975] EXT4-fs: Ignoring removed nobh option
[  263.092738][ T7975] EXT4-fs: Ignoring removed bh option
[  263.101384][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  263.110640][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  263.119576][ T7975] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.135769][ T7839] 8021q: adding VLAN 0 to HW filter on device team0
[  263.147697][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  263.157350][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  263.166966][ T4835] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.174144][ T4835] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.205822][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  263.215133][ T7975] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  263.230901][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  263.268697][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  263.291313][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.298494][ T4835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.347919][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  263.394567][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  263.415360][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  263.431426][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  263.473885][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  263.485100][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  263.496781][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  263.506268][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  263.515229][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  263.530803][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  263.541871][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  263.548677][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  263.560194][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.038795][ T4298] usb 4-1: USB disconnect, device number 8
[  265.050630][   T14] usb 9-1: USB disconnect, device number 8
[  265.070778][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  265.093762][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  265.137128][ T7839] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.290737][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  265.322410][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  265.365491][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  265.384259][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  265.417090][ T8021] loop7: detected capacity change from 0 to 3993
[  265.437093][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  265.445072][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.454304][    C0] buffer_io_error: 8417 callbacks suppressed
[  265.454317][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.468914][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.478133][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.488089][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.497296][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.516149][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  265.542599][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.551823][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.559844][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.569182][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.579496][ T7839] device veth0_vlan entered promiscuous mode
[  265.607553][ T7839] device veth1_vlan entered promiscuous mode
[  265.615505][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.624756][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.645280][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.654513][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.709092][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.715052][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  265.718376][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.733786][ T8021] ldm_validate_partition_table(): Disk read failed.
[  265.747063][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.756325][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.768693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  265.786077][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  265.795387][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  265.811828][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  265.824943][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  265.838505][ T8021] Dev loop7: unable to read RDB block 0
[  265.851400][ T7839] device veth0_macvtap entered promiscuous mode
[  265.860730][ T8021]  loop7: unable to read partition table
[  265.875286][ T7839] device veth1_macvtap entered promiscuous mode
[  265.893792][ T8021] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5)
[  265.924138][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.937139][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  265.972621][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.998596][ T8033] loop8: detected capacity change from 0 to 1024
[  266.009800][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.045374][ T8033] EXT4-fs: Ignoring removed nobh option
[  266.058832][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.079370][ T8033] EXT4-fs: Ignoring removed bh option
[  266.087300][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.107135][ T8033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.120964][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.149874][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.177992][ T8033] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  266.190021][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.222168][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.250764][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.293304][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  266.308657][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.329472][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.371757][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.398125][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.434328][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.465845][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.540381][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.570362][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.607514][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.628613][ T7839] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.656762][ T7839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.678596][ T7839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.710430][ T7839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.751830][ T7839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.806438][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.834622][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  266.862175][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  267.744417][ T4831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.796896][ T4831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.845577][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.859403][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  267.897218][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.897499][ T8057] loop8: detected capacity change from 0 to 1768
[  267.925820][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  267.991765][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  268.181725][ T5930] usb 4-1: Using ep0 maxpacket: 8
[  268.185874][ T5930] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  268.185905][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.185928][ T5930] usb 4-1: Product: syz
[  268.185945][ T5930] usb 4-1: Manufacturer: syz
[  268.185962][ T5930] usb 4-1: SerialNumber: syz
[  268.188201][ T5930] usb 4-1: config 0 descriptor??
[  268.396009][ T5930] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  269.058836][ T8079] loop5: detected capacity change from 0 to 764
[  269.073268][ T8079] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  269.254463][ T5930] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  269.301771][  T126] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  269.400614][ T8092] loop5: detected capacity change from 0 to 1024
[  269.470242][ T8092] EXT4-fs: Ignoring removed nobh option
[  269.477951][   T26] audit: type=1326 audit(1734509616.594:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.1.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25fd85d29 code=0x7ffc0000
[  269.503564][  T126] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  269.517616][  T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.531731][ T8092] EXT4-fs: Ignoring removed bh option
[  269.550927][  T126] usb 9-1: config 0 descriptor??
[  269.570292][   T26] audit: type=1326 audit(1734509616.614:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.1.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd25fd85d29 code=0x7ffc0000
[  269.576835][  T126] cp210x 9-1:0.0: cp210x converter detected
[  269.594060][ T8092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  269.650535][   T26] audit: type=1326 audit(1734509616.614:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.1.855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25fd85d29 code=0x7ffc0000
[  269.818586][ T8092] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  270.299554][  T126] usb 9-1: cp210x converter now attached to ttyUSB0
[  270.584011][  T126] usb 9-1: USB disconnect, device number 9
[  270.630467][  T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  270.651481][  T126] cp210x 9-1:0.0: device disconnected
[  270.707431][ T4360] usb 4-1: USB disconnect, device number 9
[  270.968670][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  272.502096][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  273.231741][ T4297] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  273.394695][ T8160] loop5: detected capacity change from 0 to 1024
[  273.421851][ T4297] usb 9-1: Using ep0 maxpacket: 8
[  273.432179][ T4297] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  273.461552][ T4297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.480063][ T4297] usb 9-1: Product: syz
[  273.484857][ T4297] usb 9-1: Manufacturer: syz
[  273.493603][ T4297] usb 9-1: SerialNumber: syz
[  273.523189][ T4297] usb 9-1: config 0 descriptor??
[  273.601866][ T4360] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  273.624393][ T4491] hfsplus: b-tree write err: -5, ino 3
[  273.733800][ T4297] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  273.813255][ T4360] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.837596][ T4360] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  273.851531][ T4360] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 25902, setting to 1024
[  273.877337][ T4360] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  273.945181][ T4297] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32
[  274.085356][ T4360] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.111733][ T4360] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.119844][ T4360] usb 10-1: Product: syz
[  274.126585][ T4360] usb 10-1: Manufacturer: syz
[  274.131297][ T4360] usb 10-1: SerialNumber: syz
[  274.687887][ T4360] usb 10-1: 0:2 : does not exist
[  274.907838][ T4360] usb 10-1: USB disconnect, device number 9
[  275.836728][ T4360] usb 9-1: USB disconnect, device number 10
[  275.876117][ T4245] udevd[4245]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.100102][ T8225] loop8: detected capacity change from 0 to 1024
[  277.151434][ T8225] EXT4-fs: Ignoring removed nobh option
[  277.180827][ T8225] EXT4-fs: Ignoring removed bh option
[  277.257762][ T8225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  277.450895][ T8225] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  278.014381][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  278.437503][  T126] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  278.641745][  T126] usb 4-1: Using ep0 maxpacket: 8
[  278.666009][  T126] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  278.724464][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.824086][  T126] usb 4-1: Product: syz
[  278.844225][  T126] usb 4-1: Manufacturer: syz
[  278.899872][  T126] usb 4-1: SerialNumber: syz
[  278.970508][  T126] usb 4-1: config 0 descriptor??
[  279.141996][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  279.198056][ T8284] loop8: detected capacity change from 0 to 128
[  279.235807][  T126] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  279.268865][ T8284] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  279.339137][ T8284] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  279.458529][  T126] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  279.471733][   T14] usb 2-1: Using ep0 maxpacket: 32
[  279.478420][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.500435][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.615273][   T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  279.654549][ T8284] fscrypt: loop8: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14
[  279.804991][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.053955][   T14] usb 2-1: config 0 descriptor??
[  280.329645][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  280.630057][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  280.642374][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  280.649702][    C0] raw-gadget.1 gadget.1: ignoring, device is not running
[  280.656886][   T14] usbhid 2-1:0.0: can't add hid device: -32
[  280.662912][   T14] usbhid: probe of 2-1:0.0 failed with error -32
[  280.668064][ T8313] loop8: detected capacity change from 0 to 1024
[  280.678111][   T14] usb 2-1: USB disconnect, device number 3
[  280.744388][ T8313] EXT4-fs: Ignoring removed nobh option
[  280.774030][ T8313] EXT4-fs: Ignoring removed bh option
[  280.790245][ T8313] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  280.882408][ T8313] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  281.248271][ T4302] usb 4-1: USB disconnect, device number 10
[  281.321338][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  282.267053][ T8355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  282.298306][ T8355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  282.327893][ T8355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  282.394112][ T8355] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  283.034034][ T8378] loop8: detected capacity change from 0 to 1024
[  283.050933][ T8378] EXT4-fs: Ignoring removed nobh option
[  283.059760][ T8378] EXT4-fs: Ignoring removed bh option
[  283.074646][ T8378] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.117078][ T8378] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  283.127025][ T4269] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1
[  283.221817][   T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  283.340124][ T8378] EXT4-fs (loop8): unmounting filesystem.
[  283.422059][   T14] usb 4-1: Using ep0 maxpacket: 8
[  283.431142][   T14] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  283.481879][ T4297] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  283.489634][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.499094][   T14] usb 4-1: Product: syz
[  283.511735][   T14] usb 4-1: Manufacturer: syz
[  283.516386][   T14] usb 4-1: SerialNumber: syz
[  283.543830][   T14] usb 4-1: config 0 descriptor??
[  283.551192][ T8395] mmap: syz.5.931 (8395) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  283.671743][ T4297] usb 10-1: Using ep0 maxpacket: 32
[  283.678700][ T4297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.699220][ T4297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.715450][ T4297] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  283.743004][ T4297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.756059][   T14] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  283.778773][ T4297] usb 10-1: config 0 descriptor??
[  283.980637][   T14] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  284.822344][ T4297] usbhid 10-1:0.0: can't add hid device: -71
[  284.828540][ T4297] usbhid: probe of 10-1:0.0 failed with error -71
[  284.848158][ T4297] usb 10-1: USB disconnect, device number 10
[  286.178361][ T4360] usb 4-1: USB disconnect, device number 11
[  286.300785][ T8438] loop5: detected capacity change from 0 to 512
[  286.573637][ T8438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  286.614869][ T8438] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.721899][ T4360] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  286.775318][ T4676] EXT4-fs (loop5): unmounting filesystem.
[  286.921884][ T4360] usb 2-1: Using ep0 maxpacket: 32
[  286.934810][ T4360] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.977805][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.020420][ T4360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.037529][ T8454] IPVS: ovf: UDP 0.0.0.0:0 - no destination available
[  287.049522][ T4360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  287.091565][ T4360] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  287.118963][ T4360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.150043][ T4360] usb 2-1: config 0 descriptor??
[  288.364165][ T4360] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[  288.377522][ T4360] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[  288.385220][ T4360] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[  288.392628][ T4360] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[  288.399529][ T4360] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[  288.420916][ T4360] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0
[  288.481879][ T4360] usb 2-1: USB disconnect, device number 4
[  288.555269][ T8435] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.563974][ T8435] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.642837][ T8474] serio: Serial port pts0
[  288.646326][   T14] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  288.841877][   T14] usb 4-1: Using ep0 maxpacket: 16
[  288.851335][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.864469][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.879831][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  288.893281][   T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  288.911755][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.937202][   T14] usb 4-1: config 0 descriptor??
[  289.287515][ T5930] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  289.361422][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.432255][ T8435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.481803][ T5930] usb 9-1: Using ep0 maxpacket: 32
[  289.493109][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.510525][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.526396][ T5930] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  289.539758][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.554188][   T14] usbhid 4-1:0.0: can't add hid device: -71
[  289.560207][   T14] usbhid: probe of 4-1:0.0 failed with error -71
[  289.585570][ T5930] usb 9-1: config 0 descriptor??
[  289.769398][   T14] usb 4-1: USB disconnect, device number 12
[  290.047950][ T5930] usbhid 9-1:0.0: can't add hid device: -71
[  290.063346][ T5930] usbhid: probe of 9-1:0.0 failed with error -71
[  290.242535][ T5930] usb 9-1: USB disconnect, device number 11
[  290.658869][ T8493] loop8: detected capacity change from 0 to 512
[  290.688457][ T8493] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  290.719171][ T8493] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  290.748886][ T8493] EXT4-fs (loop8): 1 truncate cleaned up
[  290.754764][ T8493] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  290.838797][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  290.925870][ T8435] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.984758][ T8435] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  290.995153][ T8435] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.005353][ T8435] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  291.378227][ T8509] loop8: detected capacity change from 0 to 4096
[  291.594436][ T8509] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  291.816533][ T8523] loop5: detected capacity change from 0 to 512
[  291.885595][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  291.985516][ T4245] blk_print_req_error: 8 callbacks suppressed
[  291.985535][ T4245] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  292.049495][ T8517] loop5: detected capacity change from 0 to 256
[  292.058675][ T8517] exfat: Bad value for 'uid'
[  292.294794][ T8539] bridge0: port 3(ip6gretap0) entered blocking state
[  292.334657][ T8539] bridge0: port 3(ip6gretap0) entered disabled state
[  292.364277][ T8539] device ip6gretap0 entered promiscuous mode
[  292.404002][ T8539] bridge0: port 3(ip6gretap0) entered blocking state
[  292.412195][ T8539] bridge0: port 3(ip6gretap0) entered forwarding state
[  292.547342][   T22] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  292.555073][ T5930] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  292.673822][ T8558] tipc: Can't bind to reserved service type 1
[  292.761822][   T22] usb 4-1: Using ep0 maxpacket: 32
[  292.767213][ T5930] usb 9-1: Using ep0 maxpacket: 16
[  292.781569][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.799412][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.824545][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.838779][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.850736][ T5930] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  292.864105][   T22] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  292.873795][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.882564][ T5930] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  292.901108][   T22] usb 4-1: config 0 descriptor??
[  292.906575][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.929865][ T5930] usb 9-1: config 0 descriptor??
[  294.019288][   T22] usbhid 4-1:0.0: can't add hid device: -71
[  294.031859][   T22] usbhid: probe of 4-1:0.0 failed with error -71
[  294.057232][   T22] usb 4-1: USB disconnect, device number 13
[  294.251987][   T26] audit: type=1326 audit(1734509641.344:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.9.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb802185d29 code=0x7ffc0000
[  294.331868][ T5930] usbhid 9-1:0.0: can't add hid device: -71
[  294.345916][ T5930] usbhid: probe of 9-1:0.0 failed with error -71
[  294.360720][ T5930] usb 9-1: USB disconnect, device number 12
[  294.386718][   T26] audit: type=1326 audit(1734509641.354:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.9.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb802185d29 code=0x7ffc0000
[  295.201963][   T26] audit: type=1326 audit(1734509641.354:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.9.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb802185d29 code=0x7ffc0000
[  295.322158][   T26] audit: type=1326 audit(1734509641.354:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8581 comm="syz.9.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb802185d29 code=0x7ffc0000
[  298.614191][ T8499] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  298.658208][   T22] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  298.811993][ T8499] usb 4-1: Using ep0 maxpacket: 16
[  298.858753][ T8499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.031330][   T22] usb 9-1: Using ep0 maxpacket: 32
[  299.050315][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.063893][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.073799][   T22] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  299.081946][ T8499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.089286][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.107917][   T22] usb 9-1: config 0 descriptor??
[  299.312988][ T8499] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  299.336112][ T8499] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  299.345491][ T8499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.492623][ T8499] usb 4-1: config 0 descriptor??
[  300.299823][   T22] usbhid 9-1:0.0: can't add hid device: -71
[  300.316387][   T22] usbhid: probe of 9-1:0.0 failed with error -71
[  300.353545][   T22] usb 9-1: USB disconnect, device number 13
[  300.407875][ T8499] usbhid 4-1:0.0: can't add hid device: -71
[  300.414669][ T8499] usbhid: probe of 4-1:0.0 failed with error -71
[  300.441142][ T8499] usb 4-1: USB disconnect, device number 14
[  301.812956][ T4330] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  302.043445][ T4330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  302.059153][ T8693] serio: Serial port ptm0
[  302.071024][ T4330] usb 4-1: config 1 has no interface number 0
[  302.088412][ T4330] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.116779][ T4330] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  302.137788][ T4330] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 65535, setting to 1024
[  302.184893][ T4330] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  302.228636][ T4330] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  302.275540][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.297420][ T4330] usb 4-1: Product: syz
[  302.301624][ T4330] usb 4-1: Manufacturer: syz
[  302.320761][ T4330] usb 4-1: SerialNumber: syz
[  302.667968][ T8675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  303.177461][ T8716] loop8: detected capacity change from 0 to 256
[  303.208086][ T8716] exfat: Deprecated parameter 'utf8'
[  303.245886][ T8716] exfat: Unknown parameter 'zero_size_dir'
[  303.391764][ T8500] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  303.602006][ T8500] usb 10-1: Using ep0 maxpacket: 16
[  303.609687][ T8500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.633174][ T8500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.692728][ T8500] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  303.707368][ T8675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  303.722647][ T8500] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  303.733934][ T8500] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.760185][ T8500] usb 10-1: config 0 descriptor??
[  303.771205][ T4330] cdc_ncm 4-1:1.1: bind() failure
[  304.652001][   T22] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  304.998699][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.016493][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.043848][   T22] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  305.134107][   T22] usb 9-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  305.176234][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.240460][   T22] usb 9-1: config 0 descriptor??
[  305.279863][ T8500] usbhid 10-1:0.0: can't add hid device: -71
[  305.296168][ T8500] usbhid: probe of 10-1:0.0 failed with error -71
[  305.306802][ T8750] netlink: 'syz.5.1011': attribute type 10 has an invalid length.
[  305.327213][ T8500] usb 10-1: USB disconnect, device number 11
[  305.336842][ T8750] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1011'.
[  305.355712][ T8753] UBIFS error (pid: 8753): cannot open "(null)", error -22
[  305.686208][   T22] wacom 0003:056A:5000.0009: ignoring exceeding usage max
[  305.707117][   T22] wacom 0003:056A:5000.0009: item fetching failed at offset 8/11
[  305.715797][   T22] wacom 0003:056A:5000.0009: parse failed
[  305.721857][   T22] wacom: probe of 0003:056A:5000.0009 failed with error -22
[  305.886810][   T22] usb 9-1: USB disconnect, device number 14
[  305.902065][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  305.989591][   T41] usb 4-1: USB disconnect, device number 15
[  306.441328][ T5930] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  306.582961][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.996931][ T5930] usb 2-1: config 0 descriptor??
[  307.261932][ T5930] kaweth 2-1:0.0: Firmware present in device.
[  307.504211][ T4269] Bluetooth: hci0: link tx timeout
[  307.510980][ T4269] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  308.077154][ T5930] kaweth 2-1:0.0: Statistics collection: 0
[  308.092015][ T5930] kaweth 2-1:0.0: Multicast filter limit: 0
[  308.101966][   T48] Bluetooth: hci0: link tx timeout
[  308.107111][   T48] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  308.157104][ T5930] kaweth 2-1:0.0: MTU: 0
[  308.161400][ T5930] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[  310.290269][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  310.868856][ T5930] kaweth 2-1:0.0: Error setting receive filter
[  310.883995][ T5930] kaweth: probe of 2-1:0.0 failed with error -5
[  310.898273][ T5930] usb 2-1: USB disconnect, device number 5
[  311.402105][   T22] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  311.821828][   T22] usb 9-1: Using ep0 maxpacket: 16
[  312.875986][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.916357][   T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.926268][   T22] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.940601][   T22] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  312.949895][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.006719][   T22] usb 9-1: config 0 descriptor??
[  313.493707][ T8830] syz.5.1028 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  314.388098][ T8841] netlink: 47 bytes leftover after parsing attributes in process `syz.5.1031'.
[  314.558447][   T22] usbhid 9-1:0.0: can't add hid device: -71
[  314.568440][   T22] usbhid: probe of 9-1:0.0 failed with error -71
[  314.576802][   T22] usb 9-1: USB disconnect, device number 15
[  314.583401][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1031'.
[  314.955288][ T8847] device bridge1 entered promiscuous mode
[  315.017713][ T5930] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  316.896379][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  316.921881][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.541773][ T5930] usb 10-1: Using ep0 maxpacket: 32
[  318.152064][ T4330] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  318.923008][ T4330] usb 2-1: Using ep0 maxpacket: 16
[  319.058762][ T5930] usb 10-1: device descriptor read/all, error -71
[  319.087001][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.102266][ T4330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.115973][ T4330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  319.187476][ T4330] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  319.212604][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.242860][ T4330] usb 2-1: config 0 descriptor??
[  319.401804][ T8500] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  319.598733][ T8500] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  319.630367][ T8500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.647444][ T8500] usb 6-1: config 0 descriptor??
[  319.780497][ T8500] usb 6-1: selecting invalid altsetting 3
[  319.791764][ T8500] comedi comedi0: could not set alternate setting 3 in high speed
[  319.802220][ T8500] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  319.814585][ T8500] usbduxsigma: probe of 6-1:0.0 failed with error -22
[  320.583626][ T4330] usbhid 2-1:0.0: can't add hid device: -71
[  320.598401][ T4330] usbhid: probe of 2-1:0.0 failed with error -71
[  320.614111][ T4330] usb 2-1: USB disconnect, device number 6
[  321.003830][ T4330] usb 6-1: USB disconnect, device number 22
[  321.584145][ T8932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1054'.
[  325.253691][ T8500] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  325.591997][ T8500] usb 10-1: Using ep0 maxpacket: 16
[  325.598930][ T8500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.660971][ T8500] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.739253][ T8500] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.952417][ T8500] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  325.965050][ T8500] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.020225][ T8500] usb 10-1: config 0 descriptor??
[  327.165166][ T8980] unsupported nlmsg_type 40
[  327.783387][ T8500] usbhid 10-1:0.0: can't add hid device: -71
[  327.789497][ T8500] usbhid: probe of 10-1:0.0 failed with error -71
[  327.798213][ T8500] usb 10-1: USB disconnect, device number 14
[  327.983675][ T8991] loop5: detected capacity change from 0 to 64
[  331.371790][   T48] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  331.371835][ T4269] Bluetooth: hci5: command 0xfc11 tx timeout
[  331.746787][ T5930] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  332.112728][ T5930] usb 9-1: Using ep0 maxpacket: 8
[  332.157584][ T5930] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  332.347089][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.686731][ T5930] usb 9-1: Product: syz
[  332.690947][ T5930] usb 9-1: Manufacturer: syz
[  332.695991][ T5930] usb 9-1: SerialNumber: syz
[  332.716624][ T5930] usb 9-1: config 0 descriptor??
[  333.084513][ T5930] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  333.902742][ T5930] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32
[  334.372311][ T9058] sp0: Synchronizing with TNC
[  335.318249][    T7] usb 9-1: USB disconnect, device number 16
[  335.670334][ T9070] Illegal XDP return value 614364617 on prog  (id 115) dev N/A, expect packet loss!
[  341.256367][ T9109] loop5: detected capacity change from 0 to 32768
[  341.497385][ T9109] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1095 (9109)
[  341.667318][ T9109] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.728492][ T9109] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  341.772120][ T9109] BTRFS info (device loop5): setting nodatacow, compression disabled
[  341.812628][ T9109] BTRFS info (device loop5): max_inline at 0
[  341.818674][ T9109] BTRFS info (device loop5): enabling disk space caching
[  341.887657][ T9109] BTRFS info (device loop5): setting datasum, datacow enabled
[  341.911991][ T9109] BTRFS info (device loop5): turning on flush-on-commit
[  341.939617][ T9109] BTRFS info (device loop5): doing ref verification
[  341.967636][ T9109] BTRFS info (device loop5): force clearing of disk cache
[  342.001292][ T9109] BTRFS info (device loop5): enabling ssd optimizations
[  342.028796][ T9109] BTRFS info (device loop5): turning off barriers
[  342.069302][ T9109] BTRFS info (device loop5): max_inline at 4096
[  342.099645][ T9109] BTRFS info (device loop5): disk space caching is enabled
[  345.006377][ T9109] BTRFS error (device loop5): open_ctree failed
[  351.193896][ T9254] cgroup: none used incorrectly
[  351.811005][ T9254] orangefs_mount: mount request failed with -4
[  352.227788][ T9261] loop8: detected capacity change from 0 to 2048
[  352.608060][ T9276] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.721797][ T9189] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  354.331944][ T9189] usb 4-1: Using ep0 maxpacket: 16
[  354.364668][ T9189] usb 4-1: config 0 has an invalid interface number: 174 but max is 0
[  354.405521][ T9189] usb 4-1: config 0 has no interface number 0
[  354.451052][ T9189] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=ee.4a
[  354.501047][ T9189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.557871][ T9189] usb 4-1: Product: syz
[  354.602996][ T9189] usb 4-1: Manufacturer: syz
[  354.649219][ T9189] usb 4-1: SerialNumber: syz
[  354.737628][ T9189] usb 4-1: config 0 descriptor??
[  354.879208][ T9189] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state.
[  355.135174][ T9189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  355.207139][ T9189] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800))
[  355.230542][ T9189] usb 4-1: media controller created
[  355.323813][ T9189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  355.513891][ T9189] dvb-usb: bulk message failed: -22 (6/0)
[  355.529869][ T9189] dvb-usb: bulk message failed: -22 (6/0)
[  356.405319][ T9189] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)'
[  359.231711][ T9189] rc_core: IR keymap rc-avermedia-m135a not found
[  359.238183][ T9189] Registered IR keymap rc-empty
[  359.248213][ T9189] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  359.260587][ T9189] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18
[  359.273385][ T9189] dvb-usb: schedule remote query interval to 150 msecs.
[  359.280361][ T9189] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected.
[  359.300575][ T9189] usb 4-1: USB disconnect, device number 16
[  360.881411][ T9189] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected.
[  364.417210][ T9403] xt_nat: multiple ranges no longer supported
[  364.874344][ T9415] loop8: detected capacity change from 0 to 40427
[  364.906188][ T9415] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  364.914082][ T9415] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  364.933582][ T9415] F2FS-fs (loop8): invalid crc value
[  365.718385][ T9415] F2FS-fs (loop8): Found nat_bits in checkpoint
[  365.802507][ T9415] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  365.809586][ T9415] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  366.298621][ T9435] syz.8.1156: attempt to access beyond end of device
[  366.298621][ T9435] loop8: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  374.413925][ T9518] serio: Serial port pts0
[  374.512670][ T9189] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  374.549688][ T9497] loop5: detected capacity change from 0 to 32768
[  374.580549][ T9497] XFS: ikeep mount option is deprecated.
[  374.676113][ T9497] XFS (loop5): Mounting V5 Filesystem
[  374.701820][ T9189] usb 4-1: Using ep0 maxpacket: 8
[  374.710866][ T9189] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  374.730348][ T9189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.747449][ T9189] usb 4-1: Product: syz
[  374.752149][ T9189] usb 4-1: Manufacturer: syz
[  374.754707][ T9497] XFS (loop5): Ending clean mount
[  374.756750][ T9189] usb 4-1: SerialNumber: syz
[  374.779682][ T9189] usb 4-1: config 0 descriptor??
[  374.806857][ T9497] XFS (loop5): Quotacheck needed: Please wait.
[  374.906040][ T9497] XFS (loop5): Quotacheck: Done.
[  374.996877][ T9189] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  376.020278][ T4676] XFS (loop5): Unmounting Filesystem
[  378.049080][ T9189] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  378.103388][ T9189] usb 4-1: USB disconnect, device number 17
[  378.255540][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  378.262021][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  378.548252][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1196'.
[  379.600039][ T9600] loop8: detected capacity change from 0 to 128
[  379.665382][ T9600] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  379.690253][ T9600] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  380.764310][ T5818] EXT4-fs (loop8): unmounting filesystem.
[  382.318504][ T9650] Bluetooth: MGMT ver 1.22
[  382.904090][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1209'.
[  384.354023][ T9660] loop8: detected capacity change from 0 to 4096
[  384.411748][   T48] Bluetooth: hci0: command 0x0c20 tx timeout
[  384.500827][ T9660] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  385.008178][ T9660] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  388.399386][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1222'.
[  388.609332][ T9703] device bridge_slave_1 left promiscuous mode
[  388.645155][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.902280][ T9703] bridge2: port 1(bridge_slave_1) entered blocking state
[  388.909436][ T9703] bridge2: port 1(bridge_slave_1) entered disabled state
[  388.973223][ T9703] device bridge_slave_1 entered promiscuous mode
[  397.152060][ T4360] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  397.404351][ T4360] usb 9-1: Using ep0 maxpacket: 32
[  397.420383][ T4360] usb 9-1: config 0 has an invalid interface number: 210 but max is 0
[  397.616274][ T4360] usb 9-1: config 0 has no interface number 0
[  397.657167][ T4360] usb 9-1: config 0 interface 210 has no altsetting 0
[  397.723793][ T4360] usb 9-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=42.3d
[  397.782280][ T4360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.800652][ T4360] usb 9-1: Product: syz
[  397.810767][ T4360] usb 9-1: Manufacturer: syz
[  397.830817][ T4360] usb 9-1: SerialNumber: syz
[  397.847006][ T4360] usb 9-1: config 0 descriptor??
[  398.068239][ T4360] dvb-usb: found a 'Pinnacle PCTV 282e' in warm state.
[  398.108933][ T4360] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  398.156728][ T4360] dvbdev: DVB: registering new adapter (Pinnacle PCTV 282e)
[  398.199044][ T4360] usb 9-1: media controller created
[  398.254710][ T4360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  399.201755][   T41] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  399.286432][ T4360] DVB: Unable to find symbol dib7000p_attach()
[  399.296449][ T4360] dvb-usb: no frontend was attached by 'Pinnacle PCTV 282e'
[  399.401795][   T41] usb 2-1: Using ep0 maxpacket: 8
[  399.412326][   T41] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  399.438797][   T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.457398][   T41] usb 2-1: Product: syz
[  399.467322][   T41] usb 2-1: Manufacturer: syz
[  399.490860][   T41] usb 2-1: SerialNumber: syz
[  399.511260][   T41] usb 2-1: config 0 descriptor??
[  399.516886][ T4360] rc_core: IR keymap rc-dib0700-rc5 not found
[  399.525366][ T4360] Registered IR keymap rc-empty
[  399.537460][ T4360] dvb-usb: could not initialize remote control.
[  399.544501][ T4360] dvb-usb: Pinnacle PCTV 282e successfully initialized and connected.
[  399.926887][   T41] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  400.283715][ T4360] usb 9-1: USB disconnect, device number 17
[  400.501862][ T4269] Bluetooth: hci0: command 0x0405 tx timeout
[  400.533911][ T4360] dvb-usb: Pinnacle PCTV 282e successfully deinitialized and disconnected.
[  400.802036][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  401.031898][ T5930] usb 4-1: Using ep0 maxpacket: 16
[  401.048001][ T5930] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  401.111817][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.119890][ T5930] usb 4-1: Product: syz
[  401.180719][ T5930] usb 4-1: Manufacturer: syz
[  401.227034][ T5930] usb 4-1: SerialNumber: syz
[  401.240780][   T41] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  401.279361][ T5930] usb 4-1: config 0 descriptor??
[  401.344112][ T5930] usb-storage 4-1:0.0: USB Mass Storage device detected
[  401.358155][ T5930] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  401.366681][ T5930] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.120-syzkaller-00773-g52f863f820fd)
[  401.366681][ T5930]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  401.394368][    C1] vkms_vblank_simulate: vblank timer overrun
[  401.563864][ T5930] usb 4-1: USB disconnect, device number 18
[  401.602176][   T41] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  401.831957][   T41] usb 9-1: Using ep0 maxpacket: 32
[  401.934891][   T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.068025][   T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.196555][   T41] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  402.318668][   T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.412814][   T41] usb 9-1: config 0 descriptor??
[  402.484537][ T8502] usb 2-1: USB disconnect, device number 7
[  404.021845][   T41] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0
[  404.028674][   T41] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0
[  404.035530][   T41] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0
[  404.042365][   T41] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0
[  404.049154][   T41] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0
[  404.056446][   T41] savu 0003:1E7D:2D5A.000A: unbalanced collection at end of report description
[  404.066417][   T41] savu 0003:1E7D:2D5A.000A: parse failed
[  404.212693][   T41] savu: probe of 0003:1E7D:2D5A.000A failed with error -22
[  404.222214][   T41] usb 9-1: USB disconnect, device number 18
[  408.611728][ T8502] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  409.101770][ T8502] usb 9-1: Using ep0 maxpacket: 8
[  409.167923][ T8502] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  409.237859][ T8502] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.021681][ T8502] usb 9-1: Product: syz
[  410.026410][ T8502] usb 9-1: Manufacturer: syz
[  410.031053][ T8502] usb 9-1: SerialNumber: syz
[  410.049304][ T8502] usb 9-1: config 0 descriptor??
[  410.277346][ T8502] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  412.438673][ T8502] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32
[  413.342880][ T8491] usb 9-1: USB disconnect, device number 19
[  413.748571][ T9985] 
[  413.751025][ T9985] ======================================================
[  413.758055][ T9985] WARNING: possible circular locking dependency detected
[  413.765089][ T9985] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G        W         
[  413.773414][ T9985] ------------------------------------------------------
[  413.780428][ T9985] syz.1.1284/9985 is trying to acquire lock:
[  413.786422][ T9985] ffff88805548d4a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0
[  413.797207][ T9985] 
[  413.797207][ T9985] but task is already holding lock:
[  413.804576][ T9985] ffff8880760544d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0
[  413.814686][ T9985] 
[  413.814686][ T9985] which lock already depends on the new lock.
[  413.814686][ T9985] 
[  413.825094][ T9985] 
[  413.825094][ T9985] the existing dependency chain (in reverse order) is:
[  413.834111][ T9985] 
[  413.834111][ T9985] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  413.841689][ T9985]        lock_acquire+0x1f8/0x5a0
[  413.846734][ T9985]        down_read_killable+0xc6/0xd10
[  413.852209][ T9985]        mmap_read_lock_killable+0x1d/0x60
[  413.858031][ T9985]        lock_mm_and_find_vma+0x2a7/0x2e0
[  413.863768][ T9985]        exc_page_fault+0x169/0x620
[  413.869073][ T9985]        asm_exc_page_fault+0x22/0x30
[  413.874467][ T9985]        fault_in_readable+0x1c8/0x340
[  413.879933][ T9985]        fault_in_iov_iter_readable+0xdb/0x270
[  413.886116][ T9985]        generic_perform_write+0x207/0x5e0
[  413.891943][ T9985]        __generic_file_write_iter+0x176/0x400
[  413.898113][ T9985]        generic_file_write_iter+0xab/0x310
[  413.904018][ T9985]        vfs_write+0x857/0xbc0
[  413.908793][ T9985]        ksys_write+0x19c/0x2c0
[  413.913653][ T9985]        do_syscall_64+0x3b/0xb0
[  413.918612][ T9985]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.925042][ T9985] 
[  413.925042][ T9985] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  413.933759][ T9985]        validate_chain+0x1661/0x5950
[  413.939136][ T9985]        __lock_acquire+0x125b/0x1f80
[  413.944519][ T9985]        lock_acquire+0x1f8/0x5a0
[  413.949559][ T9985]        down_write+0x36/0x60
[  413.954261][ T9985]        process_measurement+0x446/0x21b0
[  413.959994][ T9985]        ima_file_mmap+0x121/0x1c0
[  413.965113][ T9985]        __se_sys_remap_file_pages+0x67a/0x8b0
[  413.971277][ T9985]        do_syscall_64+0x3b/0xb0
[  413.976239][ T9985]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.982682][ T9985] 
[  413.982682][ T9985] other info that might help us debug this:
[  413.982682][ T9985] 
[  413.992911][ T9985]  Possible unsafe locking scenario:
[  413.992911][ T9985] 
[  414.000361][ T9985]        CPU0                    CPU1
[  414.005735][ T9985]        ----                    ----
[  414.011116][ T9985]   lock(&mm->mmap_lock);
[  414.015460][ T9985]                                lock(&sb->s_type->i_mutex_key#12);
[  414.023464][ T9985]                                lock(&mm->mmap_lock);
[  414.030319][ T9985]   lock(&sb->s_type->i_mutex_key#12);
[  414.035801][ T9985] 
[  414.035801][ T9985]  *** DEADLOCK ***
[  414.035801][ T9985] 
[  414.043950][ T9985] 1 lock held by syz.1.1284/9985:
[  414.048971][ T9985]  #0: ffff8880760544d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x207/0x8b0
[  414.059437][ T9985] 
[  414.059437][ T9985] stack backtrace:
[  414.065340][ T9985] CPU: 0 PID: 9985 Comm: syz.1.1284 Tainted: G        W          6.1.120-syzkaller-00773-g52f863f820fd #0
[  414.076633][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  414.086694][ T9985] Call Trace:
[  414.089975][ T9985]  <TASK>
[  414.092931][ T9985]  dump_stack_lvl+0x1e3/0x2cb
[  414.097637][ T9985]  ? nf_tcp_handle_invalid+0x642/0x642
[  414.103122][ T9985]  ? print_circular_bug+0x12b/0x1a0
[  414.108331][ T9985]  check_noncircular+0x2fa/0x3b0
[  414.113277][ T9985]  ? add_chain_block+0x850/0x850
[  414.118218][ T9985]  ? lockdep_lock+0x11f/0x2a0
[  414.122911][ T9985]  ? validate_chain+0x112/0x5950
[  414.127859][ T9985]  ? _find_first_zero_bit+0xd0/0x100
[  414.133161][ T9985]  validate_chain+0x1661/0x5950
[  414.138021][ T9985]  ? reacquire_held_locks+0x660/0x660
[  414.143419][ T9985]  ? reacquire_held_locks+0x660/0x660
[  414.148806][ T9985]  ? look_up_lock_class+0x77/0x140
[  414.153942][ T9985]  ? register_lock_class+0x100/0x990
[  414.159267][ T9985]  ? ima_match_policy+0x104/0x2330
[  414.164392][ T9985]  ? __lock_acquire+0x1f80/0x1f80
[  414.169435][ T9985]  ? is_dynamic_key+0x260/0x260
[  414.174304][ T9985]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  414.180310][ T9985]  ? update_load_avg+0x5af/0x1540
[  414.185371][ T9985]  ? mark_lock+0x9a/0x340
[  414.189732][ T9985]  __lock_acquire+0x125b/0x1f80
[  414.194611][ T9985]  lock_acquire+0x1f8/0x5a0
[  414.199148][ T9985]  ? process_measurement+0x446/0x21b0
[  414.204563][ T9985]  ? read_lock_is_recursive+0x10/0x10
[  414.209982][ T9985]  ? ima_lsm_policy_change+0x620/0x620
[  414.215471][ T9985]  ? __might_sleep+0xb0/0xb0
[  414.220079][ T9985]  ? ima_get_action+0x71/0xa0
[  414.224775][ T9985]  down_write+0x36/0x60
[  414.228947][ T9985]  ? process_measurement+0x446/0x21b0
[  414.234339][ T9985]  process_measurement+0x446/0x21b0
[  414.239571][ T9985]  ? ima_file_mmap+0x1c0/0x1c0
[  414.244346][ T9985]  ? __lock_acquire+0x1f80/0x1f80
[  414.249405][ T9985]  ? aa_path_link+0xea0/0xea0
[  414.254103][ T9985]  ? mtree_load+0xc45/0xdf0
[  414.258645][ T9985]  ? aa_get_current_label+0x111/0x1d0
[  414.264037][ T9985]  ? apparmor_current_getsecid_subj+0xac/0x110
[  414.270212][ T9985]  ima_file_mmap+0x121/0x1c0
[  414.274836][ T9985]  ? ima_file_free+0x3c0/0x3c0
[  414.279616][ T9985]  ? bpf_lsm_mmap_file+0x5/0x10
[  414.284478][ T9985]  ? security_mmap_file+0x11a/0x170
[  414.289705][ T9985]  __se_sys_remap_file_pages+0x67a/0x8b0
[  414.295364][ T9985]  ? __x64_sys_remap_file_pages+0xc0/0xc0
[  414.301101][ T9985]  ? print_irqtrace_events+0x210/0x210
[  414.306585][ T9985]  ? print_irqtrace_events+0x210/0x210
[  414.312075][ T9985]  ? syscall_enter_from_user_mode+0x2e/0x230
[  414.318076][ T9985]  ? lockdep_hardirqs_on+0x94/0x130
[  414.323293][ T9985]  ? __x64_sys_remap_file_pages+0x1c/0xc0
[  414.329035][ T9985]  do_syscall_64+0x3b/0xb0
[  414.333474][ T9985]  ? clear_bhb_loop+0x45/0xa0
[  414.338164][ T9985]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  414.344091][ T9985] RIP: 0033:0x7fd25fd85d29
[  414.348532][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.368148][ T9985] RSP: 002b:00007fd260b3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  414.376572][ T9985] RAX: ffffffffffffffda RBX: 00007fd25ff75fa0 RCX: 00007fd25fd85d29
[  414.384554][ T9985] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000
[  414.392534][ T9985] RBP: 00007fd25fe01a20 R08: 0000000000000000 R09: 0000000000000000
[  414.400511][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.408490][ T9985] R13: 0000000000000000 R14: 00007fd25ff75fa0 R15: 00007ffd665a8118
[  414.416495][ T9985]  </TASK>