last executing test programs:

2m41.91083759s ago: executing program 2 (id=440):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0xd8}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0x5, @udp_ip4_spec={@multicast1, @remote, 0x4e24, 0x4e22, 0x3}, @udp_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x4e23, 0x4e20, 0xff}, 0x4, 0x4, 0x6, 0x5, 0xd72e97c765e162e2}}})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m41.528231467s ago: executing program 2 (id=442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0xc3, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc)

2m41.163086327s ago: executing program 2 (id=447):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4)
recvmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/53, 0x35}], 0x2, &(0x7f0000000340)=""/39, 0x27}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0)

2m40.062831018s ago: executing program 2 (id=454):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0)

2m39.396914659s ago: executing program 2 (id=457):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121)
fcntl$notify(r0, 0x402, 0x2)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
openat(r0, &(0x7f000000c380)='./file0\x00', 0x20042, 0x101)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
vmsplice(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7)

2m35.439415209s ago: executing program 2 (id=472):
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m35.005110558s ago: executing program 32 (id=472):
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0)
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m53.71343419s ago: executing program 4 (id=642):
r0 = socket(0x10, 0x2, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c})
close_range(r0, 0xffffffffffffffff, 0x0)

1m53.091259963s ago: executing program 4 (id=645):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

1m52.779150349s ago: executing program 4 (id=648):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0xfffffffffffffdf2)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)

1m52.526948864s ago: executing program 4 (id=650):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1m52.357936646s ago: executing program 4 (id=651):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1m50.923217007s ago: executing program 4 (id=659):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8fffffffffb})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x7, r1, 0x0, &(0x7f00000002c0)='$H', 0x2, 0x8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3})

1m50.299990118s ago: executing program 33 (id=659):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8fffffffffb})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000003c0)={0x28, 0x7, r1, 0x0, &(0x7f00000002c0)='$H', 0x2, 0x8})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3})

14.482601239s ago: executing program 5 (id=1076):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)

14.161740259s ago: executing program 5 (id=1080):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8010002b)
symlinkat(0x0, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)

12.389573091s ago: executing program 0 (id=1092):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
r1 = gettid()
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020)

12.170260787s ago: executing program 5 (id=1093):
mmap(&(0x7f0000f40000/0x4000)=nil, 0x4000, 0xb635773f06ebbee4, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

10.499622008s ago: executing program 0 (id=1100):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0xdddd1000, 0x2000, 0x1a, 0x5, 0x4, 0x7, 0x3, 0x8, 0xff, 0x1, 0x0, 0x7}, {0xdddd1000, 0x1, 0xc, 0x6, 0x0, 0xb, 0x4, 0xc, 0x2, 0x10, 0x80, 0x6}, {0x8080000, 0x6000, 0x0, 0x46, 0x1, 0x2, 0x59, 0x9, 0x2, 0x6, 0x1, 0x5}, {0xeeee8000, 0xc000, 0xa, 0x9, 0x2, 0x3d, 0x3, 0x7, 0x0, 0x1, 0x2f, 0x5}, {0x60000, 0xeeee0002, 0x3, 0x8, 0x1, 0x6, 0x5, 0xa, 0x81, 0x5, 0x3, 0xa}, {0x5000, 0x8080000, 0xe, 0x7, 0xd8, 0xb3, 0xd, 0x6, 0xe, 0x7f, 0x8, 0x7}, {0x5000, 0x6000, 0x3, 0x7, 0xa, 0x8, 0xd, 0x6, 0x7, 0x8, 0xc, 0x1}, {0x26000, 0x200000, 0x9, 0x2, 0x4, 0x2, 0x9, 0xec, 0x1, 0x9, 0xc4, 0x2}, {0x40000, 0x2}, {0x41000, 0x3ff}, 0x40000, 0x0, 0xd000, 0x60001, 0x8, 0x4900, 0x0, [0x8, 0x1, 0x7, 0x6]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2022, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)

10.496866552s ago: executing program 5 (id=1102):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrquota}, {@lazytime}, {@nombcache}, {@i_version}]}, 0x1, 0x44a, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2)
truncate(0x0, 0x2fffffd)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

10.075183359s ago: executing program 6 (id=1104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r2, 0x407, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r2, 0x407, 0x2000000)
read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd", 0x4)
accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="1c0000001e0001000000ff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000400"], 0x1c}}, 0x0)

9.875807422s ago: executing program 3 (id=1106):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7d, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)

8.67514642s ago: executing program 3 (id=1107):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

8.656630774s ago: executing program 0 (id=1108):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r0, 0x0, 0x0, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, 0x0, 0x0, 0x400)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)

8.527219161s ago: executing program 6 (id=1110):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = userfaultfd(0x801)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

8.520755711s ago: executing program 3 (id=1111):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
close(0x3)

7.942807302s ago: executing program 5 (id=1113):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="b0dcd010076a689f487da428", 0xc)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)='J+Z', 0x3)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x700)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000300)=ANY=[])

6.495135316s ago: executing program 1 (id=1117):
memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1a\x86i)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\xb8\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97\t#[\xb7\xfa', 0x2)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.231327961s ago: executing program 3 (id=1118):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x3, 0x200a}, 0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000601000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68)

6.167115808s ago: executing program 6 (id=1119):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f00000000c0)=0x3e)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

6.160787519s ago: executing program 1 (id=1120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40)

4.2858777s ago: executing program 6 (id=1121):
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
add_key$keyring(&(0x7f0000000480), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$session_to_parent(0x12)

4.243917646s ago: executing program 3 (id=1122):
socket$pptp(0x18, 0x1, 0x2)
socket(0x2a, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.040497745s ago: executing program 0 (id=1123):
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000, 0x2000000})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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")

3.833993312s ago: executing program 1 (id=1124):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x78, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x4, 0x5, 0xf6, @vifc_lcl_ifindex=r2, @loopback}, 0x10)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x1900040, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='C'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

3.770439033s ago: executing program 6 (id=1125):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5)
ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000440))

2.251166463s ago: executing program 0 (id=1126):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
write(r1, &(0x7f0000000100)="1b", 0x1)
r2 = timerfd_create(0x1, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

2.220125281s ago: executing program 5 (id=1127):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x20000002})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x28000006})

2.219064798s ago: executing program 3 (id=1128):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b)

1.120870779s ago: executing program 1 (id=1129):
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200"/65], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
socket$inet(0x2, 0x3, 0x1)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac67", 0x3}], 0x1}}], 0x2, 0x40)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000500)="c4e3515dc206440f20c03507000000440f22c0652664ab3470c4c3c14813000f0f03a72e0f01cb0f0f2bb4f30fc77000c744240052b30000c74424023c4d0000c7442406000000000f011424", 0x4c}], 0x1, 0x2b, &(0x7f0000000600), 0x0)

1.039686536s ago: executing program 6 (id=1130):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0x200002e6)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
fcntl$setpipe(r4, 0x407, 0x7000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

791.245311ms ago: executing program 0 (id=1131):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = dup(r0)
r3 = openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendfile(r0, r3, 0x0, 0x8000fffffffe)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

165.173884ms ago: executing program 1 (id=1132):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=1133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ssd optimizations
[  243.165393][ T8006] BTRFS info (device loop3): turning on async discard
[  243.165409][ T8006] BTRFS info (device loop3): enabling free space tree
[  243.165424][ T8006] BTRFS info (device loop3): force clearing of disk cache
[  243.165439][ T8006] BTRFS info (device loop3): enabling auto defrag
[  243.165452][ T8006] BTRFS info (device loop3): trying to use backup root at mount time
[  243.165470][ T8006] BTRFS info (device loop3): use zstd compression, level 3
[  243.338903][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.358087][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.417902][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.787393][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1
[  243.853763][ T3963] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.941495][ T3963] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.951739][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  243.954019][ T5615] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.594019][ T8058] loop0: detected capacity change from 0 to 32768
[  244.595149][ T8058] btrfs: Deprecated parameter 'usebackuproot'
[  244.595170][ T8058] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  244.595966][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.596348][ T8058] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 1e633c33-b966-447d-9f30-c55cf0a4e9cf
[  244.596404][ T8058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.673 (8058)
[  244.695312][ T5621] Bluetooth: hci3: command tx timeout
[  244.706559][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.707839][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.771037][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.773020][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.779651][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.781323][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.792837][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.803731][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.810418][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.822298][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.831332][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.835744][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.838462][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.840762][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.841464][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.843786][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.847165][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.849408][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.854139][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.856490][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.939495][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.940385][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.941375][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.943530][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.944354][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.960841][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.973451][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.977652][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.980450][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  244.988393][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.042696][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.042741][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.042769][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.051615][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.051718][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.110911][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.111115][ T8058] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.111144][ T8058] BTRFS info (device loop0): using crc32c checksum algorithm
[  245.251687][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.318321][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  245.328228][ T1033] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.422463][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.717726][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.748638][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.752464][   T69] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  245.752575][ T8058] BTRFS error (device loop0): failed to load root extent
[  245.752613][ T8058] BTRFS warning (device loop0): try to load backup roots slot 1
[  245.755241][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.762632][   T69] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  245.859090][ T8058] BTRFS warning (device loop0): couldn't read tree root
[  245.859118][ T8058] BTRFS warning (device loop0): try to load backup roots slot 2
[  245.862510][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.863933][   T69] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  245.864027][ T8058] BTRFS warning (device loop0): couldn't read tree root
[  245.864047][ T8058] BTRFS warning (device loop0): try to load backup roots slot 3
[  245.870675][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.907433][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.913165][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.923770][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.929959][ T3963] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.937716][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.938472][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.966027][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  245.968446][ T8058] BTRFS info (device loop0): rebuilding free space tree
[  246.038099][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.038117][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.141055][   T56] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  246.141141][   T56] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  246.403432][   T13] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  246.404371][ T8058] BTRFS info (device loop0): checking UUID tree
[  246.431621][ T8058] BTRFS info (device loop0): enabling ssd optimizations
[  246.431648][ T8058] BTRFS info (device loop0): turning on async discard
[  246.431663][ T8058] BTRFS info (device loop0): enabling free space tree
[  246.431676][ T8058] BTRFS info (device loop0): force clearing of disk cache
[  246.431688][ T8058] BTRFS info (device loop0): enabling auto defrag
[  246.431700][ T8058] BTRFS info (device loop0): trying to use backup root at mount time
[  246.431716][ T8058] BTRFS info (device loop0): use zstd compression, level 3
[  246.661855][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.674185][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  246.674278][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.725303][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  246.727186][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.779132][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.781122][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.794773][ T5621] Bluetooth: hci3: command tx timeout
[  246.912473][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.924065][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.986838][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  246.986880][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.033483][ T4196] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.047214][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.134297][   T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.156446][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.188957][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.190654][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.199636][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.283763][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.285023][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.285040][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.285053][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.288365][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.288462][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.288494][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.288523][   T69] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.294448][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.311272][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.316237][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.318074][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.320430][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.322613][ T4196] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.434002][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.451737][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.451818][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.452150][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.494217][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.494300][ T3195] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  247.509428][ T4196] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  247.561779][ T5613] BTRFS info (device loop0): last unmount of filesystem 1e633c33-b966-447d-9f30-c55cf0a4e9cf
[  248.226596][   T32] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  248.254670][ T5811] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  248.402811][   T32] usb 4-1: unable to get BOS descriptor or descriptor too short
[  248.403358][   T32] usb 4-1: not running at top speed; connect to a high speed hub
[  248.404411][   T32] usb 4-1: config 251 has an invalid interface number: 243 but max is 0
[  248.404433][   T32] usb 4-1: config 251 has no interface number 0
[  248.404470][   T32] usb 4-1: config 251 interface 243 altsetting 5 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  248.404497][   T32] usb 4-1: config 251 interface 243 altsetting 5 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  248.404523][   T32] usb 4-1: config 251 interface 243 has no altsetting 0
[  248.423810][   T32] usb 4-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=de.5f
[  248.423841][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.423860][   T32] usb 4-1: Product: syz
[  248.423874][   T32] usb 4-1: Manufacturer: syz
[  248.423890][   T32] usb 4-1: SerialNumber: syz
[  248.798448][   T32] sierra 4-1:251.243: Sierra USB modem converter detected
[  248.834448][   T32] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  248.856841][ T5621] Bluetooth: hci3: command tx timeout
[  249.159310][   T32] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[  249.409945][   T32] usb 4-1: USB disconnect, device number 9
[  249.633787][   T32] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  249.687118][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'.
[  250.158469][ T5620] kernel write not supported for file /dsp (pid: 5620 comm: kworker/0:3)
[  250.425207][ T5620] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  250.575297][ T5620] usb 6-1: Using ep0 maxpacket: 16
[  250.579256][ T5620] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  250.579285][ T5620] usb 6-1: config 66 has 2 interfaces, different from the descriptor's value: 3
[  250.579353][ T5620] usb 6-1: config 66 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  250.582210][ T5620] usb 6-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  250.582239][ T5620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.582260][ T5620] usb 6-1: Product: syz
[  250.582274][ T5620] usb 6-1: Manufacturer: syz
[  250.582289][ T5620] usb 6-1: SerialNumber: syz
[  250.599310][ T8152] loop3: detected capacity change from 0 to 131072
[  250.601013][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.619667][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.622025][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.622679][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.630008][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.630913][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.633604][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.652027][   T32] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  250.652853][   T32] sierra 4-1:251.243: device disconnected
[  250.681227][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.681923][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.683389][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.686093][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.689928][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.690599][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.691641][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.692254][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.692823][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.693415][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.694001][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.694594][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.755227][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.774242][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.776462][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.785870][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.825811][ T8153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'.
[  250.866673][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.874196][ T8152] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  250.882127][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.891568][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.892829][ T8152] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  250.902659][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.917306][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.922466][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.935266][ T5621] Bluetooth: hci3: command tx timeout
[  250.940871][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.942344][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.945221][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.949844][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  250.954330][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.068159][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.072499][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.075582][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.110168][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.112567][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.116706][   T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.119519][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.119562][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.119590][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.123308][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.132838][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.254444][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.307613][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.348958][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.348998][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.349029][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.349067][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.349168][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.349212][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.349270][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.372963][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.373070][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.373153][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.383872][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.383960][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  251.770960][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  251.800247][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  252.140300][ T4196] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  252.184091][ T5620] usb 6-1: Fast Track Pro config OK
[  252.207384][ T5620] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  252.214219][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  252.767552][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  252.982104][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.982347][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.982653][ T8008] bridge_slave_0: entered allmulticast mode
[  253.033254][ T8008] bridge_slave_0: entered promiscuous mode
[  253.291862][ T5620] usb 6-1: USB disconnect, device number 2
[  253.471935][   T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  253.560318][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.576790][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.577108][ T8008] bridge_slave_1: entered allmulticast mode
[  253.598203][ T8008] bridge_slave_1: entered promiscuous mode
[  253.859232][ T8211] loop5: detected capacity change from 0 to 256
[  254.019910][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.066825][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.066953][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.066977][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.067001][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.067022][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.067053][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.067075][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.112209][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.113457][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.189981][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.190723][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.191518][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.192552][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.193211][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.193830][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.244654][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.333903][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.377713][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.378038][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.378223][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.378398][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.412323][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.427346][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.427599][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.428051][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.428247][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.469237][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.469504][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.469650][ T8211] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  254.470340][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  254.532601][ T8211] exFAT-fs (loop5): valid_size(562949953421322) is greater than size(10)
[  254.600300][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  255.270146][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.323485][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.424319][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  255.765572][ T8225] fuse: Bad value for 'fd'
[  255.865253][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  255.865340][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  255.912623][ T8008] team0: Port device team_slave_0 added
[  255.924112][ T8008] team0: Port device team_slave_1 added
[  256.025374][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  256.275894][   T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  256.469419][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.469436][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.469462][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.476732][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.476748][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  256.476773][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.615659][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  256.748844][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  256.959939][ T8008] hsr_slave_0: entered promiscuous mode
[  256.984803][ T8008] hsr_slave_1: entered promiscuous mode
[  257.202425][   T38] kauditd_printk_skb: 30 callbacks suppressed
[  257.202443][   T38] audit: type=1326 audit(1779202394.317:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848014][   T38] audit: type=1326 audit(1779202394.957:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848073][   T38] audit: type=1326 audit(1779202394.957:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848111][   T38] audit: type=1326 audit(1779202394.957:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848142][   T38] audit: type=1326 audit(1779202394.957:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848180][   T38] audit: type=1326 audit(1779202394.957:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848210][   T38] audit: type=1326 audit(1779202394.957:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848240][   T38] audit: type=1326 audit(1779202394.957:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848271][   T38] audit: type=1326 audit(1779202394.957:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.848301][   T38] audit: type=1326 audit(1779202394.957:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8243 comm="syz.5.707" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d209fce59 code=0x7fc00000
[  257.899402][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  260.175323][   T37] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  260.312567][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'.
[  260.339100][   T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  260.343133][   T37] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  260.343165][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.343185][   T37] usb 4-1: Product: syz
[  260.343199][   T37] usb 4-1: Manufacturer: syz
[  260.343213][   T37] usb 4-1: SerialNumber: syz
[  260.389365][   T37] usb 4-1: config 0 descriptor??
[  260.418935][   T37] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5
[  260.496224][ T8309] veth0: entered promiscuous mode
[  260.600223][ T8312] veth0 (unregistering): left promiscuous mode
[  260.636666][  T823] usb 4-1: USB disconnect, device number 10
[  260.889064][ T8315] bridge0: port 3(erspan0) entered blocking state
[  260.889202][ T8315] bridge0: port 3(erspan0) entered disabled state
[  260.889765][ T8315] erspan0: entered allmulticast mode
[  260.892912][ T8315] erspan0: entered promiscuous mode
[  260.894035][ T8315] bridge0: port 3(erspan0) entered blocking state
[  260.894476][ T8315] bridge0: port 3(erspan0) entered forwarding state
[  260.936860][ T8315] erspan0: left allmulticast mode
[  260.936894][ T8315] erspan0: left promiscuous mode
[  260.939834][ T8315] bridge0: port 3(erspan0) entered disabled state
[  261.188568][ T8008] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  261.404073][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  261.447061][ T8328] loop3: detected capacity change from 0 to 256
[  261.520722][ T8008] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  261.562341][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.574133][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.586344][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.611172][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.631595][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.633955][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.634769][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.636631][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.644469][   T68] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  261.687312][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.713907][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.714665][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  261.836183][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  261.841822][ T8008] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  262.099582][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  262.154197][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  262.201618][ T8008] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  262.207123][   T13] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  262.232651][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  262.456618][ T8008] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  262.789245][ T5737] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  263.006752][ T5737] usb 4-1: Using ep0 maxpacket: 32
[  263.012962][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.012994][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.013031][ T5737] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  263.013054][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.028781][ T5737] usb 4-1: config 0 descriptor??
[  263.040677][ T5737] hub 4-1:0.0: USB hub found
[  263.250232][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.261090][ T5737] hub 4-1:0.0: 1 port detected
[  263.409031][ T8008] 8021q: adding VLAN 0 to HW filter on device team0
[  263.612068][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.612230][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.707943][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.708110][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  264.083462][ T5737] hub 4-1:0.0: activate --> -90
[  264.302980][ T5620] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  264.303341][  T823] usb 4-1: USB disconnect, device number 11
[  265.569254][    C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  266.653534][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.220598][ T8406] loop5: detected capacity change from 0 to 40427
[  267.234746][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.234927][ T8406] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  267.234950][ T8406] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  267.302665][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.303415][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.305857][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.307690][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.308295][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.310112][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.320648][ T8406] F2FS-fs (loop5): invalid crc value
[  267.364355][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.370676][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.378724][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.394095][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.396904][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.401485][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.420819][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.430950][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.470988][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.473349][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.478378][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.488950][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.502332][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.503586][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.507237][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.508440][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.520389][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.525508][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.543901][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.544717][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.545765][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.548085][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.549288][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.551524][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.552180][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.552926][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.556054][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.560688][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.562749][   T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.564438][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.568865][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.568918][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.568948][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.586090][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  267.586207][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  268.115472][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  268.192564][ T8406] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  268.238668][ T8008] veth0_vlan: entered promiscuous mode
[  268.299803][ T8008] veth1_vlan: entered promiscuous mode
[  268.460554][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  268.504247][ T3963] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  268.554010][ T8008] veth0_macvtap: entered promiscuous mode
[  268.568453][ T8406] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  268.568484][ T8406] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  268.730851][ T8008] veth1_macvtap: entered promiscuous mode
[  268.865969][ T5737] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  268.974255][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  269.126955][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.151237][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  269.195723][ T5737] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.195751][ T5737] usb 1-1: config 0 has no interfaces?
[  269.195781][ T5737] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  269.195803][ T5737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.201787][ T5737] usb 1-1: config 0 descriptor??
[  269.210467][ T1344] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.213440][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  269.275001][ T1344] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.293651][ T1344] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.321936][ T1344] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.454758][ T5737] usb 1-1: USB disconnect, device number 9
[  270.446414][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  271.235837][ T5753] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  271.295448][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  271.436153][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  271.605357][ T5753] usb 1-1: device descriptor read/64, error -32
[  271.822527][ T3195] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  271.822593][ T3195] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  271.822620][ T3195] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  271.947518][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  272.191207][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.191228][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.379486][ T5753] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  272.456268][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  272.575277][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  272.604360][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  272.604447][ T5753] usb 1-1: Using ep0 maxpacket: 32
[  272.607028][ T5753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.607061][ T5753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  272.607082][ T5753] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  272.607105][ T5753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57599, setting to 1024
[  272.607132][ T5753] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  272.607154][ T5753] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[  272.608252][ T5753] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  272.608277][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  272.608297][ T5753] usb 1-1: SerialNumber: syz
[  272.822860][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.822880][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.914328][ T8462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  272.964949][ T5753] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  272.999050][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  273.172069][ T5753] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  273.329995][ T5753] usb 1-1: USB disconnect, device number 11
[  273.387040][ T1344] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  273.611086][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  273.699378][ T1344] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  273.892635][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'.
[  274.240907][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  274.287521][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  274.386483][ T5737] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  274.524675][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  274.535266][ T5737] usb 7-1: Using ep0 maxpacket: 16
[  274.538694][ T5737] usb 7-1: unable to get BOS descriptor or descriptor too short
[  274.548948][ T5737] usb 7-1: config 13 has an invalid interface number: 50 but max is 0
[  274.548978][ T5737] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  274.548997][ T5737] usb 7-1: config 13 has no interface number 0
[  274.549040][ T5737] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  274.549066][ T5737] usb 7-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[  274.549085][ T5737] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0
[  274.549108][ T5737] usb 7-1: config 13 interface 50 has no altsetting 0
[  274.623229][ T5737] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  274.623255][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.623274][ T5737] usb 7-1: Product: syz
[  274.623287][ T5737] usb 7-1: Manufacturer: syz
[  274.623299][ T5737] usb 7-1: SerialNumber: syz
[  274.670889][ T8490] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  274.901923][ T8504] loop0: detected capacity change from 0 to 256
[  274.980081][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.099856][ T8506] loop6: detected capacity change from 0 to 16
[  275.112799][ T8506] erofs: Unknown parameter 'ÿ'
[  275.113291][ T8506] __loop_clr_fd(loop6) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  275.127838][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.139683][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.297760][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.298578][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.335769][   T44] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  275.349764][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.434408][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.450086][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.467380][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.495383][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.512160][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  275.609606][ T5737] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  275.609675][ T5737] usb 7-1: MIDIStreaming interface descriptor not found
[  275.687047][ T8511] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  275.687047][ T8511] The task syz.5.786 (8511) triggered the difference, watch for misbehavior.
[  275.850147][ T8504] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  275.909795][ T8504] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  275.909841][ T8504] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  276.089370][   T38] kauditd_printk_skb: 3 callbacks suppressed
[  276.089387][   T38] audit: type=1800 audit(1779202413.137:76): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.799" name="file1" dev="loop0" ino=1048634 res=0 errno=0
[  276.094223][ T5737] usb 7-1: USB disconnect, device number 2
[  276.508109][ T1033] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  276.528345][ T8504] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  276.783871][ T1344] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  276.806059][ T4196] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  276.833646][ T5613] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  276.885234][ T5729] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  277.057224][ T5729] usb 6-1: Using ep0 maxpacket: 16
[  277.061102][ T5729] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  277.061129][ T5729] usb 6-1: config 0 has no interface number 0
[  277.061229][ T5729] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  277.061255][ T5729] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  277.064891][ T5729] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  277.064917][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.064936][ T5729] usb 6-1: Product: syz
[  277.064949][ T5729] usb 6-1: Manufacturer: syz
[  277.064962][ T5729] usb 6-1: SerialNumber: syz
[  277.208189][ T5729] usb 6-1: config 0 descriptor??
[  277.209714][ T8520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.209895][ T8520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.456937][ T8520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.457111][ T8520] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.713881][ T8538] udevd[8538]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.488315][ T8550] io-wq is not configured for unbound workers
[  278.845316][ T5625] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  278.891405][ T5729] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  278.891433][ T5729] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  278.891702][ T5729] asix 6-1:0.34: probe with driver asix failed with error -71
[  278.949724][ T5729] usb 6-1: USB disconnect, device number 3
[  279.147273][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.147304][ T5625] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.147338][ T5625] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  279.147360][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.206920][ T5625] usb 1-1: config 0 descriptor??
[  279.426238][   T32] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  279.592032][   T32] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  279.592063][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.592083][   T32] usb 4-1: Product: syz
[  279.592096][   T32] usb 4-1: Manufacturer: syz
[  279.592111][   T32] usb 4-1: SerialNumber: syz
[  279.647734][   T32] r8152-cfgselector 4-1: Unknown version 0x0000
[  279.647758][   T32] r8152-cfgselector 4-1: config 0 descriptor??
[  279.690170][ T5625] hid_parser_main: 40 callbacks suppressed
[  279.690195][ T5625] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  279.690224][ T5625] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  279.690251][ T5625] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  279.690275][ T5625] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  279.690301][ T5625] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  279.814735][ T5625] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  280.100005][ T5753] r8152-cfgselector 4-1: USB disconnect, device number 12
[  280.473073][ T5625] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 5: -71
[  280.473122][ T5625] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense calibration info: -71
[  280.473174][ T5625] playstation 0003:054C:0DF2.0006: Failed to get calibration data from DualSense
[  280.473198][ T5625] playstation 0003:054C:0DF2.0006: Failed to create dualsense.
[  280.492191][ T8567] overlayfs: failed to set uuid (6/file0, err=-1); falling back to uuid=null.
[  280.492251][ T8567] overlayfs: failed to verify upper root origin
[  280.577612][ T5625] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71
[  280.609989][ T5625] usb 1-1: USB disconnect, device number 12
[  280.761634][ T8569] loop5: detected capacity change from 0 to 1024
[  280.773952][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.800637][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.800642][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.805949][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.834063][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.834880][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.837528][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.837568][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.837592][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.837614][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.899440][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.930815][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.933007][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.935779][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.943888][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.977733][ T8569] hfsplus: failed to load extents file
[  280.981969][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.992438][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  280.997690][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.195677][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.195871][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.280758][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.281375][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.383330][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.383396][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.406605][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.410124][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.465401][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.465511][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.546783][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  281.614674][ T8578] loop3: detected capacity change from 0 to 8192
[  281.649784][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.651143][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.674064][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682230][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682282][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682305][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682327][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682349][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682370][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682391][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.682422][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.683857][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.684042][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.684692][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.686432][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.749526][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.754887][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.755417][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.811381][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.833710][ T8578] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  281.846948][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.955273][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.956109][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  281.995795][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.011556][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.013605][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.022278][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.024680][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.032412][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.034511][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.111566][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.112377][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.113026][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.114050][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.114669][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169207][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169261][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169286][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169309][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169329][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169351][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.169373][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.171280][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.173759][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.191239][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.211448][   T44] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.212384][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.282242][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.355296][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.358401][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.360679][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.370027][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  282.435109][ T8569] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  282.693073][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  282.693357][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  282.693661][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  282.693814][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  282.693974][ T1344] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  282.742678][ T8591] loop0: detected capacity change from 0 to 128
[  282.771240][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  282.797448][ T1033] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.805266][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.821348][ T8591] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  282.822443][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.854185][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.854952][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.868843][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.870866][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871614][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871649][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871687][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871709][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871730][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.871751][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.885202][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900352][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900397][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900419][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900440][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900470][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900491][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.900512][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.917725][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.961869][ T1033] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.985944][ T1033] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  282.986242][ T1033] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.071895][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.073165][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.074769][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.109966][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.168387][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.185809][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.190855][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.195571][   T69] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.195885][ T8591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.350663][ T4196] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  283.368662][   T12] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  283.382499][ T4196] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  284.051989][   T44] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  284.121255][   T44] lo_rw_aio(loop0) starting write with raw_refcnt=0x0, refcnt=1
[  284.142107][ T5613] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  284.235345][ T5625] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  284.426397][ T5625] usb 7-1: Using ep0 maxpacket: 32
[  284.432538][ T5625] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  284.432580][ T5625] usb 7-1: config 0 has no interface number 0
[  284.432626][ T5625] usb 7-1: config 0 interface 184 has no altsetting 0
[  284.477709][ T5625] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  284.477739][ T5625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.477759][ T5625] usb 7-1: Product: syz
[  284.477774][ T5625] usb 7-1: Manufacturer: syz
[  284.477788][ T5625] usb 7-1: SerialNumber: syz
[  284.560539][ T5625] usb 7-1: config 0 descriptor??
[  285.242351][ T5625] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  285.242382][ T5625] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  285.429526][ T8626] loop3: detected capacity change from 0 to 128
[  285.484029][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.484323][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.484667][ T8626] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  285.487094][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.513184][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.513239][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.514956][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.516181][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.522731][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.535679][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.538128][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.538820][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.539066][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.539267][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.539529][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540484][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540530][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540553][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540574][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540596][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540617][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.540637][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.543186][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.546370][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.546636][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.548551][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.548677][ T8626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.548960][ T3195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  285.557692][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.607642][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.609233][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.623209][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.629106][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.629151][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.629176][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.629197][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.629218][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  285.646475][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  286.076208][ T5625] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  286.076238][ T5625] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  286.076258][ T5625] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  286.076578][ T5625] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  286.191710][ T5625] usb 7-1: USB disconnect, device number 3
[  286.338265][ T3195] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  286.356081][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  286.513644][ T8649] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  286.712162][ T8648] loop5: detected capacity change from 0 to 512
[  286.723113][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.723408][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.744969][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.745027][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.788944][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.790893][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.816137][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  286.820748][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.884326][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.958821][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.966662][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  286.973066][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.003859][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.021981][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.033555][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.065798][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.100662][ T8648] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  287.100780][ T8648] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  287.461372][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  287.531224][ T8664] IPv6: addrconf: prefix option has invalid lifetime
[  287.830044][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  287.886765][ T8648] EXT4-fs (loop5): 1 truncate cleaned up
[  287.893459][ T8648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.911809][ T8648] EXT4-fs: group quota file already specified
[  288.038084][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  288.038145][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  288.044189][ T7356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.096245][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  288.112608][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  288.490814][ T8682] l2tp_ppp: sess 2/0: no socket in recv
[  288.633965][ T8686] loop3: detected capacity change from 0 to 512
[  288.756142][   T69] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.762986][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.801717][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'.
[  288.801742][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.865'.
[  288.822972][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.823037][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.823766][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.823796][   T12] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.828044][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.828085][ T1344] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.828400][   T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  288.840608][ T3195] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.845145][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.846059][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.846704][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.847336][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.848730][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.849338][ T1033] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  288.875454][ T8686] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.863: inode has both inline data and extents flags
[  288.875498][ T8686] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  288.886034][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  288.886059][    C1] EXT4-fs (loop3): initial error at time 1779202425: ext4_orphan_get:1397: inode 15
[  288.886087][    C1] EXT4-fs (loop3): last error at time 1779202425: ext4_orphan_get:1397: inode 15
[  288.888368][ T1033] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  288.895175][ T8686] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.863: couldn't read orphan inode 15 (err -117)
[  288.895207][ T8686] loop3: lost filesystem error report for type 5 error -117
[  288.895567][ T1033] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.012840][ T8686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.142601][ T1033] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.161558][ T4196] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.462681][   T12] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.698196][   T56] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.698275][   T56] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.706368][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.911880][   T44] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  289.922433][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  290.138779][ T8700] loop5: detected capacity change from 0 to 4096
[  290.170192][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.171921][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.174367][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.199155][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.199998][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.202278][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.203391][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.204014][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.204928][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.254495][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.263537][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.264305][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.264929][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.288103][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.303600][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.304749][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.310700][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.313850][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.332621][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.352634][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.353368][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.362802][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.364695][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.375264][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.412249][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.441002][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.441803][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.460028][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.515123][ T8700] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  290.687429][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.704399][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.855288][ T4196] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.945667][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.957735][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.958245][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  290.958664][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.140084][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.215097][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  291.238394][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.242984][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.341305][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.344053][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.344565][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.413551][ T3963] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.430820][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.556259][ T8713] netlink: 'syz.6.873': attribute type 4 has an invalid length.
[  291.562085][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.563839][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.590473][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.595387][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.595856][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.596698][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.597649][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.598984][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.637570][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.638868][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.639259][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.639729][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.641613][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.642978][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.646158][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.647030][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.653420][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.654499][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.654841][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.681644][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.682339][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.683032][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.683347][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.683903][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.714791][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.723059][ T8717] netlink: 'syz.6.873': attribute type 4 has an invalid length.
[  291.732182][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.732955][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.734701][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.837861][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.842956][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.843569][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.916795][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.937275][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.939035][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  291.949647][ T8700] ntfs3(loop5): ino=19, mi_enum_attr
[  291.950060][ T8700] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  292.393445][   T68] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  292.409831][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.410544][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.411182][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.758536][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.786256][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.812650][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.839754][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  292.898948][   T68] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  293.015828][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  293.080526][ T8727] ntfs3(loop5): ino=23, "file1" failed to extend initialized size to 8000c61.
[  293.644953][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  293.668484][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  293.723495][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  293.872956][   T69] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.057352][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  294.405480][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.405524][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.405543][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.406390][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.406443][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.406487][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.406525][ T4196] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  294.494399][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  294.773501][ T8759] syz.5.884 uses obsolete (PF_INET,SOCK_PACKET)
[  297.710881][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'.
[  297.710905][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'.
[  298.195529][ T5625] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  298.233594][   T38] audit: type=1326 audit(1779202435.347:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.243867][   T38] audit: type=1326 audit(1779202435.347:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.243927][   T38] audit: type=1326 audit(1779202435.357:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.244315][   T38] audit: type=1326 audit(1779202435.357:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.244868][   T38] audit: type=1326 audit(1779202435.357:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.248761][   T38] audit: type=1326 audit(1779202435.367:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.248855][   T38] audit: type=1326 audit(1779202435.357:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.249187][   T38] audit: type=1326 audit(1779202435.367:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.249496][   T38] audit: type=1326 audit(1779202435.367:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.258057][   T38] audit: type=1326 audit(1779202435.377:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.6.906" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6322d2ce59 code=0x7ffc0000
[  298.635502][ T5625] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  298.635535][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.635551][ T5625] usb 1-1: Product: syz
[  298.635558][ T5625] usb 1-1: Manufacturer: syz
[  298.635566][ T5625] usb 1-1: SerialNumber: syz
[  298.750503][ T8817] loop5: detected capacity change from 0 to 256
[  298.764661][ T8817] msdos: Unknown parameter 'nodo'
[  298.765257][ T8817] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  299.183627][ T5625] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  299.183690][ T5625] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  300.019685][ T5625] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  300.019744][ T5625] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  300.195463][ T5625] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  300.195524][ T8833] loop5: detected capacity change from 0 to 512
[  300.196762][ T8833] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  300.302905][ T5625] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  300.432947][ T5625] usb 1-1: USB disconnect, device number 13
[  300.482011][ T5621] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  300.482041][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  300.482070][ T5621] Tainted: [L]=SOFTLOCKUP
[  300.482077][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  300.482089][ T5621] Workqueue: hci4 hci_rx_work
[  300.482125][ T5621] Call Trace:
[  300.482133][ T5621]  <TASK>
[  300.482143][ T5621]  dump_stack_lvl+0xe8/0x150
[  300.482173][ T5621]  sysfs_create_dir_ns+0x271/0x2a0
[  300.482204][ T5621]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  300.482236][ T5621]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  300.482270][ T5621]  ? rt_spin_unlock+0x160/0x200
[  300.482301][ T5621]  kobject_add_internal+0x631/0xd10
[  300.482338][ T5621]  kobject_add+0x163/0x240
[  300.482371][ T5621]  ? __pfx_kobject_add+0x10/0x10
[  300.482405][ T5621]  ? get_device_parent+0x370/0x3a0
[  300.482432][ T5621]  device_add+0x408/0xb90
[  300.482459][ T5621]  hci_conn_add_sysfs+0xd5/0x210
[  300.482492][ T5621]  le_conn_complete_evt+0x10e6/0x16b0
[  300.482528][ T5621]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  300.482555][ T5621]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  300.482576][ T5621]  ? lockdep_hardirqs_on+0x7a/0x110
[  300.482601][ T5621]  ? skb_pull_data+0xfb/0x200
[  300.482631][ T5621]  hci_le_enh_conn_complete_evt+0x189/0x490
[  300.482668][ T5621]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  300.482698][ T5621]  hci_event_packet+0x659/0xef0
[  300.482737][ T5621]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  300.482759][ T5621]  ? __pfx_hci_event_packet+0x10/0x10
[  300.482795][ T5621]  ? preempt_count_add+0x84/0x190
[  300.482829][ T5621]  ? hci_send_to_monitor+0xe2/0x590
[  300.482859][ T5621]  hci_rx_work+0x3ee/0x1040
[  300.482897][ T5621]  ? process_one_work+0x8be/0x1630
[  300.482924][ T5621]  process_one_work+0x98b/0x1630
[  300.482980][ T5621]  ? __pfx_process_one_work+0x10/0x10
[  300.483007][ T5621]  ? do_raw_spin_lock+0x12b/0x2f0
[  300.483056][ T5621]  worker_thread+0xb49/0x1140
[  300.483092][ T5621]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  300.483127][ T5621]  kthread+0x389/0x470
[  300.483149][ T5621]  ? __pfx_worker_thread+0x10/0x10
[  300.483175][ T5621]  ? __pfx_kthread+0x10/0x10
[  300.483198][ T5621]  ret_from_fork+0x514/0xb70
[  300.483230][ T5621]  ? __pfx_ret_from_fork+0x10/0x10
[  300.483254][ T5621]  ? __switch_to+0xc79/0x1410
[  300.483278][ T5621]  ? __pfx_kthread+0x10/0x10
[  300.483306][ T5621]  ret_from_fork_asm+0x1a/0x30
[  300.483352][ T5621]  </TASK>
[  300.483478][ T5621] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  300.483534][ T5621] Bluetooth: hci4: failed to register connection device
[  302.762733][ T8876] netlink: 'syz.3.931': attribute type 10 has an invalid length.
[  303.213067][ T8876] 8021q: adding VLAN 0 to HW filter on device team0
[  303.400185][ T8876] bond0: (slave team0): Enslaving as an active interface with an up link
[  303.590326][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'.
[  306.755185][ T5625] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  306.929235][ T5625] usb 6-1: Using ep0 maxpacket: 32
[  306.966747][ T8952] netlink: 27 bytes leftover after parsing attributes in process `syz.3.957'.
[  306.985190][ T5625] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  306.985218][ T5625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.464743][ T5625] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  308.130939][ T5625] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  308.155188][ T5625] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  308.155341][ T5625] usb 6-1: media controller created
[  308.213032][ T5625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.057174][ T8977] loop3: detected capacity change from 0 to 512
[  309.061929][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.066525][ T7848] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.068002][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.074663][   T56] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.096675][ T7848] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  309.107197][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.108773][ T4196] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  309.179014][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.179078][   T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.184090][   T56] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  309.199959][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.235392][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.238232][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.239000][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.239797][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.241998][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.242604][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.244129][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.249722][ T4196] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1
[  309.409926][ T5625] az6027: usb out operation failed. (-71)
[  309.443655][ T5625] az6027: usb out operation failed. (-71)
[  309.443676][ T5625] stb0899_attach: Driver disabled by Kconfig
[  309.443686][ T5625] az6027: no front-end attached
[  309.443686][ T5625] 
[  309.444098][ T5625] az6027: usb out operation failed. (-71)
[  309.444111][ T5625] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  309.506753][ T5625] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  309.558822][ T5625] dvb-usb: schedule remote query interval to 400 msecs.
[  309.558846][ T5625] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  309.569249][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.569412][ T8977] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  309.625010][ T8977] EXT4-fs (loop3): shut down requested (1)
[  309.636557][ T5625] usb 6-1: USB disconnect, device number 4
[  310.031420][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.206500][   T56] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1
[  310.291884][ T5625] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  310.337288][ T5615] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  312.130849][ T9022] loop5: detected capacity change from 0 to 256
[  312.207771][ T9022] exfat: Deprecated parameter 'utf8'
[  312.251730][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  312.332926][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.246537][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.246733][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.246913][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.401172][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.403424][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.403654][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.406533][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.406764][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.406948][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.407096][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.407407][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.658028][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.660816][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.660859][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.660882][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.660903][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.664127][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.664182][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.666196][ T1033] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.670104][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.676938][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678566][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678607][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678629][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678651][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678672][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678692][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.678713][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.681310][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.686050][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.686352][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.688764][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.707225][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.714936][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.718693][   T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.723631][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.728330][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.739441][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.745216][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.760586][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.767589][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  313.778501][ T9022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  313.944807][ T9034] overlayfs: failed to resolve './cgroup': -2
[  313.991064][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  314.001592][ T9035] overlayfs: failed to clone upperpath
[  314.619692][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  315.420646][   T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  315.493656][   T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  316.019874][ T9056] netlink: 'syz.1.991': attribute type 39 has an invalid length.
[  316.054544][ T3963] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  316.140189][   T68] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  316.175372][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  316.660061][ T9071] binder: 9070:9071 ioctl c0306201 200000000080 returned -14
[  316.660227][ T9075] binder: 9070:9075 ioctl c0306201 2000000003c0 returned -14
[  317.689268][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  317.689368][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  318.468292][ T9103] futex_wake_op: syz.1.1008 tries to shift op by 32; fix this program
[  318.490795][ T5729] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  318.676454][ T5729] usb 4-1: config 7 has an invalid interface number: 123 but max is 0
[  318.676486][ T5729] usb 4-1: config 7 has no interface number 0
[  318.676532][ T5729] usb 4-1: config 7 interface 123 has no altsetting 0
[  318.717282][ T5729] usb 4-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=50.af
[  318.717313][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.717332][ T5729] usb 4-1: Product: syz
[  318.717346][ T5729] usb 4-1: Manufacturer: syz
[  318.717360][ T5729] usb 4-1: SerialNumber: syz
[  319.334307][ T5621] Bluetooth: hci1: unexpected event for opcode 0x2028
[  319.661466][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  320.423516][ T9127] loop5: detected capacity change from 0 to 256
[  320.434302][ T9127] exfat: Deprecated parameter 'namecase'
[  320.434342][ T9127] exfat: Deprecated parameter 'namecase'
[  320.442364][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.443106][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.443609][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.443812][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.444006][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.444210][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.444404][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.444682][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.459195][   T44] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.461952][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.461997][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.462021][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.462041][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.462062][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.462093][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.462114][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.463041][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.463980][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.467816][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.468985][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.472786][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.473025][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.475389][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.475868][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.476288][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.476642][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.479544][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.480091][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.483014][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487562][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487600][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487622][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487644][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487665][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487686][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487709][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.487738][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.491371][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.492050][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.494686][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.501004][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.501092][ T9127] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  320.502287][ T1344] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.516675][ T3195] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  320.521126][   T69] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  321.523014][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  321.587351][   T38] kauditd_printk_skb: 18 callbacks suppressed
[  321.587368][   T38] audit: type=1800 audit(1779202458.697:105): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1018" name="file1" dev="loop5" ino=1048640 res=0 errno=0
[  321.785502][ T7848] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  321.860037][   T56] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  321.942069][   T38] audit: type=1800 audit(1779202458.867:106): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1004" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  321.955401][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  321.956916][ T9096] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  321.956957][ T9096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  321.956978][ T9096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  322.978837][ T5729] uvcvideo 4-1:7.123: Found UVC 0.00 device syz (174f:5212)
[  322.978873][ T5729] uvcvideo 4-1:7.123: No valid video chain found.
[  323.113371][ T5729] usb 4-1: USB disconnect, device number 13
[  323.143606][ T9154] fuse: Bad value for 'fd'
[  323.200707][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[  323.777517][ T9163] loop5: detected capacity change from 0 to 256
[  323.779760][ T9163] vfat: Unknown parameter 'gi1/ô-å«IdéîÝã!”'
[  323.806731][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.857839][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.858910][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.859565][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.860083][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.860788][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.864036][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.985444][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  323.986689][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  324.023184][ T5811] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  325.191747][ T9188] netlink: 'syz.1.1040': attribute type 11 has an invalid length.
[  325.198397][ T9188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1040'.
[  333.209570][ T9263] netlink: 'syz.5.1063': attribute type 1 has an invalid length.
[  333.209591][ T9263] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1063'.
[  333.259214][  T822] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  333.328405][ T5729] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  333.410832][  T822] usb 1-1: Using ep0 maxpacket: 32
[  333.414783][  T822] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  333.414865][  T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.701227][  T822] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  333.893201][  T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  333.940073][  T822] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  333.940151][  T822] usb 1-1: media controller created
[  334.035853][  T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  334.372174][  T822] az6027: usb out operation failed. (-71)
[  334.372596][  T822] az6027: usb out operation failed. (-71)
[  334.372610][  T822] stb0899_attach: Driver disabled by Kconfig
[  334.372619][  T822] az6027: no front-end attached
[  334.372619][  T822] 
[  334.373015][  T822] az6027: usb out operation failed. (-71)
[  334.373029][  T822] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  334.430182][  T822] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  334.432581][  T822] dvb-usb: schedule remote query interval to 400 msecs.
[  334.432603][  T822] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  334.477748][  T822] usb 1-1: USB disconnect, device number 14
[  335.419239][  T822] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  336.742187][ T9302] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  338.715544][ T9335] tipc: Started in network mode
[  338.715576][ T9335] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  338.769144][ T9335] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  338.884947][ T9335] tipc: Enabled bearer <udp:syz0>, priority 10
[  339.877300][ T5729] tipc: Node number set to 1
[  340.722286][ T9370] loop5: detected capacity change from 0 to 512
[  340.762691][ T9370] EXT4-fs: Ignoring removed i_version option
[  340.787742][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.815351][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.816615][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.817293][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.819573][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.820272][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.820928][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.822501][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.823190][ T7848] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  340.980011][ T9370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  341.073767][   T44] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  341.120299][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  341.120346][   T56] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1
[  341.121383][ T9370] EXT4-fs (loop5): 1 truncate cleaned up
[  341.132286][ T9370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.825284][ T5623] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  342.993825][ T5623] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  342.993867][ T5623] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.993888][ T5623] usb 7-1: Product: syz
[  342.993902][ T5623] usb 7-1: Manufacturer: syz
[  342.993917][ T5623] usb 7-1: SerialNumber: syz
[  343.266077][ T3963] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  343.423483][ T3963] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  343.426581][ T7356] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.446470][ T3963] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1
[  343.699387][ T7356] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  344.194580][   T37] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  344.296944][ T5623] rtl8150 7-1:1.0: couldn't reset the device
[  344.297300][ T5623] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  344.345288][   T37] usb 6-1: Using ep0 maxpacket: 16
[  344.348149][   T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.348203][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.348231][   T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  344.348251][   T37] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  344.348274][   T37] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.370530][   T37] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  344.370560][   T37] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  344.370580][   T37] usb 6-1: Manufacturer: syz
[  344.450209][ T5623] usb 7-1: USB disconnect, device number 4
[  344.642909][   T37] usb 6-1: config 0 descriptor??
[  344.997345][   T37] rc_core: IR keymap rc-hauppauge not found
[  344.997366][   T37] Registered IR keymap rc-empty
[  344.997533][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  345.015343][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  345.038476][   T37] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  345.045352][   T37] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12
[  345.227596][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  345.689829][    C1] rc rc0: IR event FIFO is full!
[  345.689896][    C1] rc rc0: IR event FIFO is full!
[  345.689956][    C1] rc rc0: IR event FIFO is full!
[  345.689992][    C1] rc rc0: IR event FIFO is full!
[  345.690706][    C1] rc rc0: IR event FIFO is full!
[  345.690766][    C1] rc rc0: IR event FIFO is full!
[  345.690802][    C1] rc rc0: IR event FIFO is full!
[  345.690836][    C1] rc rc0: IR event FIFO is full!
[  345.690872][    C1] rc rc0: IR event FIFO is full!
[  345.691386][    C1] rc rc0: IR event FIFO is full!
[  345.691446][    C1] rc rc0: IR event FIFO is full!
[  345.692623][    C1] rc rc0: IR event FIFO is full!
[  345.694613][    C1] rc rc0: IR event FIFO is full!
[  345.694728][    C1] rc rc0: IR event FIFO is full!
[  345.694842][    C1] rc rc0: IR event FIFO is full!
[  345.694922][    C1] rc rc0: IR event FIFO is full!
[  345.695664][    C1] rc rc0: IR event FIFO is full!
[  345.695765][    C1] rc rc0: IR event FIFO is full!
[  345.697638][    C1] rc rc0: IR event FIFO is full!
[  345.698962][    C1] rc rc0: IR event FIFO is full!
[  345.699077][    C1] rc rc0: IR event FIFO is full!
[  345.700714][    C1] rc rc0: IR event FIFO is full!
[  345.701336][    C1] rc rc0: IR event FIFO is full!
[  345.701448][    C1] rc rc0: IR event FIFO is full!
[  345.701522][    C1] rc rc0: IR event FIFO is full!
[  345.701634][    C1] rc rc0: IR event FIFO is full!
[  345.701715][    C1] rc rc0: IR event FIFO is full!
[  345.701825][    C1] rc rc0: IR event FIFO is full!
[  345.701906][    C1] rc rc0: IR event FIFO is full!
[  345.704344][    C1] rc rc0: IR event FIFO is full!
[  345.704415][    C1] rc rc0: IR event FIFO is full!
[  345.704533][    C1] rc rc0: IR event FIFO is full!
[  345.704646][    C1] rc rc0: IR event FIFO is full!
[  345.705423][    C1] rc rc0: IR event FIFO is full!
[  345.705543][    C1] rc rc0: IR event FIFO is full!
[  345.705657][    C1] rc rc0: IR event FIFO is full!
[  345.714407][    C1] rc rc0: IR event FIFO is full!
[  345.714668][    C1] rc rc0: IR event FIFO is full!
[  345.715069][    C1] rc rc0: IR event FIFO is full!
[  345.715125][    C1] rc rc0: IR event FIFO is full!
[  345.717247][    C1] rc rc0: IR event FIFO is full!
[  345.717431][    C1] rc rc0: IR event FIFO is full!
[  345.717622][    C1] rc rc0: IR event FIFO is full!
[  345.718569][    C1] rc rc0: IR event FIFO is full!
[  346.193407][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.258387][    C1] rc rc0: IR event FIFO is full!
[  346.258410][    C1] rc rc0: IR event FIFO is full!
[  346.258425][    C1] rc rc0: IR event FIFO is full!
[  346.258440][    C1] rc rc0: IR event FIFO is full!
[  346.258454][    C1] rc rc0: IR event FIFO is full!
[  346.259901][    C1] rc rc0: IR event FIFO is full!
[  346.259919][    C1] rc rc0: IR event FIFO is full!
[  346.259933][    C1] rc rc0: IR event FIFO is full!
[  346.259948][    C1] rc rc0: IR event FIFO is full!
[  346.259962][    C1] rc rc0: IR event FIFO is full!
[  346.259975][    C1] rc rc0: IR event FIFO is full!
[  346.259988][    C1] rc rc0: IR event FIFO is full!
[  346.260895][    C1] rc rc0: IR event FIFO is full!
[  346.260913][    C1] rc rc0: IR event FIFO is full!
[  346.260928][    C1] rc rc0: IR event FIFO is full!
[  346.260941][    C1] rc rc0: IR event FIFO is full!
[  346.260956][    C1] rc rc0: IR event FIFO is full!
[  346.260970][    C1] rc rc0: IR event FIFO is full!
[  346.261236][    C1] rc rc0: IR event FIFO is full!
[  346.261481][    C1] rc rc0: IR event FIFO is full!
[  346.261498][    C1] rc rc0: IR event FIFO is full!
[  346.261512][    C1] rc rc0: IR event FIFO is full!
[  346.261526][    C1] rc rc0: IR event FIFO is full!
[  346.261541][    C1] rc rc0: IR event FIFO is full!
[  346.261761][    C1] rc rc0: IR event FIFO is full!
[  346.261778][    C1] rc rc0: IR event FIFO is full!
[  346.261791][    C1] rc rc0: IR event FIFO is full!
[  346.261805][    C1] rc rc0: IR event FIFO is full!
[  346.261819][    C1] rc rc0: IR event FIFO is full!
[  346.261834][    C1] rc rc0: IR event FIFO is full!
[  346.261847][    C1] rc rc0: IR event FIFO is full!
[  346.262070][    C1] rc rc0: IR event FIFO is full!
[  346.262086][    C1] rc rc0: IR event FIFO is full!
[  346.262100][    C1] rc rc0: IR event FIFO is full!
[  346.262114][    C1] rc rc0: IR event FIFO is full!
[  346.262342][    C1] rc rc0: IR event FIFO is full!
[  346.262359][    C1] rc rc0: IR event FIFO is full!
[  346.262374][    C1] rc rc0: IR event FIFO is full!
[  346.262388][    C1] rc rc0: IR event FIFO is full!
[  346.262612][    C1] rc rc0: IR event FIFO is full!
[  346.262626][    C1] rc rc0: IR event FIFO is full!
[  346.262640][    C1] rc rc0: IR event FIFO is full!
[  346.262654][    C1] rc rc0: IR event FIFO is full!
[  346.263206][    C1] rc rc0: IR event FIFO is full!
[  346.263223][    C1] rc rc0: IR event FIFO is full!
[  346.263452][    C1] rc rc0: IR event FIFO is full!
[  346.263473][    C1] rc rc0: IR event FIFO is full!
[  346.263487][    C1] rc rc0: IR event FIFO is full!
[  346.263503][    C1] rc rc0: IR event FIFO is full!
[  346.263517][    C1] rc rc0: IR event FIFO is full!
[  346.263530][    C1] rc rc0: IR event FIFO is full!
[  346.263752][    C1] rc rc0: IR event FIFO is full!
[  346.263767][    C1] rc rc0: IR event FIFO is full!
[  346.263781][    C1] rc rc0: IR event FIFO is full!
[  346.263796][    C1] rc rc0: IR event FIFO is full!
[  346.263809][    C1] rc rc0: IR event FIFO is full!
[  346.263823][    C1] rc rc0: IR event FIFO is full!
[  346.263837][    C1] rc rc0: IR event FIFO is full!
[  346.264056][    C1] rc rc0: IR event FIFO is full!
[  346.264071][    C1] rc rc0: IR event FIFO is full!
[  346.264085][    C1] rc rc0: IR event FIFO is full!
[  346.264098][    C1] rc rc0: IR event FIFO is full!
[  346.264111][    C1] rc rc0: IR event FIFO is full!
[  346.264125][    C1] rc rc0: IR event FIFO is full!
[  346.264346][    C1] rc rc0: IR event FIFO is full!
[  346.264361][    C1] rc rc0: IR event FIFO is full!
[  346.264374][    C1] rc rc0: IR event FIFO is full!
[  346.264388][    C1] rc rc0: IR event FIFO is full!
[  346.264402][    C1] rc rc0: IR event FIFO is full!
[  346.264415][    C1] rc rc0: IR event FIFO is full!
[  346.264648][    C1] rc rc0: IR event FIFO is full!
[  346.264881][    C1] rc rc0: IR event FIFO is full!
[  346.264898][    C1] rc rc0: IR event FIFO is full!
[  346.264913][    C1] rc rc0: IR event FIFO is full!
[  346.264926][    C1] rc rc0: IR event FIFO is full!
[  346.264940][    C1] rc rc0: IR event FIFO is full!
[  346.264954][    C1] rc rc0: IR event FIFO is full!
[  346.264984][    C1] rc rc0: IR event FIFO is full!
[  346.265254][    C1] rc rc0: IR event FIFO is full!
[  346.265270][    C1] rc rc0: IR event FIFO is full!
[  346.265285][    C1] rc rc0: IR event FIFO is full!
[  346.265519][    C1] rc rc0: IR event FIFO is full!
[  346.265534][    C1] rc rc0: IR event FIFO is full!
[  346.265548][    C1] rc rc0: IR event FIFO is full!
[  346.265563][    C1] rc rc0: IR event FIFO is full!
[  346.265576][    C1] rc rc0: IR event FIFO is full!
[  346.265590][    C1] rc rc0: IR event FIFO is full!
[  346.265603][    C1] rc rc0: IR event FIFO is full!
[  346.265617][    C1] rc rc0: IR event FIFO is full!
[  346.265631][    C1] rc rc0: IR event FIFO is full!
[  346.266062][    C1] rc rc0: IR event FIFO is full!
[  346.266080][    C1] rc rc0: IR event FIFO is full!
[  346.266093][    C1] rc rc0: IR event FIFO is full!
[  346.266314][    C1] rc rc0: IR event FIFO is full!
[  346.266330][    C1] rc rc0: IR event FIFO is full!
[  346.266345][    C1] rc rc0: IR event FIFO is full!
[  346.266358][    C1] rc rc0: IR event FIFO is full!
[  346.266383][    C1] rc rc0: IR event FIFO is full!
[  346.266397][    C1] rc rc0: IR event FIFO is full!
[  346.266410][    C1] rc rc0: IR event FIFO is full!
[  346.266423][    C1] rc rc0: IR event FIFO is full!
[  346.266437][    C1] rc rc0: IR event FIFO is full!
[  346.266450][    C1] rc rc0: IR event FIFO is full!
[  346.266464][    C1] rc rc0: IR event FIFO is full!
[  346.266610][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.266693][    C1] rc rc0: IR event FIFO is full!
[  346.266709][    C1] rc rc0: IR event FIFO is full!
[  346.266722][    C1] rc rc0: IR event FIFO is full!
[  346.266736][    C1] rc rc0: IR event FIFO is full!
[  346.266750][    C1] rc rc0: IR event FIFO is full!
[  346.266763][    C1] rc rc0: IR event FIFO is full!
[  346.266777][    C1] rc rc0: IR event FIFO is full!
[  346.266791][    C1] rc rc0: IR event FIFO is full!
[  346.266804][    C1] rc rc0: IR event FIFO is full!
[  346.267037][    C1] rc rc0: IR event FIFO is full!
[  346.267053][    C1] rc rc0: IR event FIFO is full!
[  346.267067][    C1] rc rc0: IR event FIFO is full!
[  346.267296][    C1] rc rc0: IR event FIFO is full!
[  346.267311][    C1] rc rc0: IR event FIFO is full!
[  346.267738][    C1] rc rc0: IR event FIFO is full!
[  346.267753][    C1] rc rc0: IR event FIFO is full!
[  346.267767][    C1] rc rc0: IR event FIFO is full!
[  346.267781][    C1] rc rc0: IR event FIFO is full!
[  346.267796][    C1] rc rc0: IR event FIFO is full!
[  346.268029][    C1] rc rc0: IR event FIFO is full!
[  346.268044][    C1] rc rc0: IR event FIFO is full!
[  346.268057][    C1] rc rc0: IR event FIFO is full!
[  346.268071][    C1] rc rc0: IR event FIFO is full!
[  346.268084][    C1] rc rc0: IR event FIFO is full!
[  346.268099][    C1] rc rc0: IR event FIFO is full!
[  346.268316][    C1] rc rc0: IR event FIFO is full!
[  346.268331][    C1] rc rc0: IR event FIFO is full!
[  346.268345][    C1] rc rc0: IR event FIFO is full!
[  346.268564][    C1] rc rc0: IR event FIFO is full!
[  346.268579][    C1] rc rc0: IR event FIFO is full!
[  346.268592][    C1] rc rc0: IR event FIFO is full!
[  346.268606][    C1] rc rc0: IR event FIFO is full!
[  346.268620][    C1] rc rc0: IR event FIFO is full!
[  346.268634][    C1] rc rc0: IR event FIFO is full!
[  346.268866][    C1] rc rc0: IR event FIFO is full!
[  346.268881][    C1] rc rc0: IR event FIFO is full!
[  346.268895][    C1] rc rc0: IR event FIFO is full!
[  346.268908][    C1] rc rc0: IR event FIFO is full!
[  346.268922][    C1] rc rc0: IR event FIFO is full!
[  346.268935][    C1] rc rc0: IR event FIFO is full!
[  346.268948][    C1] rc rc0: IR event FIFO is full!
[  346.268961][    C1] rc rc0: IR event FIFO is full!
[  346.268975][    C1] rc rc0: IR event FIFO is full!
[  346.268988][    C1] rc rc0: IR event FIFO is full!
[  346.269209][    C1] rc rc0: IR event FIFO is full!
[  346.269224][    C1] rc rc0: IR event FIFO is full!
[  346.269238][    C1] rc rc0: IR event FIFO is full!
[  346.269252][    C1] rc rc0: IR event FIFO is full!
[  346.269695][    C1] rc rc0: IR event FIFO is full!
[  346.269711][    C1] rc rc0: IR event FIFO is full!
[  346.269725][    C1] rc rc0: IR event FIFO is full!
[  346.269739][    C1] rc rc0: IR event FIFO is full!
[  346.269753][    C1] rc rc0: IR event FIFO is full!
[  346.269766][    C1] rc rc0: IR event FIFO is full!
[  346.269780][    C1] rc rc0: IR event FIFO is full!
[  346.269794][    C1] rc rc0: IR event FIFO is full!
[  346.269807][    C1] rc rc0: IR event FIFO is full!
[  346.270029][    C1] rc rc0: IR event FIFO is full!
[  346.270044][    C1] rc rc0: IR event FIFO is full!
[  346.270057][    C1] rc rc0: IR event FIFO is full!
[  346.270071][    C1] rc rc0: IR event FIFO is full!
[  346.270084][    C1] rc rc0: IR event FIFO is full!
[  346.295658][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.315328][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.813549][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.839216][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.855349][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.892268][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  346.915260][   T37] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  347.421242][   T37] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  347.421270][   T37] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  347.453777][   T37] usb 6-1: USB disconnect, device number 6
[  347.519508][ T9446] loop0: detected capacity change from 0 to 256
[  347.535264][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.535564][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.535742][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.535921][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.536091][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.536338][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.536545][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.536746][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.537142][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.537337][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.629141][ T3291] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.631090][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.632740][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.634642][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.673521][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.673576][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.673602][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.673626][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.724782][ T3291] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.808624][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.823105][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.832742][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.833081][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.834620][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.834832][   T56] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.855128][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.875889][ T3291] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.878142][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.879128][   T68] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.905325][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.905621][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.905756][ T9446] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  347.906422][ T1344] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.910883][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.965213][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969182][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969237][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969262][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969284][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969306][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969328][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  347.969350][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  348.172736][ T7848] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  348.315248][   T44] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  348.354417][ T4196] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[  348.733800][ T9448] netlink: 'syz.1.1124': attribute type 3 has an invalid length.
[  348.940156][ T5821] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[  351.045266][ T9464] ==================================================================
[  351.045287][ T9464] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240
[  351.045320][ T9464] Read of s[  351.045320][ T9464] Read of size 8 at addr ffff88803f61a140 by task syz.5.1127/9464
[  351.045339][ T9464] 
[  351.045353][ T9464] CPU: 0 UID: 0 PID: 9464 Comm: syz.5.1127 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  351.045383][ T9464] Tainted: [L]=SOFTLOCKUP
[  351.045391][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  351.045404][ T9464] Call Trace:
[  351.045412][ T9464]  <TASK>
[  351.045422][ T9464]  dump_stack_lvl+0xe8/0x150
[  351.045449][ T9464]  print_address_description+0x55/0x1e0
[  351.045475][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.045496][ T9464]  print_report+0x58/0x70
[  351.045519][ T9464]  kasan_report+0x117/0x150
[  351.045539][ T9464]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  351.045560][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.045584][ T9464]  ? ep_insert+0xbbb/0x1820
[  351.045614][ T9464]  reverse_path_check_proc+0x5b/0x240
[  351.045642][ T9464]  ? ep_insert+0xbbb/0x1820
[  351.045672][ T9464]  ep_insert+0xc6c/0x1820
[  351.045708][ T9464]  ? __pfx_ep_insert+0x10/0x10
[  351.045742][ T9464]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.045764][ T9464]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  351.045785][ T9464]  ? mutex_lock_nested+0x152/0x1d0
[  351.045812][ T9464]  ? do_epoll_ctl_file+0xc69/0xed0
[  351.045844][ T9464]  do_epoll_ctl_file+0x8bb/0xed0
[  351.045875][ T9464]  ? do_epoll_ctl_file+0xac3/0xed0
[  351.045907][ T9464]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  351.045938][ T9464]  ? __fget_files+0x3a6/0x420
[  351.045973][ T9464]  ? __fget_files+0x2a/0x420
[  351.046003][ T9464]  __se_sys_epoll_ctl+0x14e/0x210
[  351.046024][ T9464]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  351.046048][ T9464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.046067][ T9464]  do_syscall_64+0x15f/0xf80
[  351.046089][ T9464]  ? trace_irq_disable+0x3b/0x140
[  351.046108][ T9464]  ? clear_bhb_loop+0x40/0x90
[  351.046129][ T9464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.046149][ T9464] RIP: 0033:0x7f5d209fce59
[  351.046167][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.046185][ T9464] RSP: 002b:00007f5d1ec2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  351.046207][ T9464] RAX: ffffffffffffffda RBX: 00007f5d20c76090 RCX: 00007f5d209fce59
[  351.046223][ T9464] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007
[  351.046236][ T9464] RBP: 00007f5d20a92d6f R08: 0000000000000000 R09: 0000000000000000
[  351.046250][ T9464] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.046263][ T9464] R13: 00007f5d20c76128 R14: 00007f5d20c76090 R15: 00007fffd65c3cb8
[  351.046285][ T9464]  </TASK>
[  351.046291][ T9464] 
[  351.046296][ T9464] Allocated by task 9460:
[  351.046305][ T9464]  kasan_save_track+0x3e/0x80
[  351.046332][ T9464]  __kasan_slab_alloc+0x6c/0x80
[  351.046347][ T9464]  kmem_cache_alloc_noprof+0x33b/0x680
[  351.046375][ T9464]  ep_insert+0x512/0x1820
[  351.046398][ T9464]  do_epoll_ctl_file+0x8bb/0xed0
[  351.046423][ T9464]  __se_sys_epoll_ctl+0x14e/0x210
[  351.046439][ T9464]  do_syscall_64+0x15f/0xf80
[  351.046456][ T9464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.046473][ T9464] 
[  351.046477][ T9464] Freed by task 9467:
[  351.046485][ T9464]  kasan_save_track+0x3e/0x80
[  351.046508][ T9464]  kasan_save_free_info+0x46/0x50
[  351.046528][ T9464]  __kasan_slab_free+0x5c/0x80
[  351.046544][ T9464]  kmem_cache_free+0x187/0x6c0
[  351.046561][ T9464]  eventpoll_release_file+0xc2/0x240
[  351.046587][ T9464]  __fput+0x83c/0xa70
[  351.046609][ T9464]  task_work_run+0x1d9/0x270
[  351.046630][ T9464]  get_signal+0x11eb/0x1330
[  351.046654][ T9464]  arch_do_signal_or_restart+0xbc/0x840
[  351.046674][ T9464]  exit_to_user_mode_loop+0x8c/0x4d0
[  351.046692][ T9464]  do_syscall_64+0x33e/0xf80
[  351.046710][ T9464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.046727][ T9464] 
[  351.046732][ T9464] The buggy address belongs to the object at ffff88803f61a140
[  351.046732][ T9464]  which belongs to the cache ep_head of size 16
[  351.046746][ T9464] The buggy address is located 0 bytes inside of
[  351.046746][ T9464]  freed 16-byte region [ffff88803f61a140, ffff88803f61a150)
[  351.046765][ T9464] 
[  351.046769][ T9464] The buggy address belongs to the physical page:
[  351.046795][ T9464] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f61a480 pfn:0x3f61a
[  351.046818][ T9464] memcg:ffff888061d6c801
[  351.046825][ T9464] flags: 0x80000000000200(workingset|node=0|zone=1)
[  351.046847][ T9464] page_type: f5(slab)
[  351.046870][ T9464] raw: 0080000000000200 ffff888140ae4b40 ffffea000085e6d0 ffff888020afbf88
[  351.046889][ T9464] raw: ffff88803f61a480 0000000800800060 00000000f5000000 ffff888061d6c801
[  351.046900][ T9464] page dumped because: kasan: bad access detected
[  351.046913][ T9464] page_owner tracks the page as allocated
[  351.046919][ T9464] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevd), ts 39072281408, free_ts 0
[  351.046961][ T9464]  post_alloc_hook+0x1f9/0x250
[  351.046991][ T9464]  get_page_from_freelist+0x28c1/0x2940
[  351.047012][ T9464]  __alloc_frozen_pages_noprof+0x18d/0x380
[  351.047033][ T9464]  allocate_slab+0x74/0x5e0
[  351.047056][ T9464]  refill_objects+0x33c/0x3d0
[  351.047078][ T9464]  __pcs_replace_empty_main+0x373/0x720
[  351.047101][ T9464]  kmem_cache_alloc_noprof+0x433/0x680
[  351.047128][ T9464]  ep_insert+0x512/0x1820
[  351.047152][ T9464]  do_epoll_ctl_file+0x8bb/0xed0
[  351.047180][ T9464]  __se_sys_epoll_ctl+0x14e/0x210
[  351.047195][ T9464]  do_syscall_64+0x15f/0xf80
[  351.047213][ T9464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.047231][ T9464] page_owner free stack trace missing
[  351.047239][ T9464] 
[  351.047243][ T9464] Memory state around the buggy address:
[  351.047254][ T9464]  ffff88803f61a000: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  351.047268][ T9464]  ffff88803f61a080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  351.047282][ T9464] >ffff88803f61a100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  351.047292][ T9464]                                            ^
[  351.047303][ T9464]  ffff88803f61a180: 00 00 fc fc 00 00 fc fc fa fb fc fc fa fb fc fc
[  351.047316][ T9464]  ffff88803f61a200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  351.047327][ T9464] ==================================================================
[  351.068146][ T9464] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  351.068191][ T9464] CPU: 0 UID: 0 PID: 9464 Comm: syz.5.1127 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  351.068221][ T9464] Tainted: [L]=SOFTLOCKUP
[  351.068228][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  351.068241][ T9464] Call Trace:
[  351.068249][ T9464]  <TASK>
[  351.068258][ T9464]  vpanic+0x56c/0xa60
[  351.068295][ T9464]  ? __pfx_vpanic+0x10/0x10
[  351.068343][ T9464]  panic+0xc5/0xd0
[  351.068369][ T9464]  ? __pfx_panic+0x10/0x10
[  351.068395][ T9464]  ? preempt_schedule_thunk+0x16/0x40
[  351.068418][ T9464]  ? preempt_schedule_thunk+0x16/0x40
[  351.068448][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.068474][ T9464]  check_panic_on_warn+0x89/0xb0
[  351.068499][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.068527][ T9464]  end_report+0x73/0x170
[  351.068547][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.068568][ T9464]  kasan_report+0x128/0x150
[  351.068588][ T9464]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  351.068610][ T9464]  ? reverse_path_check_proc+0x5b/0x240
[  351.068633][ T9464]  ? ep_insert+0xbbb/0x1820
[  351.068662][ T9464]  reverse_path_check_proc+0x5b/0x240
[  351.068685][ T9464]  ? ep_insert+0xbbb/0x1820
[  351.068714][ T9464]  ep_insert+0xc6c/0x1820
[  351.068749][ T9464]  ? __pfx_ep_insert+0x10/0x10
[  351.068782][ T9464]  ? lockdep_hardirqs_on+0x7a/0x110
[  351.068804][ T9464]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  351.068823][ T9464]  ? mutex_lock_nested+0x152/0x1d0
[  351.068849][ T9464]  ? do_epoll_ctl_file+0xc69/0xed0
[  351.068880][ T9464]  do_epoll_ctl_file+0x8bb/0xed0
[  351.068910][ T9464]  ? do_epoll_ctl_file+0xac3/0xed0
[  351.068940][ T9464]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  351.068978][ T9464]  ? __fget_files+0x3a6/0x420
[  351.069004][ T9464]  ? __fget_files+0x2a/0x420
[  351.069036][ T9464]  __se_sys_epoll_ctl+0x14e/0x210
[  351.069056][ T9464]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  351.069080][ T9464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.069101][ T9464]  do_syscall_64+0x15f/0xf80
[  351.069122][ T9464]  ? trace_irq_disable+0x3b/0x140
[  351.069142][ T9464]  ? clear_bhb_loop+0x40/0x90
[  351.069165][ T9464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.069185][ T9464] RIP: 0033:0x7f5d209fce59
[  351.069204][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.069221][ T9464] RSP: 002b:00007f5d1ec2d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  351.069243][ T9464] RAX: ffffffffffffffda RBX: 00007f5d20c76090 RCX: 00007f5d209fce59
[  351.069258][ T9464] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007
[  351.069271][ T9464] RBP: 00007f5d20a92d6f R08: 0000000000000000 R09: 0000000000000000
[  351.069284][ T9464] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.069298][ T9464] R13: 00007f5d20c76128 R14: 00007f5d20c76090 R15: 00007fffd65c3cb8
[  351.069321][ T9464]  </TASK>
[  351.069599][ T9464] Kernel Offset: disabled