last executing test programs:

21.346273936s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2004001, &(0x7f0000002500)={[{@type={'type', 0x3d, "c7e29ee5"}}, {@creator={'creator', 0x3d, "d4675f16"}}, {@dir_umask={'dir_umask', 0x3d, 0x124d}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x11, 0x2c8, &(0x7f0000000180)="$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")
ioctl$FS_IOC_SETFLAGS(r3, 0x125f, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0)

16.594530924s ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0x12}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20)
write$tcp_congestion(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_kthread_work_execute_start\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000883933b762c361000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r9}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

14.810568704s ago: executing program 3:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '\x1c-+{@-]/)'}, {0x20, 'lowerdir'}, {0x20, 'GPL\x00'}, {0x20, 'upperdir'}, {0x20, 'upperdir'}], 0xa, "ad6fdbe98cd75214357e775a85ce395556919934d298d6fd6b3af2007abf14555ef7f6b3ab61c6bd341de239393bef512afd8342b82d650aebabebdf3227c1ec8604480f7359e310f031818267ef4a747d48b9bbe8dc744057f99d8a4fd347d27053be9ae454069f874c39133dbfb9852cf2194a7e103f9cd3ba634f944110436459f963ff1ee99a98ad837431ef56d1658e46afdf1d6b5199de8bbf4a5e5c14fc4a8cf79b89a02298ae2adba2c5d29b75f672c5812bb73b10c37013655f7dbb77a3498de49f62dff5977225f03fda64c38c28139a49a1ae"}, 0x10e)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000000c0)='./file2\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)

13.032162289s ago: executing program 3:
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
gettid()
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x9c68, 0x11900, 0x0, 0x2}, 0x0, &(0x7f0000000040)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)

12.755759986s ago: executing program 4:
ioperm(0x0, 0x7, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

12.11117065s ago: executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xd, 0x6, {0x6, 0x22, "f9aea952"}}, &(0x7f0000000040)={0x0, 0x3, 0x74, @string={0x74, 0x3, "8e11d5f077d0f7e795772b9adbbdbc1d1f945bc1402ee765693dd89f95e34fa6b73232802692cfc7167c790a4e2b3171c5c14000f0120244d701b4812818cc7636d44d4eb35fd0ce23b5438c5fe7d771710ab94b0acfd163bace092639803c5b81fa560d1c9cc6f039d6fe37f14d262a0a50"}}, &(0x7f0000000780)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x8, "dd89bddb"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xc, "aa49509d"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf708, 0x7f, 0x1, {0x22, 0x1bd}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000180)={0x20, 0xf, 0x2c, "4e774a6c21cd82b8d8f289386f3aef872d7afc5e10c11e0de1503178e4ae0e448fa2e5ba1ba8cb1fafb0ee65"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000240)={0x20, 0x1, 0x3f, "ddcb4f279d66e9745d181bf3fa13a89493cb4686e61d065414adc014292cfd02978f6ee099b7179e1b6f36f18c1e571fa691ed26867e402a4929e483395603"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0xb}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x415, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fremovexattr(r1, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200003, &(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8], 0x21, 0x1b8, &(0x7f0000000980)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES32=r3], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000cc0)={r6}, 0xc)
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="2010a7000000a70631ad5d189eefddceb76139412ecd0c4fcc552d84c22f3db56338fc05005f9fc63c845fe651d1c78b8b9a06bff1be6ede824bd4ebce915b432bc6a0f9d3c08ee2adc37110baf659817b16a6eeaa9a14d46dd1eaf69992cdc7a2d080df424ad4d78e44d01c24a59d4e575ebd19e906e55e455307988f09c41f35405079b095785c45332c85a181c5288b8b3224c0785b9ec315b5f91328342a5325c9723b8f71047802f49ad6"], &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x14, 0x74, "5c562b696754fb4851fd284d05ac5142f6abbb9fec6beea5caf464b266eac2da5d42a93bc8c7abba019afbd63b256818e81eacd8f8e186465c2834d5ddb03f6702a79afcd2bc38f5741c246b8ead1203b0dd829aea36b734d22c746e946cc25460dc16e2d2a68f115a6f2629f93c05f071a10a13"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x100, 0x3f, 0x6, 0x136, 0x8, 0x2, 0x7ff, 0xfffffff7, 0x3f, 0x1, 0xc6ed, 0x7}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}})

11.7725973s ago: executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/56, 0x38}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffffffffffb, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x10000000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000c80), 0xff, 0x23f, &(0x7f0000000540)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x8240, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800000000001ea0000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0x10}, 0x90)
socket$isdn_base(0x22, 0x3, 0x0)

10.119268079s ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24)
sigaltstack(&(0x7f0000008280)={0x0}, 0x0)
sigaltstack(&(0x7f0000008440)={0x0, 0x80000003}, 0x0)
accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0)
r3 = socket(0x1a, 0x5, 0xfffffffb)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
gettid()
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000500)=[{0x14}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]})
semget$private(0x0, 0x1, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'bridge0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2006, 0x0, 0x0, 0xc0}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000380)={{0x0, 0x27}, 0x100, './file0\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$eJzs3UFrY1UUAODz0jSNukgRN4qLB7pwVaZu3bTKCGJXSgR1ocXpgCRhIIWAI5iZ1fwCl/4Pf4IbN/4Dwa3gri6qV17ee01iX9PS1hT1+1an995z73nvQrrKyeevjgYPHmXx9OTn6HazaO3FXvyZxXa0ovYk2nFe0xgA8G/we0rxW7pOZrt1+9UAAOtQ/v8v3XUtAMB6fPjxJ+/vHxzc/yDPu/Fy79mkn0XE6NmkX87vP4wvYxhHcS96cRqRzpTxu+8d3I92XtiO10fTSb/IHH32Y7X//q8Rs/zd6MV2c/5uXlrIn076m/F85LH/cLMutRcvNee/2ZAf/U688dpC/TvRi5++iEcxjAdR5M7zv9nN83fStydff1ocU+RnrehvzdbNpY113gsAAAAAAAAAAAAAAAAAAAAAAP9tO3mele17Zv17iqGq/87G6Wx+J69tL/fnKfOzeqOyP1CKqkXPNMV3dX+de3mep2rhPL8dr7T9iAAAAAAAAAAAAAAAAAAAAAAUjr96PDgcDo/GtxLU3QDqr/Vfd5+9+cjWUrkNi7euftZit4Gi1pWLo92O1RuepNLlz9WqD21e89zFUzcItuaX+1GUQX0xN9o5/e2Fv/h2+ffjwWFeralf8uAwu+ysbr3P94tTnbjpS0izCk/T8p12z0pdzurc0pvvvNA49UdK6Wr7vPVLeUfVSDZrsXG10zeroPEBi6B7/i5+uHjDCz8yNq75UQMAAAAAAAAAAAAAAAAAAFyi/K7vk6PxccPk05WprX+sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYs/L3/4dH47OgGxHLI+eCaZW8ak0VdGJ8fMePCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/AXwEAAP//wZJM4A==")
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

9.341073632s ago: executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)

8.874509566s ago: executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="be3c94d8", 0x4)

8.316252931s ago: executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010100000003"], 0x57)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.246226345s ago: executing program 1:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '\x1c-+{@-]/)'}, {0x20, 'lowerdir'}, {0x20, 'GPL\x00'}, {0x20, 'upperdir'}, {0x20, 'upperdir'}], 0xa, "ad6fdbe98cd75214357e775a85ce395556919934d298d6fd6b3af2007abf14555ef7f6b3ab61c6bd341de239393bef512afd8342b82d650aebabebdf3227c1ec8604480f7359e310f031818267ef4a747d48b9bbe8dc744057f99d8a4fd347d27053be9ae454069f874c39133dbfb9852cf2194a7e103f9cd3ba634f944110436459f963ff1ee99a98ad837431ef56d1658e46afdf1d6b5199de8bbf4a5e5c14fc4a8cf79b89a02298ae2adba2c5d29b75f672c5812bb73b10c37013655f7dbb77a3498de49f62dff5977225f03fda64c38c28139a49a1ae"}, 0x10e)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000000c0)='./file2\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)

8.19088672s ago: executing program 4:
r0 = socket$kcm(0x21, 0x2, 0x2)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000005c0)='./bus\x00', 0x1008008, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c6e6f646e74732c00946044e976db5f6f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1cc, &(0x7f0000000200)="$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")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x12c, 0xb, 0x5, 0x801, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x8}, [@generic="d34b94fb7160", @generic="2335ce885954096e29821aeede92341e5a9afb7949a4", @generic="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"]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x11)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001c40)='batadv0\x00', 0x10)
sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8252", 0x2}], 0x1}}], 0x1, 0x4400c800)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', '', [], 0xa, "6d18dccb2fc7b68dfee2459853e969589c244c"}, 0x17)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="a989d7a486802e983a55914c116f000000010000d4fc", 0x16}], 0x1)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0xffffff3c, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0xffffffc7, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x64}}, 0x4000000)

8.002362767s ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0x12}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20)
write$tcp_congestion(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_kthread_work_execute_start\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000883933b762c361000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r9}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

7.580197925s ago: executing program 3:
ioperm(0x0, 0x7, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

7.426636361s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000))
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2004001, &(0x7f0000002500)={[{@type={'type', 0x3d, "c7e29ee5"}}, {@creator={'creator', 0x3d, "d4675f16"}}, {@dir_umask={'dir_umask', 0x3d, 0x124d}}, {@codepage={'codepage', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}]}, 0x11, 0x2c8, &(0x7f0000000180)="$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")
ioctl$FS_IOC_SETFLAGS(r3, 0x125f, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0)

6.496098004s ago: executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x20}, {0x6}]})
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}}], 0x1, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xc, 0x0, &(0x7f00000000c0))
r2 = userfaultfd(0x80001)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@default={0x98, 0x92, 0x9c, 0xaa, 0xb0, 0x40, 0x7}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@default, @null, @bcast, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0)

6.022651894s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000040)={0x1})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup3(r0, r3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000100003050300000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414bb08000700e0000001"], 0x50}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0)

5.406857363s ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

4.774949548s ago: executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)

4.769574916s ago: executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="be3c94d8", 0x4)

4.355147643s ago: executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00', <r1=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="05040006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b3a2543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.036263782s ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24)
sigaltstack(&(0x7f0000008280)={0x0, 0x80000002}, 0x0)
sigaltstack(0x0, 0x0)
accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x0)
r3 = socket(0x1a, 0x5, 0xfffffffb)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
gettid()
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000500)=[{0x14}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]})
semget$private(0x0, 0x1, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'bridge0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2006, 0x0, 0x0, 0xc0}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000380)={{0x0, 0x27}, 0x100, './file0\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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")
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

3.965710064s ago: executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0xd, 0x6, {0x6, 0x22, "f9aea952"}}, &(0x7f0000000040)={0x0, 0x3, 0x74, @string={0x74, 0x3, "8e11d5f077d0f7e795772b9adbbdbc1d1f945bc1402ee765693dd89f95e34fa6b73232802692cfc7167c790a4e2b3171c5c14000f0120244d701b4812818cc7636d44d4eb35fd0ce23b5438c5fe7d771710ab94b0acfd163bace092639803c5b81fa560d1c9cc6f039d6fe37f14d262a0a50"}}, &(0x7f0000000780)={0x0, 0x22, 0xc, {[@main=@item_4={0x3, 0x0, 0x8, "dd89bddb"}, @local=@item_012={0x0, 0x2, 0x4}, @local=@item_012={0x0, 0x2, 0x5}, @main=@item_4={0x3, 0x0, 0xc, "aa49509d"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf708, 0x7f, 0x1, {0x22, 0x1bd}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000180)={0x20, 0xf, 0x2c, "4e774a6c21cd82b8d8f289386f3aef872d7afc5e10c11e0de1503178e4ae0e448fa2e5ba1ba8cb1fafb0ee65"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000240)={0x20, 0x1, 0x3f, "ddcb4f279d66e9745d181bf3fa13a89493cb4686e61d065414adc014292cfd02978f6ee099b7179e1b6f36f18c1e571fa691ed26867e402a4929e483395603"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0xb}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x415, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fremovexattr(r1, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200003, &(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES16, @ANYRES8], 0x21, 0x1b8, &(0x7f0000000980)="$eJzKKC4sZmBgYPj7sSaZwYEBDNgY+BhuMzIysDAwMMgzQsTc2CH0KzYIrQflv2CB0JpQ8UVQ+j8UFFdWZSfm5KQW0ZCBXY4J4hAGUkwEuxyqDyZ15WMsP6nmDCkGIxkBhcIAJQFqOuw//2AIFpIZ8cyQcKSOgV8G2jtFLIMiVIlnMGJKIbj2jUwMb8Ep/frHmmQQIwFaSoHEUiCYEVkNKDaPIKmRYgFjRmaG/3A1oJTPyAApafRLcgv0iyurdDNzE9NT01PzjIyMzQxMDAxMjfTTMnNSDSAkI5IVsCIKRIPKXlCZyokkz8rAwHAPWsByMSCBlyBrEU6DyjMi6wWVw/+hhbSGMgMKYELSywylGRkOwPVCtTGAgiCEQY2Bg4GBobyBEUlUBWwKCwPYSx4MjAzMUI4h1LkMjHC7OMASesn5OSntDIwMjDBtyxlY4GYYPmZgBXPYEG6EyBhbNMCE2qG0CpT2gNLLofRjKA2rs2B1EQvYhCdQnkYDyIkViSUlRYZs56FaDEG1HljMiA0mayTQgBxgIFs/saF6ToadYRSMglEwCkbBKBgFo2CIAUAAAAD//y3IU+A=")
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
pipe2(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05", @ANYRES32=r3], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000cc0)={r6}, 0xc)
syz_usb_disconnect(r0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="2010a7000000a70631ad5d189eefddceb76139412ecd0c4fcc552d84c22f3db56338fc05005f9fc63c845fe651d1c78b8b9a06bff1be6ede824bd4ebce915b432bc6a0f9d3c08ee2adc37110baf659817b16a6eeaa9a14d46dd1eaf69992cdc7a2d080df424ad4d78e44d01c24a59d4e575ebd19e906e55e455307988f09c41f35405079b095785c45332c85a181c5288b8b3224c0785b9ec315b5f91328342a5325c9723b8f71047802f49ad6"], &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x14, 0x74, "5c562b696754fb4851fd284d05ac5142f6abbb9fec6beea5caf464b266eac2da5d42a93bc8c7abba019afbd63b256818e81eacd8f8e186465c2834d5ddb03f6702a79afcd2bc38f5741c246b8ead1203b0dd829aea36b734d22c746e946cc25460dc16e2d2a68f115a6f2629f93c05f071a10a13"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1f}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x100, 0x3f, 0x6, 0x136, 0x8, 0x2, 0x7ff, 0xfffffff7, 0x3f, 0x1, 0xc6ed, 0x7}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}})

3.645395568s ago: executing program 4:
rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8)
gettid()
timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x9c68, 0x11900, 0x0, 0x2}, &(0x7f0000000000)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)

2.372019806s ago: executing program 1:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010100000003"], 0x57)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'})
sendmsg$nl_route(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.613173396s ago: executing program 1:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [{}, {0x20, '\x1c-+{@-]/)'}, {0x20, 'lowerdir'}, {0x20, 'GPL\x00'}, {0x20, 'upperdir'}, {0x20, 'upperdir'}], 0xa, "ad6fdbe98cd75214357e775a85ce395556919934d298d6fd6b3af2007abf14555ef7f6b3ab61c6bd341de239393bef512afd8342b82d650aebabebdf3227c1ec8604480f7359e310f031818267ef4a747d48b9bbe8dc744057f99d8a4fd347d27053be9ae454069f874c39133dbfb9852cf2194a7e103f9cd3ba634f944110436459f963ff1ee99a98ad837431ef56d1658e46afdf1d6b5199de8bbf4a5e5c14fc4a8cf79b89a02298ae2adba2c5d29b75f672c5812bb73b10c37013655f7dbb77a3498de49f62dff5977225f03fda64c38c28139a49a1ae"}, 0x10e)
chdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000ef0285b72eae795b11ad261777db75186baf0b2792ade1f10772662181fe046096c5dfe96334e2d836395560230500ef286f21c974d520c247fd200851c50b2dd5e5f6b23909a23ee27007dae2a0fd08dbf92809a931196df3be84781f7ecafa0a4bcf7e01a23999fdfb4b490f6cfe5edf3850576acb265f2ee288a85dfe7c79e969b738dbc61171dfd8f5e33fbf1ee05bc5bdeb164dc2458455e3ba438c9109dd001ad93df3fc235bed50ffce5ea79cfc8cf7d53a031691362ba21394bd614ec41f636ec0e299e370f5631acfab526519a36f963679457241bc05a307f8be0c828a43ed21ecdd1ee2b9b7ae315e5b515c71c39bf4b45f5e3f7cd3f6404fc93cf55949f0c3a7b87f86120153725784e98975e8617ffc7e8cc497f437853d9c04b195fa52848dd1555796b3cdf2527d7929631cca05e27c28566d2c47699bc6c3f5f766c3cb8cd6a4a46895dc5b44d224a0b3c2ca8087486aead1d034d94d32ad677b28b10ed58f8de2d5a8d25c7c62ae49ba35be16888ea8da622daf5f0f02d9c08752113ab1ec6bde50940e9bf33f91a6c5056aabc04eedfeb6535540e5c027ff4df6589cb47171bfbb564a23508f2b34570d5ef2bb8e9274d5d40af19b0afe0c774b5623070000008be42828b4cb3d6cf6930f5c4c71563e4eb0d341dc742bdb802b498fef8490b52ad16e131d8e3142ef3ffba81085ce4a028c7af46774b391e2124fcd93ff05c21ad0da384ff0017957481ee790b301e3e817c3b651bb99090189eed2862f89e6b5ca8e62a5f5ff0dc6ed83392fd551d0eedc491b3df83509d2fa1023eb77b8a13de09e22a7f19088bcbd8f47ad5a964ab6bbb94784d31bae3fb66ffe0e9913d32301c844e58f000094f5766dc1ca5e8cfee332a28809591c14098f71a7bdcb88186bcd36a2ecce33a3048f6f97f14dac56e84a1fdfdee2bcd21132632905c060b3aca1d4446f456e2088e7257d575e8465d7ed767e415a616d1458a32e904a1ffaf090c2884d4a56958ab143cdb95b6c39e04010b888bd95b09d50d7e6c5c084aa8cdc21890b7eb835d28f977ab43670412afe8361b60bf361aa4d351214801c57dad50ad6179a7507011e3060badbe396b3fb928c7e8b7289b227c6b313e2852c5cd124771bef02f431afe50e7bf614eeda252393d85cc0a9e491479270ae41b9bcd44eabfd75bab74cb4d2a50b566b4c21aea43e27cd304a45f2f79f4eb7ff4fd1256a00adf186c4a754f28bf948977a78114f7a186db5a1bf4ced7261bdb5e3c1124462961f03dfbbb308be4c3c3f7038901da597f2ec5edca4e0db84130f0b3cee139da076250e961c8c52216c63a148fb3a06057504b81ca783193a90a98b1f4e0f2c0242f91aa62732881446fcd09a664ffa8de9ad4e7ea99895535069f017dee4c557740eb50291231a44cb9693b62bf38613750a79ef892bd2748243553b6b02571932f6d167cf32bd420faa6362d24d8c83"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c86dd", 0x0, 0x4000}, 0x28)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000000c0)='./file2\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)

1.542939607s ago: executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0x12}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20)
write$tcp_congestion(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_kthread_work_execute_start\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000883933b762c361000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r9}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)

415.671062ms ago: executing program 0:
ioperm(0x0, 0x7, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0))

0s ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

kernel console output (not intermixed with test programs):

07 failed with error -12
[ 1004.882694][ T5138] usb 2-1: USB disconnect, device number 15
[ 1004.984643][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.017593][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.036551][ T3534] bond0 (unregistering): Released all slaves
[ 1005.094025][T10852] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1005.103044][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1005.131158][T10852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1005.223608][T10906] XFS (loop0): Ending clean mount
[ 1005.278049][T10852] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1005.285601][T10852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1005.312251][T10852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1005.369239][T10903] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1005.380785][T10903] XFS (loop0): Unmount and run xfs_repair
[ 1005.386957][T10903] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1005.394796][T10903] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1005.404104][T10903] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.413709][T10903] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1005.423073][T10903] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1005.432614][T10903] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.442130][T10903] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1005.451584][T10903] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1005.460727][T10903] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1005.513330][T10906] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1005.533145][T10906] XFS (loop0): Unmount and run xfs_repair
[ 1005.539134][T10906] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1005.547388][T10906] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1005.556763][T10906] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.572699][T10906] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1005.583853][T10906] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1005.593205][T10906] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.602423][T10906] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1005.611768][T10906] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1005.620910][T10906] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1005.638678][T10903] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1005.650186][T10903] XFS (loop0): Unmount and run xfs_repair
[ 1005.656318][T10903] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1005.664132][T10903] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1005.678186][T10903] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.688807][T10903] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1005.698156][T10903] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1005.707609][T10903] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1005.718100][T10903] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1005.727395][T10903] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1005.736668][T10903] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1006.115181][ T7064] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1006.146320][T10931] loop1: detected capacity change from 0 to 164
[ 1006.148846][T10852] hsr_slave_0: entered promiscuous mode
[ 1006.254029][T10852] hsr_slave_1: entered promiscuous mode
[ 1006.266337][T10852] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1006.275592][T10852] Cannot create hsr debugfs directory
[ 1006.321884][T10856] Bluetooth: hci1: command tx timeout
[ 1006.660719][ T3534] hsr_slave_0: left promiscuous mode
[ 1006.710774][ T3534] hsr_slave_1: left promiscuous mode
[ 1006.740618][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1006.748683][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1006.793953][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1006.810134][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1006.907674][ T3534] veth1_macvtap: left promiscuous mode
[ 1006.913925][ T3534] veth0_macvtap: left promiscuous mode
[ 1006.919902][ T3534] veth1_vlan: left promiscuous mode
[ 1006.927745][ T3534] veth0_vlan: left promiscuous mode
[ 1008.109708][ T3534] team0 (unregistering): Port device team_slave_1 removed
[ 1008.161425][ T3534] team0 (unregistering): Port device team_slave_0 removed
[ 1008.956056][   T29] audit: type=1804 audit(1717848852.719:393): pid=10946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3820292254/syzkaller.9EAFUs/232/bus" dev="sda1" ino=1940 res=1 errno=0
[ 1009.213947][T10949] NILFS (nbd0): device size too small
[ 1009.337759][T10953] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1009.695967][ T5653] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1010.122670][T10852] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1010.247816][T10852] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1010.388399][T10852] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1010.435691][ T5653] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[ 1010.445508][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.453903][ T5653] usb 4-1: Product: syz
[ 1010.458342][ T5653] usb 4-1: Manufacturer: syz
[ 1010.463331][ T5653] usb 4-1: SerialNumber: syz
[ 1010.510497][T10852] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1010.545000][ T5653] usb 4-1: config 0 descriptor??
[ 1010.601719][ T5653] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[ 1010.931020][ T5653] usb 4-1: USB disconnect, device number 6
[ 1011.470763][T10963] loop0: detected capacity change from 0 to 32768
[ 1011.749509][T10963] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1012.112581][T10966] loop2: detected capacity change from 0 to 40427
[ 1012.146566][T10966] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1012.154804][T10966] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1012.280407][T10966] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1012.512258][T10963] XFS (loop0): Ending clean mount
[ 1012.699212][T10966] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1012.706809][T10966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1012.814878][T10963] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1012.826828][T10963] XFS (loop0): Unmount and run xfs_repair
[ 1012.833585][T10963] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1012.844307][T10963] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1012.853614][T10963] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1012.863005][T10963] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1012.873797][T10963] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1012.883140][T10963] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1012.892428][T10963] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1012.901709][T10963] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1012.910853][T10963] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1012.923058][T10985] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1012.935474][T10985] XFS (loop0): Unmount and run xfs_repair
[ 1012.949096][T10985] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1012.959782][T10985] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1012.973720][T10985] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1012.984091][T10985] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1012.994323][T10985] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1013.004604][T10985] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1013.014752][T10985] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1013.025035][T10985] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1013.036073][T10985] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1013.299777][T10852] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1014.223305][ T7064] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1014.244501][T10852] 8021q: adding VLAN 0 to HW filter on device team0
[ 1014.401389][T10909] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1014.409281][T10909] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1014.482671][T10909] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1014.490463][T10909] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1016.342601][T10856] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1017.509082][T11005] NILFS (nbd1): device size too small
[ 1017.785145][ T5658] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1018.091472][ T5658] usb 4-1: Using ep0 maxpacket: 32
[ 1018.232082][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1018.244244][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1018.256006][ T5658] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1018.267588][ T5658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.354359][ T5658] usb 4-1: config 0 descriptor??
[ 1018.383352][T11002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1018.432330][T10852] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1018.444407][ T5658] hub 4-1:0.0: USB hub found
[ 1018.681836][ T5658] hub 4-1:0.0: 2 ports detected
[ 1018.782928][T11012] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1019.182169][   T29] audit: type=1804 audit(1717848862.959:394): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2162412539/syzkaller.kw9kpZ/304/bus" dev="sda1" ino=1958 res=1 errno=0
[ 1020.445456][T10882] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1020.781682][T10909] usb 4-1: USB disconnect, device number 7
[ 1020.808512][T11028] loop2: detected capacity change from 0 to 2048
[ 1020.837156][T10852] veth0_vlan: entered promiscuous mode
[ 1020.957158][T10852] veth1_vlan: entered promiscuous mode
[ 1021.094053][T11028] loop2: detected capacity change from 0 to 256
[ 1021.105234][T11028] FAT-fs (loop2): Unrecognized mount option "/dev/sequencer2" or missing value
[ 1021.116174][T10882] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[ 1021.125656][T10882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.139468][T10882] usb 2-1: Product: syz
[ 1021.145716][T10882] usb 2-1: Manufacturer: syz
[ 1021.150601][T10882] usb 2-1: SerialNumber: syz
[ 1021.196346][T10882] usb 2-1: config 0 descriptor??
[ 1021.297256][T10882] go7007 2-1:0.0: probe with driver go7007 failed with error -12
[ 1021.326363][T10852] veth0_macvtap: entered promiscuous mode
[ 1021.387383][T10852] veth1_macvtap: entered promiscuous mode
[ 1021.509800][ T5138] usb 2-1: USB disconnect, device number 16
[ 1021.535049][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1021.535168][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.535246][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1021.535345][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.535417][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1021.535512][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.535592][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1021.535693][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.551694][T10852] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1021.631122][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1021.631408][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.631488][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1021.631585][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.631662][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1021.631757][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.631835][T10852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1021.631930][T10852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1021.637099][T10852] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1021.698545][T10852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.698788][T10852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.699028][T10852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1021.699265][T10852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1022.941676][T11035] loop3: detected capacity change from 0 to 32768
[ 1022.946451][ T1220] ieee802154 phy0 wpan0: encryption failed: -22
[ 1022.946744][ T1220] ieee802154 phy1 wpan1: encryption failed: -22
[ 1023.052259][T11035] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1023.466234][T11035] XFS (loop3): Ending clean mount
[ 1023.538110][T11033] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1023.538538][T11033] XFS (loop3): Unmount and run xfs_repair
[ 1023.538632][T11033] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 1023.538761][T11033] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1023.538880][T11033] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.538994][T11033] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1023.539110][T11033] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1023.539233][T11033] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.539351][T11033] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1023.539469][T11033] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1023.539590][T11033] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1023.562530][T11033] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1023.562844][T11033] XFS (loop3): Unmount and run xfs_repair
[ 1023.562934][T11033] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 1023.563058][T11033] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1023.563182][T11033] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.563287][T11033] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1023.563402][T11033] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1023.563522][T11033] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.563641][T11033] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1023.563752][T11033] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1023.563869][T11033] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1023.571029][T11033] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1023.571592][T11033] XFS (loop3): Unmount and run xfs_repair
[ 1023.571683][T11033] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[ 1023.571808][T11033] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1023.571928][T11033] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.572045][T11033] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1023.572164][T11033] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1023.572277][T11033] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1023.572393][T11033] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1023.572510][T11033] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1023.572627][T11033] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1023.726201][ T6618] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1023.963835][T10856] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1024.707351][T11062] NILFS (nbd0): device size too small
[ 1025.624256][T11071] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1026.314363][T11075] loop2: detected capacity change from 0 to 4096
[ 1026.460380][T11075] NILFS (loop2): invalid segment: Checksum error in segment payload
[ 1026.469484][T11075] NILFS (loop2): trying rollback from an earlier position
[ 1026.603221][T11075] NILFS (loop2): recovery complete
[ 1026.620491][T11085] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1028.044883][T10882] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1028.234199][ T5653] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1028.274829][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.283378][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.411995][T10882] usb 3-1: Using ep0 maxpacket: 32
[ 1028.492134][ T5138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1028.500482][ T5138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.553702][T10882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1028.565408][T10882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1028.577611][T10882] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1028.587107][T10882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.655724][T10882] usb 3-1: config 0 descriptor??
[ 1028.687159][T11092] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1028.752537][T10882] hub 3-1:0.0: USB hub found
[ 1028.844062][ T5653] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08
[ 1028.853671][ T5653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.862134][ T5653] usb 4-1: Product: syz
[ 1028.866574][ T5653] usb 4-1: Manufacturer: syz
[ 1028.871667][ T5653] usb 4-1: SerialNumber: syz
[ 1028.907246][ T5653] usb 4-1: config 0 descriptor??
[ 1028.981941][T10882] hub 3-1:0.0: 2 ports detected
[ 1029.012672][ T5653] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[ 1029.170757][ T5653] usb 4-1: USB disconnect, device number 8
[ 1030.494676][T11105] loop4: detected capacity change from 0 to 32768
[ 1030.566162][T11105] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1030.587273][T10856] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1030.931846][T11105] XFS (loop4): Ending clean mount
[ 1031.059379][T11105] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1031.075391][T11105] XFS (loop4): Unmount and run xfs_repair
[ 1031.084384][T11105] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1031.092223][T11105] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1031.095405][ T5653] usb 3-1: USB disconnect, device number 20
[ 1031.101402][T11105] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.101524][T11105] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1031.101642][T11105] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1031.101758][T11105] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.101868][T11105] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1031.101985][T11105] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1031.102102][T11105] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1031.188833][T11127] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1031.201125][T11127] XFS (loop4): Unmount and run xfs_repair
[ 1031.207300][T11127] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1031.215050][T11127] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1031.224461][T11127] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.236672][T11127] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1031.247266][T11127] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1031.256984][T11127] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.266630][T11127] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1031.283790][T11127] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1031.295273][T11127] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1031.307529][T11105] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1031.318767][T11105] XFS (loop4): Unmount and run xfs_repair
[ 1031.324991][T11105] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1031.336384][T11105] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1031.345698][T11105] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.354954][T11105] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1031.364272][T11105] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1031.377803][T11105] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.387242][T11105] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1031.396473][T11105] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1031.405892][T11105] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1031.863653][T10852] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1031.923646][T11134] NILFS (nbd3): device size too small
[ 1032.956971][T11147] loop0: detected capacity change from 0 to 256
[ 1033.371648][T11147] FAT-fs (loop0): Directory bread(block 64) failed
[ 1033.378516][T11147] FAT-fs (loop0): Directory bread(block 65) failed
[ 1033.385636][T11147] FAT-fs (loop0): Directory bread(block 66) failed
[ 1033.392817][T11147] FAT-fs (loop0): Directory bread(block 67) failed
[ 1033.399808][T11147] FAT-fs (loop0): Directory bread(block 68) failed
[ 1033.406732][T11147] FAT-fs (loop0): Directory bread(block 69) failed
[ 1033.413858][T11147] FAT-fs (loop0): Directory bread(block 70) failed
[ 1033.428546][T11147] FAT-fs (loop0): Directory bread(block 71) failed
[ 1033.437872][T11147] FAT-fs (loop0): Directory bread(block 72) failed
[ 1033.444843][T11147] FAT-fs (loop0): Directory bread(block 73) failed
[ 1033.503177][T11144] loop2: detected capacity change from 0 to 4096
[ 1033.556531][T11144] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[ 1033.819272][T11144] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1033.895019][T11144] ntfs3: loop2: ino=1e, "file1" failed to parse mft record
[ 1033.902951][T11144] ntfs3: loop2: ino=1e, "file1" attr_set_size
[ 1034.090742][T11155] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1034.798007][T10856] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1035.001068][T11156] loop4: detected capacity change from 0 to 4096
[ 1035.098014][T11156] NILFS (loop4): invalid segment: Checksum error in segment payload
[ 1035.106598][T11156] NILFS (loop4): trying rollback from an earlier position
[ 1035.237637][T11156] NILFS (loop4): recovery complete
[ 1035.376513][T11169] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1036.221600][T11168] loop2: detected capacity change from 0 to 32768
[ 1036.482666][T11168] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1036.869061][T11168] XFS (loop2): Ending clean mount
[ 1036.912389][T11166] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1036.923623][T11166] XFS (loop2): Unmount and run xfs_repair
[ 1036.929601][T11166] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1036.937623][T11166] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1036.946904][T11166] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1036.956267][T11166] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1036.966122][T11166] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1036.975405][T11166] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1036.984701][T11166] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1036.994078][T11166] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1037.013356][T11166] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1037.023405][T11168] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1037.034666][T11168] XFS (loop2): Unmount and run xfs_repair
[ 1037.040645][T11168] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1037.048459][T11168] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1037.057890][T11168] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1037.067107][T11168] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1037.076375][T11168] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1037.085617][T11168] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1037.094894][T11168] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1037.104135][T11168] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1037.121624][T11168] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1037.136862][T11166] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1037.149160][T11166] XFS (loop2): Unmount and run xfs_repair
[ 1037.155330][T11166] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1037.163176][T11166] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1037.172480][T11166] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1037.181873][T11166] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1037.191118][T11166] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1037.200423][T11166] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1037.213333][T11166] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1037.223944][T11166] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1037.233249][T11166] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1037.400151][ T6395] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1037.507100][T11198] NILFS (nbd1): device size too small
[ 1037.603560][ T5138] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1037.839328][T11202] loop3: detected capacity change from 0 to 8
[ 1037.863541][ T5138] usb 5-1: Using ep0 maxpacket: 32
[ 1037.890238][T11202] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1037.898562][T11202] SQUASHFS error: Failed to read block 0x91: -5
[ 1037.905467][T11202] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1037.913016][T11202] SQUASHFS error: Unable to read inode 0x11f
[ 1038.001929][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1038.013889][ T5138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1038.025715][ T5138] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1038.038056][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.103822][ T5138] usb 5-1: config 0 descriptor??
[ 1038.123314][T11193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1038.169555][ T5138] hub 5-1:0.0: USB hub found
[ 1038.366001][ T5138] hub 5-1:0.0: 2 ports detected
[ 1038.526401][T10909] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1038.903396][T10909] usb 4-1: config 0 has no interfaces?
[ 1038.909425][T10909] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1038.919631][T10909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.984567][T10909] usb 4-1: config 0 descriptor??
[ 1039.134678][T10856] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 1039.364619][T11209] loop0: detected capacity change from 0 to 4096
[ 1039.397040][T11209] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1039.850426][T11209] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1039.860264][T11216] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1039.920870][T11209] ntfs3: loop0: ino=1e, "file1" failed to parse mft record
[ 1039.928889][T11209] ntfs3: loop0: ino=1e, "file1" attr_set_size
[ 1039.957460][T10882] usb 4-1: USB disconnect, device number 9
[ 1040.515744][ T5138] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 1040.531461][T10909] usb 5-1: USB disconnect, device number 14
[ 1042.216358][T11234] loop1: detected capacity change from 0 to 32768
[ 1042.295567][T11234] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1042.678718][T11234] XFS (loop1): Ending clean mount
[ 1042.793510][T11234] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1042.804886][T11234] XFS (loop1): Unmount and run xfs_repair
[ 1042.810878][T11234] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1042.818777][T11234] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1042.828156][T11234] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1042.837581][T11234] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1042.851083][T11234] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1042.860437][T11234] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1042.871533][T11234] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1042.880681][T11234] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1042.890175][T11234] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1042.900022][T10856] Bluetooth: hci5: SCO packet for unknown connection handle 0
[ 1042.900996][T11232] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1042.920549][T11232] XFS (loop1): Unmount and run xfs_repair
[ 1042.926695][T11232] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1042.934677][T11232] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1042.951909][T11232] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1042.963395][T11232] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1042.972698][T11232] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1042.981949][T11232] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1042.991118][T11232] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1043.001170][T11232] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1043.010465][T11232] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1043.055365][T11234] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1043.066758][T11234] XFS (loop1): Unmount and run xfs_repair
[ 1043.072898][T11234] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1043.080581][T11234] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1043.089903][T11234] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1043.094813][T11255] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™�…EŸ8-ö¤ ™�ŠÇÅ–èEeÕ¬(�	IrÝ\•žu}ibˆŒ�ÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh<yÞ¯ðÕMÈv÷«^7 !JÐ>–O„h'®ÈûrK1‚\kU{!�e½úó¬Üš7»ßß
[ 1043.094813][T11255] ÄUúeâ[¦ÓÎ%#s'
[ 1043.099067][T11234] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1043.131834][T11234] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1043.140979][T11234] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1043.153943][T11234] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1043.164165][T11234] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1043.173468][T11234] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1043.313521][ T6672] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1043.423528][T11255] loop3: detected capacity change from 0 to 512
[ 1043.488198][T11255] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[ 1043.561709][T11255] EXT4-fs (loop3): 2 truncates cleaned up
[ 1043.567883][T11255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1044.304685][T11255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap
[ 1044.343622][T11263] loop0: detected capacity change from 0 to 4096
[ 1044.362887][T11263] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1044.819223][T11263] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1044.829604][ T6618] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.948592][T11269] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1044.974718][T11263] ntfs3: loop0: ino=1e, "file1" failed to parse mft record
[ 1044.982430][T11263] ntfs3: loop0: ino=1e, "file1" attr_set_size
[ 1045.781715][T10909] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1046.051822][T10909] usb 4-1: Using ep0 maxpacket: 32
[ 1046.114948][T11284] ipvlan2: entered promiscuous mode
[ 1046.124968][T11284] ipvlan2: entered allmulticast mode
[ 1046.130544][T11284] batadv0: entered allmulticast mode
[ 1046.141718][T11284] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1046.302659][T10909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1046.314365][T10909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1046.329285][T10909] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1046.339658][T10909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.442535][T10909] usb 4-1: config 0 descriptor??
[ 1046.463432][T11277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1046.497222][T10909] hub 4-1:0.0: USB hub found
[ 1046.753073][T10909] hub 4-1:0.0: 2 ports detected
[ 1046.924214][T11293] i2c i2c-0: Invalid block write size 255
[ 1047.161426][T10856] Bluetooth: hci1: SCO packet for unknown connection handle 0
[ 1048.003332][T11293] loop1: detected capacity change from 0 to 32768
[ 1048.057774][T11293] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1048.230890][T11293] XFS (loop1): Ending clean mount
[ 1048.308647][T11291] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1048.318176][T11314] hugetlbfs: Unknown parameter 'ÿ0x00000000000000000xffffffffffffffff'
[ 1048.319773][T11291] XFS (loop1): Unmount and run xfs_repair
[ 1048.337565][T11291] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1048.345343][T11291] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1048.354644][T11291] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.363964][T11291] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1048.383505][T11291] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1048.392901][T11291] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.402322][T11291] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1048.411585][T11291] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1048.420730][T11291] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1048.431815][T11293] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1048.439588][   T29] audit: type=1800 audit(1717848892.249:395): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1966 res=0 errno=0
[ 1048.443087][T11293] XFS (loop1): Unmount and run xfs_repair
[ 1048.470300][T11293] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1048.481574][T11293] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1048.490724][T11293] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.502480][T11293] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1048.511820][T11293] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1048.520956][T11293] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.530389][T11293] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1048.539717][T11293] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1048.549007][T11293] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1048.559018][T11294] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1048.570454][T11294] XFS (loop1): Unmount and run xfs_repair
[ 1048.584506][T11294] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[ 1048.594426][T11294] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1048.603886][T11294] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.606103][ T5138] usb 4-1: USB disconnect, device number 10
[ 1048.613040][T11294] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1048.613164][T11294] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1048.613275][T11294] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1048.613389][T11294] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1048.613504][T11294] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1048.613617][T11294] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1048.693625][T10909] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1048.750489][T11314] loop4: detected capacity change from 0 to 512
[ 1048.823386][T11314] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1049.120951][ T6672] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1049.887880][T11328] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1050.954375][T11332] loop3: detected capacity change from 0 to 4096
[ 1051.072978][T11332] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1051.516466][T11332] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[ 1052.100821][T11337] loop1: detected capacity change from 0 to 32768
[ 1052.121540][T11337] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11337)
[ 1052.149723][T11337] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1052.168190][T11337] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1052.182185][T11337] BTRFS info (device loop1): using free-space-tree
[ 1052.346514][ T6618] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[ 1052.950585][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1053.132865][T11369] i2c i2c-0: Invalid block write size 255
[ 1053.872323][T11369] loop0: detected capacity change from 0 to 32768
[ 1054.032907][T11369] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1054.174269][ T6672] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1054.431695][ T5658] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1054.547671][T11369] XFS (loop0): Ending clean mount
[ 1054.644851][T11367] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1054.656379][T11367] XFS (loop0): Unmount and run xfs_repair
[ 1054.662605][T11367] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1054.670298][T11367] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1054.679979][T11367] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.689554][T11367] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1054.698811][T11367] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1054.708103][T11367] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.717449][T11367] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1054.730149][T11367] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1054.740450][T11367] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1054.751140][T11369] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1054.762477][T11369] XFS (loop0): Unmount and run xfs_repair
[ 1054.768565][T11369] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1054.776344][T11369] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1054.785745][T11369] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.795070][T11369] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1054.804636][T11369] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1054.811710][ T5658] usb 4-1: Using ep0 maxpacket: 32
[ 1054.813921][T11369] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.836240][T11369] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1054.847832][T11369] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1054.857464][T11369] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1054.869370][T11367] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1054.881569][T11367] XFS (loop0): Unmount and run xfs_repair
[ 1054.890414][T11367] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[ 1054.898715][T11367] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1054.908011][T11367] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.917410][T11367] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1054.930209][T11367] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1054.940447][T11367] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1054.949788][T11367] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1054.959195][T11367] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1054.969346][T11367] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1055.042266][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1055.053998][ T5658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1055.065923][ T5658] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1055.075538][ T5658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.149625][ T5658] usb 4-1: config 0 descriptor??
[ 1055.172972][T11372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1055.240189][ T5658] hub 4-1:0.0: USB hub found
[ 1055.352087][ T7064] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1055.482533][ T5658] hub 4-1:0.0: 2 ports detected
[ 1056.378983][T11395] loop4: detected capacity change from 0 to 4096
[ 1056.501807][T11395] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 1056.997635][T11395] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[ 1057.298724][T10852] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22.
[ 1057.650931][T11415] vlan2: entered promiscuous mode
[ 1057.656573][T11415] macvtap0: entered promiscuous mode
[ 1057.664491][T11415] vlan2: entered allmulticast mode
[ 1057.669976][T11415] macvtap0: entered allmulticast mode
[ 1057.675779][T11415] veth0_macvtap: entered allmulticast mode
[ 1057.695135][T11415] team0: Device vlan2 is up. Set it down before adding it as a team port
[ 1057.720946][T11415] macvtap0: left allmulticast mode
[ 1057.728812][T11415] veth0_macvtap: left allmulticast mode
[ 1057.735230][T11415] macvtap0: left promiscuous mode
[ 1058.049797][T11419] loop0: detected capacity change from 0 to 164
[ 1058.260857][T11422] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1058.400007][ T5138] usb 4-1: USB disconnect, device number 11
[ 1058.674357][T11426] NILFS (nbd3): device size too small
[ 1059.153795][T11433] i2c i2c-0: Invalid block write size 255
[ 1060.128172][T11433] loop2: detected capacity change from 0 to 32768
[ 1060.279752][T11433] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1060.632004][T11433] XFS (loop2): Ending clean mount
[ 1060.720818][T11431] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1060.732849][T11431] XFS (loop2): Unmount and run xfs_repair
[ 1060.738861][T11431] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1060.746728][T11431] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1060.756069][T11431] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1060.773785][T11431] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1060.785295][T11431] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1060.794845][T11431] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1060.807288][T11431] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1060.816637][T11431] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1060.825929][T11431] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1060.837273][T11433] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1060.848967][T11433] XFS (loop2): Unmount and run xfs_repair
[ 1060.855043][T11433] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1060.867052][T11433] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1060.876454][T11433] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1060.885994][T11433] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1060.895224][T11433] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1060.904521][T11433] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1060.913785][T11433] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1060.923039][T11433] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1060.932405][T11433] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1060.943542][T11433] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1060.954879][T11433] XFS (loop2): Unmount and run xfs_repair
[ 1060.960871][T11433] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[ 1060.972808][T11433] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1060.983015][T11433] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1060.992459][T11433] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1061.006067][T11433] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1061.015316][T11433] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1061.024574][T11433] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1061.033798][T11433] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1061.043209][T11433] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1061.303017][T10856] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 1061.333189][ T6395] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1061.701858][T11455] loop0: detected capacity change from 0 to 4096
[ 1061.778669][T11455] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1062.557791][T11455] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[ 1063.090227][   T29] audit: type=1800 audit(1717848906.799:396): pid=11478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1963 res=0 errno=0
[ 1063.200094][ T7064] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22.
[ 1063.497625][ T3534] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1063.613004][T10882] kernel write not supported for file /dsp (pid: 10882 comm: kworker/1:2)
[ 1063.683126][ T5667] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1063.796966][T11490] i2c i2c-0: Invalid block write size 255
[ 1063.962292][ T5667] usb 3-1: Using ep0 maxpacket: 32
[ 1064.134006][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1064.149113][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1064.161869][ T5667] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1064.173701][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.268137][ T5667] usb 3-1: config 0 descriptor??
[ 1064.304151][T11483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1064.440938][ T5667] hub 3-1:0.0: USB hub found
[ 1064.694615][ T5667] hub 3-1:0.0: 2 ports detected
[ 1064.821677][T11490] loop4: detected capacity change from 0 to 32768
[ 1064.888037][T11490] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1064.991618][T10882] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1065.044405][T11490] XFS (loop4): Ending clean mount
[ 1065.119636][T11487] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1065.131147][T11487] XFS (loop4): Unmount and run xfs_repair
[ 1065.137249][T11487] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1065.145211][T11487] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1065.154507][T11487] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.167346][T11487] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1065.177622][T11487] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1065.186958][T11487] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.196212][T11487] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1065.205688][T11487] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1065.215048][T11487] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1065.225488][T11490] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1065.236952][T11490] XFS (loop4): Unmount and run xfs_repair
[ 1065.243097][T11490] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1065.250769][T11490] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1065.260149][T11490] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.277299][T11490] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1065.288856][T11490] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1065.298339][T11490] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.307633][T11490] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1065.317062][T11490] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1065.326301][T11490] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1065.337304][T11487] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x7a5/0x1a20, inode 0x423 dinode
[ 1065.348997][T11487] XFS (loop4): Unmount and run xfs_repair
[ 1065.355130][T11487] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1065.363079][T11487] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1065.375798][T11487] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.386298][T11487] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[ 1065.395537][T11487] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 20  4.Xh........... 
[ 1065.404984][T11487] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1065.414243][T11487] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 6b 5f 93 07  ............k_..
[ 1065.423570][T11487] 00000060: ff ff ff ff a7 f7 55 74 00 00 00 00 00 00 00 04  ......Ut........
[ 1065.432841][T11487] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[ 1065.479294][T10882] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1065.490687][T10882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1065.502268][T10882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.513765][T10882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1065.530504][T10856] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1065.531494][ T4434] Bluetooth: hci0: command 0x1003 tx timeout
[ 1065.662012][T10882] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1065.671655][T10882] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1065.686549][T10882] usb 1-1: Manufacturer: syz
[ 1065.727313][T10882] usb 1-1: config 0 descriptor??
[ 1065.758874][T10852] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[ 1066.233752][T10882] appleir 0003:05AC:8243.0011: unknown main item tag 0x0
[ 1066.287189][T10882] appleir 0003:05AC:8243.0011: No inputs registered, leaving
[ 1066.355499][T10882] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1066.958378][T11491] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1067.489379][ T5667] usb 3-1: USB disconnect, device number 21
[ 1068.158334][   T29] audit: type=1800 audit(1717848911.939:397): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1944 res=0 errno=0
[ 1068.385114][ T5653] usb 1-1: USB disconnect, device number 16
[ 1068.479151][T11511] loop2: detected capacity change from 0 to 4096
[ 1068.588495][T11511] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 1068.623115][T11511] ntfs3: loop2: Failed to load $MFT (-22).
[ 1068.919946][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1069.110948][T11519] loop1: detected capacity change from 0 to 4096
[ 1069.183690][T11519] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[ 1069.635187][T11535] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1069.721405][T11519] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[ 1070.136096][ T6672] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[ 1070.252335][ T5667] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1070.541961][ T5667] usb 5-1: Using ep0 maxpacket: 32
[ 1070.810743][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1070.822412][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1070.834062][ T5667] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1070.843569][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.064355][ T5667] usb 5-1: config 0 descriptor??
[ 1071.083945][T11537] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1071.169546][ T5667] hub 5-1:0.0: USB hub found
[ 1071.452120][ T5667] hub 5-1:0.0: 2 ports detected
[ 1072.149301][ T3534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.193225][T11546] loop3: detected capacity change from 0 to 4096
[ 1072.327110][ T3534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.368790][T11546] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1072.482378][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1072.499631][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1072.513784][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1072.543249][ T3534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.583373][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1072.604494][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1072.614364][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1072.832101][   T29] audit: type=1800 audit(1717848916.529:398): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1950 res=0 errno=0
[ 1072.904053][ T3534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1072.925459][T11546] ntfs3: loop3: Failed to read $UpCase (-4).
[ 1073.272038][   T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1073.448954][ T3534] bridge_slave_1: left allmulticast mode
[ 1073.455445][ T3534] bridge_slave_1: left promiscuous mode
[ 1073.471538][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.514149][ T5665] usb 5-1: USB disconnect, device number 15
[ 1073.542951][ T3534] bridge_slave_0: left allmulticast mode
[ 1073.548895][ T3534] bridge_slave_0: left promiscuous mode
[ 1073.556111][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.733366][   T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1073.744953][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1073.756512][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1073.773293][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1073.910272][   T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1073.920008][   T43] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1073.928633][   T43] usb 3-1: Manufacturer: syz
[ 1073.983026][   T43] usb 3-1: config 0 descriptor??
[ 1074.342117][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1074.429885][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1074.516162][ T3534] bond0 (unregistering): Released all slaves
[ 1074.629310][   T43] appleir 0003:05AC:8243.0012: unknown main item tag 0x0
[ 1074.658375][   T43] appleir 0003:05AC:8243.0012: No inputs registered, leaving
[ 1074.713365][   T43] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1074.727084][ T5083] Bluetooth: hci0: command tx timeout
[ 1074.756772][T11564] Bluetooth: MGMT ver 1.22
[ 1074.813998][T11562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1074.821678][T11564] loop4: detected capacity change from 0 to 164
[ 1074.899906][T11564] rock: corrupted directory entry. extent=41, offset=65536, size=8
[ 1075.489425][T11557] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1075.809919][ T3534] hsr_slave_0: left promiscuous mode
[ 1075.900676][ T3534] hsr_slave_1: left promiscuous mode
[ 1075.974450][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1075.982701][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1076.076626][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1076.085017][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1076.244213][ T3534] veth1_macvtap: left promiscuous mode
[ 1076.250197][ T3534] veth0_macvtap: left promiscuous mode
[ 1076.256332][ T3534] veth1_vlan: left promiscuous mode
[ 1076.262215][ T3534] veth0_vlan: left promiscuous mode
[ 1076.532414][T11572] loop3: detected capacity change from 0 to 40427
[ 1076.753345][ T5667] usb 3-1: reset high-speed USB device number 22 using dummy_hcd
[ 1076.763580][T11572] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1076.962571][ T5083] Bluetooth: hci0: command tx timeout
[ 1077.184666][T11572] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1077.885440][ T3534] team0 (unregistering): Port device team_slave_1 removed
[ 1078.034239][ T3534] team0 (unregistering): Port device team_slave_0 removed
[ 1078.411079][ T5665] usb 3-1: USB disconnect, device number 22
[ 1078.426780][ T6618] syz-executor.3: attempt to access beyond end of device
[ 1078.426780][ T6618] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1078.828564][T11552] chnl_net:caif_netlink_parms(): no params data found
[ 1078.900482][T11589] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1079.051560][ T5083] Bluetooth: hci0: command tx timeout
[ 1079.293105][ T5665] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1079.391431][ T5667] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1079.661508][ T5667] usb 5-1: Using ep0 maxpacket: 32
[ 1079.714690][ T5665] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.725432][ T5665] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00
[ 1079.735177][ T5665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.824432][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1079.836497][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1079.851773][ T5667] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1079.862709][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.956167][ T5667] usb 5-1: config 0 descriptor??
[ 1080.016406][T11596] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1080.036722][ T5665] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1080.096022][T10881] usb 3-1: USB disconnect, device number 23
[ 1080.107574][ T5667] hub 5-1:0.0: USB hub found
[ 1080.361865][ T5667] hub 5-1:0.0: 2 ports detected
[ 1080.489519][T11552] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.497937][T11552] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.507256][T11552] bridge_slave_0: entered allmulticast mode
[ 1080.516957][T11552] bridge_slave_0: entered promiscuous mode
[ 1080.613319][T11552] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.621133][T11552] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.636310][T11552] bridge_slave_1: entered allmulticast mode
[ 1080.646139][T11552] bridge_slave_1: entered promiscuous mode
[ 1080.916189][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.995822][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1081.122559][ T5083] Bluetooth: hci0: command tx timeout
[ 1081.200167][T11552] team0: Port device team_slave_0 added
[ 1081.235412][T11552] team0: Port device team_slave_1 added
[ 1081.369229][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1081.569036][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1081.576580][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1081.606061][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1081.803042][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1081.810261][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1081.837200][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1082.219624][T11552] hsr_slave_0: entered promiscuous mode
[ 1082.306843][T11552] hsr_slave_1: entered promiscuous mode
[ 1084.023601][ T5658] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1084.223611][T10909] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1084.245340][T11552] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1084.328015][T11552] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1084.368815][ T1220] ieee802154 phy0 wpan0: encryption failed: -22
[ 1084.376075][ T1220] ieee802154 phy1 wpan1: encryption failed: -22
[ 1084.389536][ T5658] usb 1-1: Using ep0 maxpacket: 32
[ 1084.464015][T11552] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1084.512890][T10909] usb 3-1: device descriptor read/64, error -71
[ 1084.528178][T11552] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1084.540868][ T5658] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1084.549673][ T5658] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1084.558987][ T5658] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1084.568396][ T5658] usb 1-1: config 1 has no interface number 0
[ 1084.574916][ T5658] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1084.586556][ T5658] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1084.600070][ T5658] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1084.609578][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.773306][ T5658] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1084.855561][T10909] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1085.101705][T10909] usb 3-1: device descriptor read/64, error -71
[ 1085.155895][T11642] xt_NFQUEUE: number of total queues is 0
[ 1085.189229][T11642] xt_NFQUEUE: number of total queues is 0
[ 1085.274613][T10909] usb usb3-port1: attempt power cycle
[ 1085.633386][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1085.709273][T11552] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1085.752493][T10909] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1085.833483][T11636] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1085.853041][T10909] usb 3-1: device descriptor read/8, error -71
[ 1085.887803][T11552] 8021q: adding VLAN 0 to HW filter on device team0
[ 1085.927842][T10881] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1085.935788][T10881] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1086.020002][T10881] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1086.027956][T10881] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1086.132225][T11636] usb 4-1: Using ep0 maxpacket: 8
[ 1086.173810][T10909] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1086.199392][T11650] Zero length message leads to an empty skb
[ 1086.313800][T10909] usb 3-1: device descriptor read/8, error -71
[ 1086.445823][T10909] usb usb3-port1: unable to enumerate USB device
[ 1086.466621][T11636] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=74.f4
[ 1086.476207][T11636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.484954][T11636] usb 4-1: Product: syz
[ 1086.489397][T11636] usb 4-1: Manufacturer: syz
[ 1086.494411][T11636] usb 4-1: SerialNumber: syz
[ 1086.567651][T11636] usb 4-1: config 0 descriptor??
[ 1086.665489][T11636] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[ 1086.917331][T11645] 9pnet_fd: Insufficient options for proto=fd
[ 1087.003986][ T4475] bcm5974 4-1:0.0: could not read from device
[ 1087.014745][ T5667] usb 5-1: reset high-speed USB device number 16 using dummy_hcd
[ 1087.046771][ T5658] snd_usb_pod 1-1:1.1: set_interface failed
[ 1087.053392][ T5658] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1087.064222][ T5658] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[ 1087.113434][ T4475] bcm5974 4-1:0.0: could not read from device
[ 1087.121549][T11636] usb 4-1: USB disconnect, device number 12
[ 1087.151109][ T5658] usb 1-1: USB disconnect, device number 17
[ 1087.171799][ T4475] bcm5974 4-1:0.0: could not read from device
[ 1087.414669][T11653] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1088.192332][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1088.575572][T11664] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1088.728593][T11552] veth0_vlan: entered promiscuous mode
[ 1088.838402][ T5667] usb 5-1: reset high-speed USB device number 16 using dummy_hcd
[ 1088.866629][T11552] veth1_vlan: entered promiscuous mode
[ 1089.199208][T11552] veth0_macvtap: entered promiscuous mode
[ 1089.288907][T11552] veth1_macvtap: entered promiscuous mode
[ 1089.487786][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.499172][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.509371][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.520303][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.530595][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.550416][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.562429][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1089.573319][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.589140][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1089.808493][ T5667] hub 5-1:0.0: set hub depth failed
[ 1089.824657][ T5138] usb 5-1: USB disconnect, device number 16
[ 1089.875181][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1089.886880][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.897107][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1089.908361][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.918655][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1089.933928][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.950156][T11552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1089.962652][T11552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1089.978457][T11552] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.294576][T11552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.303953][T11552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.313178][T11552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.322406][T11552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.346858][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1091.714931][T11693] fuse: Bad value for 'user_id'
[ 1091.961671][ T5652] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1092.261676][ T5652] usb 1-1: Using ep0 maxpacket: 32
[ 1092.416335][ T5652] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1092.425483][ T5652] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1092.434616][ T5652] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1092.444031][ T5652] usb 1-1: config 1 has no interface number 0
[ 1092.450452][ T5652] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1092.461980][ T5652] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1092.475398][ T5652] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1092.484975][ T5652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.581642][ T5652] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1092.691535][ T5667] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1092.838907][T11702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1092.992894][ T5667] usb 3-1: Using ep0 maxpacket: 32
[ 1093.122675][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1093.135504][ T5667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1093.148122][ T5667] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1093.157587][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.209575][ T5667] usb 3-1: config 0 descriptor??
[ 1093.234385][T11706] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1093.274517][ T5667] hub 3-1:0.0: USB hub found
[ 1093.476453][ T5667] hub 3-1:0.0: 2 ports detected
[ 1093.985550][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1094.764751][ T5652] snd_usb_pod 1-1:1.1: set_interface failed
[ 1094.771529][ T5652] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1094.779909][ T5652] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[ 1094.939382][ T5652] usb 1-1: USB disconnect, device number 18
[ 1095.545249][ T5652] usb 3-1: USB disconnect, device number 28
[ 1096.637692][T11753] loop2: detected capacity change from 0 to 1024
[ 1096.765757][T11753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1096.799735][   T29] audit: type=1800 audit(1717848940.629:399): pid=11753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0
[ 1096.828899][T11753] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2777: inode #15: comm syz-executor.2: corrupted in-inode xattr: bad magic number in in-inode xattr
[ 1096.848067][T11753] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1097.064097][ T6395] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1097.183877][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.192682][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.450763][ T5652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.459284][ T5652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.482704][T11761] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1098.321330][T11770] loop0: detected capacity change from 0 to 1024
[ 1098.576478][T11766] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1098.859954][T11773] Illegal XDP return value 4294967274 on prog  (id 495) dev N/A, expect packet loss!
[ 1100.268432][T11785] loop4: detected capacity change from 0 to 16
[ 1100.364913][T11785] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1102.319515][T11801] loop1: detected capacity change from 0 to 1764
[ 1102.997991][T11808] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 1104.458014][T11812] loop3: detected capacity change from 0 to 40427
[ 1104.551430][T11812] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512)
[ 1104.560118][T11812] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1104.593065][T11812] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root
[ 1104.648098][T11812] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1104.974078][T11812] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1104.981758][T11812] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1106.014020][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1115.049893][   T59] kworker/dying (59) used greatest stack depth: 4856 bytes left
[ 1117.587941][T11858] loop3: detected capacity change from 0 to 40427
[ 1117.772328][T11858] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512)
[ 1117.781080][T11858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 1117.842378][T11858] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root
[ 1117.988486][T11858] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1118.194480][T11863] loop2: detected capacity change from 0 to 512
[ 1118.230088][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1118.267820][T11863] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1118.298617][T11863] EXT4-fs: old and new quota format mixing
[ 1118.372305][T11858] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 1118.382056][T11858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1118.910194][T11869] loop1: detected capacity change from 0 to 64
[ 1119.199746][T11863] loop2: detected capacity change from 0 to 4096
[ 1119.407771][T11863] NILFS (loop2): unrecognized mount option ""
[ 1119.909641][   T29] audit: type=1800 audit(1717848963.689:400): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1958 res=0 errno=0
[ 1122.241583][T10856] Bluetooth: hci1: command 0x0406 tx timeout
[ 1129.221520][ T5138] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1129.531851][ T5138] usb 3-1: Using ep0 maxpacket: 8
[ 1129.705859][ T5138] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[ 1129.714255][ T5138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1129.724912][ T5138] usb 3-1: config 0 has no interface number 0
[ 1129.731314][ T5138] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1129.742595][ T5138] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1129.753116][ T5138] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1129.767955][ T5138] usb 3-1: config 0 interface 52 has no altsetting 0
[ 1129.858114][T10856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1129.869460][T10856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1129.888528][T10856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1130.001000][T10856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1130.013264][T10856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1130.263881][ T6370] hfsplus: b-tree write err: -5, ino 4
[ 1130.301974][T10856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1130.368122][ T5138] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[ 1130.378968][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[ 1130.388389][ T5138] usb 3-1: Product: syz
[ 1130.395873][ T5138] usb 3-1: SerialNumber: syz
[ 1130.472015][ T5138] usb 3-1: config 0 descriptor??
[ 1130.961810][ T5138] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11
[ 1130.983081][ T4475] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1131.085266][ T4475] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1131.190700][T11946] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1131.291027][ T4475] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1131.359108][ T4475] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[ 1131.551717][T10856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1131.596464][T10856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1131.615807][T10856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1131.644045][T10856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1131.658989][T10856] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1131.668767][T10856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1132.306404][T11955] chnl_net:caif_netlink_parms(): no params data found
[ 1132.562503][ T5083] Bluetooth: hci2: command tx timeout
[ 1132.846551][ T5138] usb 3-1: USB disconnect, device number 29
[ 1133.764667][ T5083] Bluetooth: hci6: command tx timeout
[ 1134.694864][ T5083] Bluetooth: hci2: command tx timeout
[ 1135.142576][T11963] chnl_net:caif_netlink_parms(): no params data found
[ 1136.142074][T10856] Bluetooth: hci6: command tx timeout
[ 1136.243917][T11955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.251883][T11955] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.259897][T11955] bridge_slave_0: entered allmulticast mode
[ 1136.268717][T11955] bridge_slave_0: entered promiscuous mode
[ 1136.627881][T11955] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1136.636033][T11955] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1136.649719][T11955] bridge_slave_1: entered allmulticast mode
[ 1136.658400][T11955] bridge_slave_1: entered promiscuous mode
[ 1136.746473][T10856] Bluetooth: hci2: command tx timeout
[ 1137.147264][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1137.274984][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1138.133044][T11770] syz_tun (unregistering): left promiscuous mode
[ 1138.228444][T11955] team0: Port device team_slave_0 added
[ 1138.257100][T10856] Bluetooth: hci6: command tx timeout
[ 1138.607019][T11955] team0: Port device team_slave_1 added
[ 1138.633678][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1138.642113][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1138.649815][T11963] bridge_slave_0: entered allmulticast mode
[ 1138.658410][T11963] bridge_slave_0: entered promiscuous mode
[ 1138.802517][T10856] Bluetooth: hci2: command tx timeout
[ 1138.856807][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1138.865045][T11963] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1138.873202][T11963] bridge_slave_1: entered allmulticast mode
[ 1138.883224][T11963] bridge_slave_1: entered promiscuous mode
[ 1139.223131][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1139.230240][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1139.256837][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1139.322668][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.351786][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1139.359014][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1139.385905][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1139.519148][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1140.111952][T11963] team0: Port device team_slave_0 added
[ 1140.166081][T11955] hsr_slave_0: entered promiscuous mode
[ 1140.237672][T11955] hsr_slave_1: entered promiscuous mode
[ 1140.273125][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1140.281641][T11955] Cannot create hsr debugfs directory
[ 1140.298188][T11963] team0: Port device team_slave_1 added
[ 1140.322995][T10856] Bluetooth: hci6: command tx timeout
[ 1140.498738][T12008] loop1: detected capacity change from 0 to 1024
[ 1140.564171][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1140.572442][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1140.598969][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1140.725766][T12008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[ 1140.730274][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1140.749335][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1140.777919][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.816791][T12008] System zones: 0-1, 3-12
[ 1140.898345][T12008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1141.060276][T11963] hsr_slave_0: entered promiscuous mode
[ 1141.109810][T11963] hsr_slave_1: entered promiscuous mode
[ 1141.165989][T11963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1141.174010][T11963] Cannot create hsr debugfs directory
[ 1141.893534][T12011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1142.686016][ T5138] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1143.052304][ T5138] usb 3-1: Using ep0 maxpacket: 8
[ 1143.182972][ T5138] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1143.196224][ T5138] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1143.209419][ T5138] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1143.220232][ T5138] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1143.233815][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1143.243327][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.350000][T11955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.599555][T11955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.661315][ T5138] usb 3-1: GET_CAPABILITIES returned 2f
[ 1143.667469][ T5138] usbtmc 3-1:16.0: can't read capabilities
[ 1143.858947][ T5138] usb 3-1: USB disconnect, device number 30
[ 1143.925984][T11955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.190440][T11955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.261106][T11552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1144.543991][T11963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.687202][T11963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1144.884114][T11963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.053417][T11963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.498492][T12036] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1145.607524][T11963] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1145.720799][T11963] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1145.813186][ T1220] ieee802154 phy0 wpan0: encryption failed: -22
[ 1145.819928][ T1220] ieee802154 phy1 wpan1: encryption failed: -22
[ 1145.866387][T11955] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1145.942113][T11963] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1145.999791][T11955] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1146.062576][T11963] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1146.126024][T11955] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1146.224048][T11955] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1147.170559][T11963] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1147.337571][T11963] 8021q: adding VLAN 0 to HW filter on device team0
[ 1147.563804][T10881] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1147.571696][T10881] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1147.709136][T10881] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1147.717090][T10881] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1147.941964][T11955] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1148.150141][T11955] 8021q: adding VLAN 0 to HW filter on device team0
[ 1148.289534][ T5665] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.297500][ T5665] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1148.470633][ T5665] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.478593][ T5665] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1150.294740][T11963] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1150.930784][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1151.510915][T11955] veth0_vlan: entered promiscuous mode
[ 1151.615539][T11955] veth1_vlan: entered promiscuous mode
[ 1151.936642][T11955] veth0_macvtap: entered promiscuous mode
[ 1152.058646][T11955] veth1_macvtap: entered promiscuous mode
[ 1152.248577][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.260546][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.271450][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.282416][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.292709][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.303540][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.317219][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.329072][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.339315][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.350218][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.367128][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1152.675645][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.686576][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.700411][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.711369][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.725022][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.736969][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.747182][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.758000][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.768193][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.779029][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.795636][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1152.967136][T11963] veth0_vlan: entered promiscuous mode
[ 1153.070217][T11963] veth1_vlan: entered promiscuous mode
[ 1153.184535][T11955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.193831][T11955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.204344][T11955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.213740][T11955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.531723][T11963] veth0_macvtap: entered promiscuous mode
[ 1153.719194][T11963] veth1_macvtap: entered promiscuous mode
[ 1153.985150][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1153.996676][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.006957][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.017910][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.028073][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.038821][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.057251][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.070160][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.080455][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.091341][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.101497][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1154.112263][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.128580][T11963] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1154.198756][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.209670][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.220222][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.231493][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.241850][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.260627][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.273179][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.284110][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.294334][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.305141][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.315326][T11963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1154.326128][T11963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1154.342517][T11963] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1154.466200][T11963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.476428][T11963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.485686][T11963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.494871][T11963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.626308][T12133] loop3: detected capacity change from 0 to 256
[ 1155.023812][T12133] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1155.936120][T12144] 9pnet_fd: Insufficient options for proto=fd
[ 1156.663959][T12133] loop3: detected capacity change from 256 to 0
[ 1157.190426][ T6618] syz-executor.3: attempt to access beyond end of device
[ 1157.190426][ T6618] loop3: rw=0, sector=128, nr_sectors = 1 limit=0
[ 1157.206002][ T6618] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5)
[ 1157.216267][ T6618] exFAT-fs (loop3): Filesystem has been set read-only
[ 1157.539639][ T6618] syz-executor.3: attempt to access beyond end of device
[ 1157.539639][ T6618] loop3: rw=0, sector=128, nr_sectors = 1 limit=0
[ 1157.553502][ T6618] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5)
[ 1157.798216][T12149] loop2: detected capacity change from 0 to 1024
[ 1158.447507][ T3442] hfsplus: b-tree write err: -5, ino 4
[ 1159.603964][T12165] loop2: detected capacity change from 0 to 256
[ 1159.727744][T12165] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x0019abd0, checksum : 0x1119abd0)
[ 1159.738930][T12165] exFAT-fs (loop2): invalid boot region
[ 1159.745034][T12165] exFAT-fs (loop2): failed to recognize exfat type
[ 1161.347381][T12170] loop2: detected capacity change from 0 to 128
[ 1162.482903][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1162.686878][T12174] bond1: entered promiscuous mode
[ 1162.693356][T12174] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1163.214620][T12179] bridge1: entered promiscuous mode
[ 1163.224132][T12179] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1163.817701][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.825499][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.831975][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.837737][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.846181][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.852568][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.858314][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.864398][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.870149][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.879716][ T6395] sysv_free_block: flc_count > flc_size
[ 1163.887692][ T6395] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1164.581641][T12188] binder: 12182:12188 ioctl c0306201 200003c0 returned -14
[ 1167.784984][   T29] audit: type=1326 audit(1717849011.569:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12212 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed1147cf69 code=0x0
[ 1167.807576][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1168.221957][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.230257][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1168.711638][ T1547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.719771][ T1547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1169.553528][ T1547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1169.562032][ T1547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1170.034896][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1170.043951][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1170.927324][T12258] tracefs: Unknown parameter 'trans'
[ 1170.976725][T10881] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1171.402770][T10881] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1171.414356][T10881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1171.426589][T10881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1171.436843][T10881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1171.553077][T10881] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1171.573829][T10881] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1171.582430][T10881] usb 2-1: Manufacturer: syz
[ 1171.622668][T10881] usb 2-1: config 0 descriptor??
[ 1172.121383][T10881] appleir 0003:05AC:8243.0013: unknown main item tag 0x0
[ 1172.168257][T10881] appleir 0003:05AC:8243.0013: No inputs registered, leaving
[ 1172.249592][T10881] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[ 1172.806749][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1173.573046][T12285] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it!
[ 1174.652137][T12282] loop3: detected capacity change from 0 to 40427
[ 1174.672207][T12282] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1174.680270][T12282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1175.018726][T12282] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1175.471077][T12282] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1175.479049][T12282] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1175.602394][T12293] loop1: detected capacity change from 0 to 16
[ 1175.760676][T12287] loop2: detected capacity change from 0 to 40427
[ 1175.772167][T12293] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1175.776295][ T5667] usb 2-1: USB disconnect, device number 17
[ 1175.787789][T12287] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1175.795907][T12287] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1176.026807][T12287] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1176.834182][T12287] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1176.841804][T12287] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1176.863542][T10856] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[ 1177.108771][T12293] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[ 1177.146880][   T29] audit: type=1800 audit(1717849020.949:402): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file3" dev="loop1" ino=89 res=0 errno=0
[ 1181.383018][ T5652] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1181.922856][ T5652] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1181.934292][ T5652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1181.945744][ T5652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1181.956213][ T5652] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1182.120969][T12332] loop1: detected capacity change from 0 to 40427
[ 1182.136049][T12332] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1182.144231][T12332] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1182.184359][ T5652] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1182.195124][ T5652] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1182.204577][ T5652] usb 1-1: Manufacturer: syz
[ 1182.306115][ T5652] usb 1-1: config 0 descriptor??
[ 1182.335561][T12332] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1182.600645][T12332] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[ 1182.696820][T12332] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1182.704463][T12332] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1182.846191][ T5652] appleir 0003:05AC:8243.0014: unknown main item tag 0x0
[ 1182.950042][ T5652] appleir 0003:05AC:8243.0014: No inputs registered, leaving
[ 1183.102117][ T5652] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1183.621360][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1185.058910][ T5653] usb 1-1: USB disconnect, device number 19
[ 1185.506768][T12365] loop3: detected capacity change from 0 to 16
[ 1185.678114][T12365] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1185.912194][T10856] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[ 1186.036962][T12365] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[ 1186.351802][   T29] audit: type=1800 audit(1717849030.019:403): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file3" dev="loop3" ino=89 res=0 errno=0
[ 1186.541995][T12363] loop2: detected capacity change from 0 to 40427
[ 1186.561001][T12363] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1186.569481][T12363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1186.646095][T12363] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1186.701854][T12364] loop4: detected capacity change from 0 to 4096
[ 1186.998523][T12363] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1187.006300][T12363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1187.051003][T12378] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1188.671768][ T5665] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1189.629737][ T5665] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[ 1189.639596][ T5665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1189.675147][ T5665] usb 4-1: config 0 descriptor??
[ 1189.732553][ T5665] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[ 1189.973704][T10910] usb 4-1: USB disconnect, device number 13
[ 1190.235008][ T5665] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1190.652505][ T5665] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1190.664119][ T5665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1190.675553][ T5665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1190.685753][ T5665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1190.833078][ T5665] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1190.842756][ T5665] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1190.851388][ T5665] usb 5-1: Manufacturer: syz
[ 1190.896544][ T5665] usb 5-1: config 0 descriptor??
[ 1191.402615][ T5665] appleir 0003:05AC:8243.0015: unknown main item tag 0x0
[ 1191.503773][ T5665] appleir 0003:05AC:8243.0015: No inputs registered, leaving
[ 1191.532167][ T5665] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[ 1192.071462][ T5665] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1192.084062][T12403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1192.289262][T12417] loop2: detected capacity change from 0 to 256
[ 1192.311420][ T5665] usb 4-1: Using ep0 maxpacket: 32
[ 1192.327768][T12417] FAT-fs (loop2): Unrecognized mount option "" or missing value
[ 1192.432833][ T5665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1192.444777][ T5665] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1192.462052][ T5665] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1192.473337][ T5665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1192.530799][ T5665] usb 4-1: config 0 descriptor??
[ 1192.572917][T12414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1192.597780][ T5665] hub 4-1:0.0: USB hub found
[ 1192.869153][ T5665] hub 4-1:0.0: 2 ports detected
[ 1193.008859][T12429] x_tables: duplicate entry at hook 1
[ 1194.136236][T12430] loop1: detected capacity change from 0 to 40427
[ 1194.150722][T12430] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1194.159128][T12430] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1194.169069][ T5653] usb 5-1: USB disconnect, device number 17
[ 1194.276713][T12430] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1194.660947][T12430] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1194.668753][T12430] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1194.831752][ T5667] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1194.998157][ T5653] usb 4-1: USB disconnect, device number 14
[ 1195.001958][ T5665] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1195.301976][ T5667] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[ 1195.311566][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.403601][ T5667] usb 3-1: config 0 descriptor??
[ 1195.478403][ T5667] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13
[ 1196.064664][ T5667] usb 3-1: USB disconnect, device number 31
[ 1197.702827][T12461] loop2: detected capacity change from 0 to 256
[ 1197.737705][T12461] FAT-fs (loop2): Unrecognized mount option "" or missing value
[ 1197.933354][ T5652] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1198.396605][ T5652] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1198.410155][ T5652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1198.422005][ T5652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1198.432366][ T5652] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1198.568289][ T5652] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1198.578228][ T5652] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1198.586851][ T5652] usb 1-1: Manufacturer: syz
[ 1198.662098][ T5652] usb 1-1: config 0 descriptor??
[ 1199.033566][T12475] loop3: detected capacity change from 0 to 512
[ 1199.049365][ T5083] Bluetooth: hci0: command 0x0406 tx timeout
[ 1199.086300][T12475] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1199.093521][T12475] ext4: Unknown parameter 'smackfsroot'
[ 1199.167863][ T5652] appleir 0003:05AC:8243.0016: unknown main item tag 0x0
[ 1199.259692][ T5652] appleir 0003:05AC:8243.0016: No inputs registered, leaving
[ 1199.350914][ T5652] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1199.853840][T12463] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1200.442013][T12479] loop4: detected capacity change from 0 to 40427
[ 1200.461015][T12479] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1200.469337][T12479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1200.563511][T12479] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1200.905140][T12479] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1200.912757][T12479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1201.269633][ T5653] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1201.852127][ T5652] usb 1-1: USB disconnect, device number 20
[ 1201.992765][ T5653] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[ 1202.002755][ T5653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.203433][ T5653] usb 3-1: config 0 descriptor??
[ 1202.369548][ T5653] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14
[ 1202.771502][ T5653] input: failed to attach handler mousedev to device input14, error: -2
[ 1202.902066][ T5653] usb 3-1: USB disconnect, device number 32
[ 1204.113090][T12506] loop3: detected capacity change from 0 to 256
[ 1204.402109][T12506] FAT-fs (loop3): Unrecognized mount option "" or missing value
[ 1205.257347][T12515] loop2: detected capacity change from 0 to 40427
[ 1205.320364][T12515] F2FS-fs (loop2): invalid crc value
[ 1205.440754][T12515] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1205.808813][T12515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[ 1206.571752][ T5665] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1207.023467][ T5665] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1207.035024][ T5665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1207.046708][ T5665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1207.057098][ T5665] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1207.247736][ T1220] ieee802154 phy0 wpan0: encryption failed: -22
[ 1207.254684][ T1220] ieee802154 phy1 wpan1: encryption failed: -22
[ 1207.282577][ T5665] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1207.293081][ T5665] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1207.308183][ T5665] usb 2-1: Manufacturer: syz
[ 1207.373022][ T5665] usb 2-1: config 0 descriptor??
[ 1207.878084][ T5665] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[ 1207.902613][ T5665] appleir 0003:05AC:8243.0017: No inputs registered, leaving
[ 1207.999923][ T5665] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[ 1208.131680][T10909] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1208.391526][T10909] usb 4-1: Using ep0 maxpacket: 8
[ 1208.529922][T10909] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1208.539690][T10909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.614388][T12532] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1208.675678][T10909] usb 4-1: config 0 descriptor??
[ 1209.231633][T10909] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1209.249347][T10909] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 1209.262428][T10909] asix 4-1:0.0: probe with driver asix failed with error -32
[ 1209.514122][T12545] loop2: detected capacity change from 0 to 40427
[ 1209.533564][T12545] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1209.541851][T12545] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1209.620554][T12545] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1209.741942][T12553] loop3: detected capacity change from 0 to 8
[ 1209.967035][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1209.976666][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1210.013087][T12545] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1210.021355][T12545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1210.148651][ T5667] usb 2-1: USB disconnect, device number 18
[ 1211.608458][T10882] usb 4-1: USB disconnect, device number 15
[ 1211.810033][T12560] loop1: detected capacity change from 0 to 256
[ 1211.843024][T12560] FAT-fs (loop1): Unrecognized mount option "" or missing value
[ 1212.373743][T12572] x_tables: duplicate entry at hook 1
[ 1213.733993][T10909] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1214.193172][T10909] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1214.204786][T10909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1214.216255][T10909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1214.226526][T10909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1214.424096][T10909] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1214.433903][T10909] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1214.442568][T10909] usb 1-1: Manufacturer: syz
[ 1214.592429][T10909] usb 1-1: config 0 descriptor??
[ 1214.703468][T12586] loop1: detected capacity change from 0 to 40427
[ 1214.723099][T12586] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1214.734060][T12586] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1214.869853][T12586] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1215.131483][T10909] appleir 0003:05AC:8243.0018: unknown main item tag 0x0
[ 1215.256072][T10909] appleir 0003:05AC:8243.0018: No inputs registered, leaving
[ 1215.322997][T12586] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1215.330365][T12586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1215.425326][T10909] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1215.850842][T12598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1216.052416][ T5667] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1216.158350][T12604] loop4: detected capacity change from 0 to 128
[ 1216.347588][ T5667] usb 3-1: Using ep0 maxpacket: 8
[ 1216.461519][T12604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1216.476997][T12604] ext4 filesystem being mounted at /root/syzkaller-testdir4253180945/syzkaller.U0QF2y/14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1216.493429][ T5667] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1216.503006][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1216.542961][ T5667] usb 3-1: config 0 descriptor??
[ 1217.206061][T11963] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1217.234379][ T5667] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1217.244964][ T5667] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 1217.256095][ T5667] asix 3-1:0.0: probe with driver asix failed with error -32
[ 1217.616624][T12610] loop2: detected capacity change from 0 to 8
[ 1217.659251][ T5665] usb 1-1: USB disconnect, device number 21
[ 1217.806277][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1217.815998][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1218.233973][T12617] x_tables: duplicate entry at hook 1
[ 1218.246884][T12614] loop4: detected capacity change from 0 to 256
[ 1218.363121][T12614] FAT-fs (loop4): Unrecognized mount option "" or missing value
[ 1219.318458][ T5653] usb 3-1: USB disconnect, device number 33
[ 1219.728091][T12630] loop4: detected capacity change from 0 to 256
[ 1221.310943][T12637] loop0: detected capacity change from 0 to 40427
[ 1221.337512][T12637] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1221.345989][T12637] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1221.540695][T12637] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1221.906309][T12637] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1221.914189][T12637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1222.185160][   T29] audit: type=1326 audit(1717849065.909:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9e627cf69 code=0x0
[ 1222.220975][ T5653] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1222.752501][ T5653] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1222.772316][ T5653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1222.787179][ T5653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1222.797412][ T5653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1222.982770][ T5653] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1222.992396][ T5653] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1223.000843][ T5653] usb 3-1: Manufacturer: syz
[ 1223.099889][ T5653] usb 3-1: config 0 descriptor??
[ 1223.595883][ T5653] appleir 0003:05AC:8243.0019: unknown main item tag 0x0
[ 1223.700465][ T5653] appleir 0003:05AC:8243.0019: No inputs registered, leaving
[ 1224.074797][ T5653] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1224.240142][T12669] loop1: detected capacity change from 0 to 256
[ 1224.331848][T10882] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1224.354435][T12669] FAT-fs (loop1): Unrecognized mount option "" or missing value
[ 1224.430566][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1224.608954][T10882] usb 4-1: Using ep0 maxpacket: 8
[ 1224.783518][T10882] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1224.793106][T10882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.873779][T10882] usb 4-1: config 0 descriptor??
[ 1225.375104][T10882] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1225.385596][T10882] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[ 1225.396662][T10882] asix 4-1:0.0: probe with driver asix failed with error -32
[ 1225.794859][T12674] loop3: detected capacity change from 0 to 8
[ 1225.892965][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1225.902626][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1225.939434][ T5665] usb 3-1: USB disconnect, device number 34
[ 1227.342435][ T5665] usb 4-1: USB disconnect, device number 16
[ 1227.359229][ T3640] =====================================================
[ 1227.366831][ T3640] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0
[ 1227.374211][ T3640]  virtqueue_add+0x1e86/0x65c0
[ 1227.379420][ T3640]  virtqueue_add_sgs+0x186/0x1b0
[ 1227.385165][ T3640]  virtscsi_add_cmd+0x838/0xad0
[ 1227.393845][ T3640]  virtscsi_queuecommand+0x898/0xa60
[ 1227.399611][ T3640]  scsi_queue_rq+0x4cc7/0x5a80
[ 1227.404652][ T3640]  blk_mq_dispatch_rq_list+0x79b/0x3440
[ 1227.410691][ T3640]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[ 1227.417494][ T3640]  blk_mq_sched_dispatch_requests+0x12f/0x270
[ 1227.423952][ T3640]  blk_mq_run_hw_queue+0x6e4/0xbc0
[ 1227.429328][ T3640]  blk_mq_flush_plug_list+0x1683/0x2b20
[ 1227.435253][ T3640]  blk_add_rq_to_plug+0x2c6/0x970
[ 1227.440573][ T3640]  blk_mq_submit_bio+0x26e8/0x3390
[ 1227.446144][ T3640]  __submit_bio+0x3b9/0xb60
[ 1227.450863][ T3640]  submit_bio_noacct_nocheck+0x148c/0x1800
[ 1227.456970][ T3640]  submit_bio_noacct+0x1bd8/0x27f0
[ 1227.462461][ T3640]  submit_bio+0x58a/0x5b0
[ 1227.467075][ T3640]  ext4_bio_write_folio+0x1e76/0x2e40
[ 1227.472736][ T3640]  mpage_submit_folio+0x351/0x4a0
[ 1227.478059][ T3640]  ext4_do_writepages+0x3733/0x62e0
[ 1227.483476][ T3640]  ext4_writepages+0x312/0x830
[ 1227.488503][ T3640]  do_writepages+0x427/0xc30
[ 1227.493300][ T3640]  __writeback_single_inode+0x10d/0x12c0
[ 1227.499854][ T3640]  writeback_sb_inodes+0xc95/0x1e00
[ 1227.505272][ T3640]  wb_writeback+0x4df/0xea0
[ 1227.510033][ T3640]  wb_workfn+0x40b/0x1940
[ 1227.514619][ T3640]  process_scheduled_works+0xa81/0x1bd0
[ 1227.520765][ T3640]  worker_thread+0xea5/0x1560
[ 1227.526449][ T3640]  kthread+0x3e2/0x540
[ 1227.531179][ T3640]  ret_from_fork+0x6d/0x90
[ 1227.536868][ T3640]  ret_from_fork_asm+0x1a/0x30
[ 1227.542297][ T3640] 
[ 1227.544770][ T3640] Uninit was stored to memory at:
[ 1227.550227][ T3640]  copy_page_from_iter_atomic+0x12b7/0x2ae0
[ 1227.556679][ T3640]  generic_perform_write+0x4c1/0xc60
[ 1227.562264][ T3640]  ext4_buffered_write_iter+0x564/0xaa0
[ 1227.568238][ T3640]  ext4_file_write_iter+0x208/0x3450
[ 1227.574015][ T3640]  __kernel_write_iter+0x64d/0xc80
[ 1227.580345][ T3640]  dump_user_range+0x8dc/0xee0
[ 1227.586293][ T3640]  elf_core_dump+0x57c7/0x5ae0
[ 1227.591594][ T3640]  do_coredump+0x32d5/0x4920
[ 1227.596871][ T3640]  get_signal+0x267e/0x2d00
[ 1227.601705][ T3640]  arch_do_signal_or_restart+0x53/0xcb0
[ 1227.607702][ T3640]  irqentry_exit_to_user_mode+0xa6/0x160
[ 1227.613650][ T3640]  irqentry_exit+0x16/0x60
[ 1227.618322][ T3640]  exc_page_fault+0x515/0x6f0
[ 1227.623331][ T3640]  asm_exc_page_fault+0x2b/0x30
[ 1227.628447][ T3640] 
[ 1227.630936][ T3640] Uninit was created at:
[ 1227.635471][ T3640]  __alloc_pages+0x9d6/0xe70
2024/06/08 12:17:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[ 1227.640268][ T3640]  alloc_pages_mpol+0x299/0x990
[ 1227.645355][ T3640]  alloc_pages+0x1bf/0x1e0
[ 1227.650009][ T3640]  dump_user_range+0x4a/0xee0
[ 1227.654935][ T3640]  elf_core_dump+0x57c7/0x5ae0
[ 1227.659961][ T3640]  do_coredump+0x32d5/0x4920
[ 1227.664799][ T3640]  get_signal+0x267e/0x2d00
[ 1227.669570][ T3640]  arch_do_signal_or_restart+0x53/0xcb0
[ 1227.675595][ T3640]  irqentry_exit_to_user_mode+0xa6/0x160
[ 1227.681632][ T3640]  irqentry_exit+0x16/0x60
[ 1227.686304][ T3640]  exc_page_fault+0x515/0x6f0
[ 1227.691248][ T3640]  asm_exc_page_fault+0x2b/0x30
[ 1227.696374][ T3640] 
[ 1227.698833][ T3640] Bytes 0-4095 of 4096 are uninitialized
[ 1227.704970][ T3640] Memory access of size 4096 starts at ffff88804942b000
[ 1227.712247][ T3640] 
[ 1227.715014][ T3640] CPU: 1 PID: 3640 Comm: kworker/u8:23 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[ 1227.726229][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 1227.736869][ T3640] Workqueue: writeback wb_workfn (flush-8:0)
[ 1227.743388][ T3640] =====================================================
[ 1227.750568][ T3640] Disabling lock debugging due to kernel taint
[ 1227.756974][ T3640] Kernel panic - not syncing: kmsan.panic set ...
[ 1227.763546][ T3640] CPU: 1 PID: 3640 Comm: kworker/u8:23 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[ 1227.775229][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 1227.785670][ T3640] Workqueue: writeback wb_workfn (flush-8:0)
[ 1227.791992][ T3640] Call Trace:
[ 1227.795429][ T3640]  <TASK>
[ 1227.799295][ T3640]  dump_stack_lvl+0x216/0x2d0
[ 1227.804486][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1227.810668][ T3640]  dump_stack+0x1e/0x30
[ 1227.815174][ T3640]  panic+0x4e2/0xcd0
[ 1227.819327][ T3640]  ? kmsan_get_metadata+0xf1/0x1d0
[ 1227.824748][ T3640]  kmsan_report+0x2d5/0x2e0
[ 1227.829577][ T3640]  ? stack_depot_save_flags+0x66d/0x6e0
[ 1227.835399][ T3640]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 1227.842134][ T3640]  ? kmsan_internal_check_memory+0x48c/0x560
[ 1227.848541][ T3640]  ? kmsan_handle_dma+0xac/0xc0
[ 1227.853660][ T3640]  ? virtqueue_add+0x1e86/0x65c0
[ 1227.859347][ T3640]  ? virtqueue_add_sgs+0x186/0x1b0
[ 1227.864727][ T3640]  ? virtscsi_add_cmd+0x838/0xad0
[ 1227.870038][ T3640]  ? virtscsi_queuecommand+0x898/0xa60
[ 1227.875806][ T3640]  ? scsi_queue_rq+0x4cc7/0x5a80
[ 1227.881426][ T3640]  ? blk_mq_dispatch_rq_list+0x79b/0x3440
[ 1227.887474][ T3640]  ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[ 1227.894556][ T3640]  ? blk_mq_sched_dispatch_requests+0x12f/0x270
[ 1227.901467][ T3640]  ? blk_mq_run_hw_queue+0x6e4/0xbc0
[ 1227.907305][ T3640]  ? blk_mq_flush_plug_list+0x1683/0x2b20
[ 1227.914388][ T3640]  ? blk_add_rq_to_plug+0x2c6/0x970
[ 1227.920636][ T3640]  ? blk_mq_submit_bio+0x26e8/0x3390
[ 1227.926234][ T3640]  ? __submit_bio+0x3b9/0xb60
[ 1227.931230][ T3640]  ? submit_bio_noacct_nocheck+0x148c/0x1800
[ 1227.938843][ T3640]  ? submit_bio_noacct+0x1bd8/0x27f0
[ 1227.945394][ T3640]  ? submit_bio+0x58a/0x5b0
[ 1227.951113][ T3640]  ? ext4_bio_write_folio+0x1e76/0x2e40
[ 1227.957089][ T3640]  ? mpage_submit_folio+0x351/0x4a0
[ 1227.962879][ T3640]  ? ext4_do_writepages+0x3733/0x62e0
[ 1227.968601][ T3640]  ? ext4_writepages+0x312/0x830
[ 1227.974260][ T3640]  ? do_writepages+0x427/0xc30
[ 1227.979841][ T3640]  ? __writeback_single_inode+0x10d/0x12c0
[ 1227.986121][ T3640]  ? writeback_sb_inodes+0xc95/0x1e00
[ 1227.991848][ T3640]  ? wb_writeback+0x4df/0xea0
[ 1227.997274][ T3640]  ? wb_workfn+0x40b/0x1940
[ 1228.002023][ T3640]  ? process_scheduled_works+0xa81/0x1bd0
[ 1228.007968][ T3640]  ? worker_thread+0xea5/0x1560
[ 1228.013470][ T3640]  ? kthread+0x3e2/0x540
[ 1228.018141][ T3640]  ? ret_from_fork+0x6d/0x90
[ 1228.023074][ T3640]  ? ret_from_fork_asm+0x1a/0x30
[ 1228.029663][ T3640]  ? ext4_do_writepages+0x3733/0x62e0
[ 1228.035808][ T3640]  ? ext4_writepages+0x312/0x830
[ 1228.041266][ T3640]  ? do_writepages+0x427/0xc30
[ 1228.046448][ T3640]  ? __writeback_single_inode+0x10d/0x12c0
[ 1228.052584][ T3640]  ? writeback_sb_inodes+0xc95/0x1e00
[ 1228.058418][ T3640]  ? wb_writeback+0x4df/0xea0
[ 1228.063324][ T3640]  ? wb_workfn+0x40b/0x1940
[ 1228.068087][ T3640]  ? process_scheduled_works+0xa81/0x1bd0
[ 1228.074022][ T3640]  ? worker_thread+0xea5/0x1560
[ 1228.079087][ T3640]  ? kthread+0x3e2/0x540
[ 1228.083561][ T3640]  ? ret_from_fork+0x6d/0x90
[ 1228.088404][ T3640]  ? ret_from_fork_asm+0x1a/0x30
[ 1228.093788][ T3640]  ? should_fail_ex+0x4a/0x800
[ 1228.098775][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.104186][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.110262][ T3640]  kmsan_internal_check_memory+0x48c/0x560
[ 1228.116873][ T3640]  kmsan_handle_dma+0xac/0xc0
[ 1228.124331][ T3640]  virtqueue_add+0x1e86/0x65c0
[ 1228.129856][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.135480][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.141531][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.147665][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.153195][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.159300][ T3640]  virtqueue_add_sgs+0x186/0x1b0
[ 1228.164510][ T3640]  virtscsi_add_cmd+0x838/0xad0
[ 1228.169675][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.176025][ T3640]  virtscsi_queuecommand+0x898/0xa60
[ 1228.181753][ T3640]  ? __pfx_virtscsi_queuecommand+0x10/0x10
[ 1228.188267][ T3640]  scsi_queue_rq+0x4cc7/0x5a80
[ 1228.193402][ T3640]  ? __pfx_scsi_queue_rq+0x10/0x10
[ 1228.198774][ T3640]  blk_mq_dispatch_rq_list+0x79b/0x3440
[ 1228.204585][ T3640]  ? sbitmap_get+0x430/0x670
[ 1228.209471][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.215557][ T3640]  ? dd_dispatch_request+0x9a1/0xa20
[ 1228.221297][ T3640]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[ 1228.228277][ T3640]  ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0
[ 1228.235138][ T3640]  blk_mq_sched_dispatch_requests+0x12f/0x270
[ 1228.241471][ T3640]  blk_mq_run_hw_queue+0x6e4/0xbc0
[ 1228.247024][ T3640]  ? __pfx_dd_insert_requests+0x10/0x10
[ 1228.252985][ T3640]  blk_mq_flush_plug_list+0x1683/0x2b20
[ 1228.259159][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.265457][ T3640]  blk_add_rq_to_plug+0x2c6/0x970
[ 1228.270789][ T3640]  blk_mq_submit_bio+0x26e8/0x3390
[ 1228.276464][ T3640]  __submit_bio+0x3b9/0xb60
[ 1228.281350][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.287178][ T3640]  submit_bio_noacct_nocheck+0x148c/0x1800
[ 1228.293828][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.299478][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.305193][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.312281][ T3640]  submit_bio_noacct+0x1bd8/0x27f0
[ 1228.317837][ T3640]  submit_bio+0x58a/0x5b0
[ 1228.322450][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.328708][ T3640]  ext4_bio_write_folio+0x1e76/0x2e40
[ 1228.334410][ T3640]  mpage_submit_folio+0x351/0x4a0
[ 1228.339841][ T3640]  ext4_do_writepages+0x3733/0x62e0
[ 1228.345371][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.350976][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.356499][ T3640]  ext4_writepages+0x312/0x830
[ 1228.361511][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.367557][ T3640]  ? __pfx_ext4_writepages+0x10/0x10
[ 1228.373257][ T3640]  do_writepages+0x427/0xc30
[ 1228.378046][ T3640]  ? stack_depot_save_flags+0x2c/0x6e0
[ 1228.384010][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.390200][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.396891][ T3640]  __writeback_single_inode+0x10d/0x12c0
[ 1228.403943][ T3640]  ? _raw_spin_unlock+0x30/0x50
[ 1228.410392][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.417531][ T3640]  writeback_sb_inodes+0xc95/0x1e00
[ 1228.423205][ T3640]  wb_writeback+0x4df/0xea0
[ 1228.428192][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.433616][ T3640]  ? kmsan_get_metadata+0x146/0x1d0
[ 1228.439491][ T3640]  ? queue_io+0x481/0x780
[ 1228.444176][ T3640]  wb_workfn+0x40b/0x1940
[ 1228.448858][ T3640]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1228.455007][ T3640]  ? __pfx_wb_workfn+0x10/0x10
[ 1228.460005][ T3640]  process_scheduled_works+0xa81/0x1bd0
[ 1228.465941][ T3640]  worker_thread+0xea5/0x1560
[ 1228.470990][ T3640]  kthread+0x3e2/0x540
[ 1228.475366][ T3640]  ? __pfx_worker_thread+0x10/0x10
[ 1228.481037][ T3640]  ? __pfx_kthread+0x10/0x10
[ 1228.485925][ T3640]  ret_from_fork+0x6d/0x90
[ 1228.490657][ T3640]  ? __pfx_kthread+0x10/0x10
[ 1228.495694][ T3640]  ret_from_fork_asm+0x1a/0x30
[ 1228.500905][ T3640]  </TASK>
[ 1228.504472][ T3640] Kernel Offset: disabled
[ 1228.509078][ T3640] Rebooting in 86400 seconds..