last executing test programs:

16.159314929s ago: executing program 3 (id=1921):
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r0, &(0x7f0000000400)="37f8edf5985d6e8ab1f6a43ee5ac41c516c467f4fffffff4f9b5a9e845447cb57749cf6d7a0dbf3f9c09eba78d01584a636051", 0x33)
syz_open_dev$char_usb(0xc, 0xb4, 0x1000000000000)
syz_usb_disconnect(0xffffffffffffffff)

14.603411965s ago: executing program 3 (id=1925):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
shutdown(0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[])
chdir(&(0x7f0000000340)='./file0\x00')
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x9402, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
execve(0x0, 0x0, &(0x7f0000019100)={[], 0x5c000000})

13.464168397s ago: executing program 0 (id=1930):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4044801)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0xa0363159, 0x7, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000000c40)=""/127, 0x7f}], 0x2}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000280)=""/40, 0x28}], 0x5, &(0x7f0000007240)=""/4106, 0x100a}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x9}, 0x5}], 0x3, 0x12113, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb)
socket$kcm(0x10, 0x2, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, &(0x7f0000000200)='m', 0x1)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))

13.361507216s ago: executing program 3 (id=1931):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0)

9.997570458s ago: executing program 0 (id=1937):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000300)={0x0, 0x13}, 0x0, 0x0})

9.910400876s ago: executing program 2 (id=1938):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
epoll_create(0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001300)={0x0, 0x1}, &(0x7f0000001340)=0x8)

9.48242407s ago: executing program 3 (id=1939):
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[], 0x0)

8.87464533s ago: executing program 2 (id=1941):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51"])
openat$dir(0xffffffffffffff9c, 0x0, 0x2c0000, 0x28)
rename(0x0, &(0x7f0000000080)='./file1\x00')
creat(&(0x7f0000000440)='./file0\x00', 0x0)
userfaultfd(0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendfile(r3, r3, 0x0, 0x40008)

7.550749307s ago: executing program 1 (id=1944):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a202"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYBLOB="ebffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.098931694s ago: executing program 2 (id=1945):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x9e, &(0x7f0000010140)="$eJzs16GKQkEABdC7L+xu27WIzWzxH/wUsxYxKYJ/4CfaDQa7OMJ7AyLYBIOeEwbuXAam3vKXVtkmZTRYHMrNcrWeTefdGd5Sk+QnyW+SYa/Lx0nXfdV+f9rk/9Hj792LfwsAADyjyfg+X0q9ONcV2IZ+OxLqTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JNcAAAD//0AHJDI=")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r4, 0x0, 0x0, 0x800)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000800)="ca7ac5f90fed369c49ed0fb7f4ba", 0xe}], 0x1)

6.736689203s ago: executing program 4 (id=1946):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205649, 0x0)

6.630042472s ago: executing program 0 (id=1947):
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000700)={0xa, 0x2, &(0x7f0000000040)=[0x4, 0x3], 0x0, 0x0, 0x0})
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

6.373375333s ago: executing program 1 (id=1948):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

6.204376046s ago: executing program 3 (id=1949):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x4002, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x3b)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

6.203759436s ago: executing program 0 (id=1950):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
shutdown(0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[])
chdir(&(0x7f0000000340)='./file0\x00')
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x9402, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
execve(0x0, 0x0, &(0x7f0000019100)={[], 0x5c000000})

5.234017195s ago: executing program 4 (id=1951):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
epoll_create(0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001300)={0x0, 0x1}, &(0x7f0000001340)=0x8)

4.67365546s ago: executing program 0 (id=1952):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000002a00)=@mmap={0x6, 0xa, 0x4, 0x800, 0x6, {0x77359400}, {0x2, 0xc, 0xd1, 0xd, 0x8, 0x0, "c1ccfb16"}, 0xfff})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB])
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

4.405718992s ago: executing program 1 (id=1953):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
mount$bind(0x0, 0x0, 0x0, 0x21, 0x0)
mount(0x0, 0x0, 0x0, 0x2266824, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
getresgid(&(0x7f0000000640), 0x0, &(0x7f00000006c0))

3.741743916s ago: executing program 4 (id=1954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x10001, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004810)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @empty}, 'veth0_macvtap\x00'})

3.543319792s ago: executing program 2 (id=1955):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0800}]})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYRES16], 0xff, 0x2c3, &(0x7f0000000fc0)="$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")
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, 0x8}, 0x10)

3.407706393s ago: executing program 3 (id=1956):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0xfbb3)
r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ca", 0x1}], 0x1, 0x806, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='Q', 0x1, 0x200980)

2.808474612s ago: executing program 4 (id=1957):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51"])
rename(0x0, &(0x7f0000000080)='./file1\x00')
creat(&(0x7f0000000440)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendfile(r3, r3, 0x0, 0x40008)
socket$nl_generic(0x10, 0x3, 0x10)

2.751142807s ago: executing program 1 (id=1958):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000400)={0x80, 0x16, 0x3ff, 0xfffffff7, 0xfffffffc, 0xb})
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x37)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x8, 0x8, 0x1, 0x58, @remote, @mcast1, 0x80, 0x47, 0x10001, 0x7}})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x20, 0x14, 0x4, 0x70bd2a, 0x25dfdbfc, {0xa, 0x8, 0x8, 0xc8, r2}, [@IFA_FLAGS={0x8, 0x8, 0x1}]}, 0x20}, 0x1, 0xffffffea, 0x0, 0x40404a4}, 0x0)

2.053430184s ago: executing program 2 (id=1959):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x410001, 0x2, 0x31424752, 0x7, 0x6, 0x8ea, 0x6, 0x7, 0x1, 0x3, 0x0, 0x4}})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
open_tree(0xffffffffffffffff, 0x0, 0x1001)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf256b0000000c00990000010000390000000a000600ffffffffffff00000a001a00ffffffffffff00000a00060008021100000000000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000100e009001a000802110000010000"], 0x80}, 0x1, 0x0, 0x0, 0x20000094}, 0x1)
renameat2(r2, &(0x7f0000000300)='./mnt\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1)
unshare(0x2040600)

1.096292301s ago: executing program 1 (id=1960):
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)

1.071622284s ago: executing program 2 (id=1961):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x4002, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x5ef, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)

742.85963ms ago: executing program 4 (id=1962):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
lseek(0xffffffffffffffff, 0x10001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x8000, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x4, {@in6_addr=@mcast2}}}]}, 0x38}}, 0x20004810)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @empty}, 'veth0_macvtap\x00'})
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x40, 0x0, @loopback, 0x5}, 0x1c)
r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'adq12b\x00', [0x2f00, 0x1, 0xd09a, 0xfff7ffff, 0x3, 0x4, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1001, 0x9, 0x4, 0x10003, 0x6, 0x1000005, 0x40000009, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2df, 0x2, 0xd, 0x7, 0x3, 0x4, 0x5, 0x70f]})
ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4})
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

141.440739ms ago: executing program 1 (id=1963):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4044801)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0xa0363159, 0x7, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001e80)=""/4099, 0x1003}, {&(0x7f0000000c40)=""/127, 0x7f}], 0x2}}, {{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/124, 0x7c}, {&(0x7f00000004c0)=""/253, 0xfd}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000280)=""/40, 0x28}], 0x5, &(0x7f0000007240)=""/4106, 0x100a}, 0x3}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/169, 0xa9}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x9}, 0x5}], 0x3, 0x12113, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb)
socket$kcm(0x10, 0x2, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00')
acct(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, &(0x7f0000000200)='m', 0x1)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))

22.131958ms ago: executing program 0 (id=1964):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x43, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001000)="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", &(0x7f0000000300)="d6ad9b91f34a659538cc402705f70444e6b5656a0ec546d6d903"}}, &(0x7f0000bbdffc))
pipe2(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscach'])
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

0s ago: executing program 4 (id=1965):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$tun(0xffffffffffffffff, 0x0, 0x32)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r2, &(0x7f0000000300)="ca", 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x3c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x7}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @random="05d4f6bf611f"}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="040e04076d0c06"], 0x7)

kernel console output (not intermixed with test programs):

ct, device number 12
[  313.228859][ T7007] loop3: detected capacity change from 0 to 32768
[  313.982157][   T26] audit: type=1800 audit(1754609498.650:263): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.785" name="file1" dev="loop3" ino=4 res=0 errno=0
[  315.532599][ T7040] loop4: detected capacity change from 0 to 16
[  315.541495][ T7040] erofs: (device loop4): mounted with root inode @ nid 36.
[  315.707388][ T7047] loop1: detected capacity change from 0 to 256
[  315.763458][ T7047] exfat: Deprecated parameter 'utf8'
[  315.793173][ T7047] exfat: Unknown parameter 'zero_size_dir'
[  316.207602][ T4350] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  316.437665][ T4350] usb 2-1: Using ep0 maxpacket: 8
[  316.451813][ T4350] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  316.626961][ T4350] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  316.660573][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.133386][ T7054] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  317.143925][ T7054] syz.4.796: attempt to access beyond end of device
[  317.143925][ T7054] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  317.163907][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.176762][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  317.510172][ T7064] kAFS: No cell specified
[  318.031929][ T7053] loop2: detected capacity change from 0 to 32768
[  318.097760][   T26] audit: type=1800 audit(1754609502.770:264): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.801" name="file1" dev="loop2" ino=4 res=0 errno=0
[  318.448102][ T7071] loop0: detected capacity change from 0 to 128
[  319.095448][   T22] usb 2-1: USB disconnect, device number 8
[  319.807458][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'.
[  319.986993][ T7092] loop3: detected capacity change from 0 to 16
[  320.032079][ T7092] erofs: (device loop3): mounted with root inode @ nid 36.
[  321.862673][ T7110] kAFS: No cell specified
[  321.915531][ T7111] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  321.926153][ T7111] syz.3.813: attempt to access beyond end of device
[  321.926153][ T7111] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  323.841948][ T7130] loop0: detected capacity change from 0 to 64
[  323.899444][ T5341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  324.313145][ T7136] syz.2.824 uses obsolete (PF_INET,SOCK_PACKET)
[  324.803089][ T5695] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  325.093845][ T5695] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  326.277617][ T5695] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  326.346122][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.416683][ T5695] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  326.489725][ T7148] input: syz0 as /devices/virtual/input/input13
[  326.565519][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  326.649525][ T5695] usb 2-1: Product: syz
[  326.678610][ T5695] usb 2-1: Manufacturer: syz
[  326.701324][ T5695] usb 2-1: SerialNumber: syz
[  327.107474][ T5695] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  327.255051][ T5695] usb 2-1: USB disconnect, device number 9
[  327.301872][ T5695] usblp0: removed
[  327.732598][ T7173] loop2: detected capacity change from 0 to 128
[  328.685437][ T7183] loop0: detected capacity change from 0 to 64
[  328.805076][ T5341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.327530][ T4329] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  329.600278][ T4329] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  329.980677][ T4329] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  330.001530][ T4329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  330.031936][ T4329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  330.068062][ T4329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  330.127363][ T4329] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  330.139066][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  330.148060][ T4329] usb 5-1: Product: syz
[  330.152251][ T4329] usb 5-1: Manufacturer: syz
[  330.185766][ T4329] cdc_wdm 5-1:1.0: skipping garbage
[  330.191597][ T4329] cdc_wdm 5-1:1.0: skipping garbage
[  330.256345][ T4329] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  330.262819][ T4329] cdc_wdm 5-1:1.0: Unknown control protocol
[  330.417143][ T4329] usb 5-1: USB disconnect, device number 3
[  331.266256][ T7210] netlink: 64 bytes leftover after parsing attributes in process `syz.1.847'.
[  331.442525][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'.
[  332.581093][ T7234] loop4: detected capacity change from 0 to 64
[  333.268144][ T5341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  334.056669][   T26] audit: type=1326 audit(1754609518.720:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.081932][ T7253] loop4: detected capacity change from 0 to 32768
[  335.438472][ T7252] find_entry called with index = 0
[  335.443972][ T7252] find_entry called with index = 0
[  335.450375][ T7252] read_mapping_page failed!
[  335.455080][ T7252] ERROR: (device loop4): txCommit: 
[  335.455080][ T7252] 
[  335.601991][   T26] audit: type=1326 audit(1754609518.760:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.624961][   T26] audit: type=1326 audit(1754609518.760:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.647520][   T26] audit: type=1326 audit(1754609518.760:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.670397][   T26] audit: type=1326 audit(1754609518.760:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.695405][   T26] audit: type=1326 audit(1754609518.760:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  335.737873][   T26] audit: type=1326 audit(1754609518.770:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  336.268249][   T26] audit: type=1326 audit(1754609518.770:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  336.305889][   T26] audit: type=1326 audit(1754609518.770:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  336.893041][   T26] audit: type=1326 audit(1754609518.770:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  337.343527][ T7267] loop4: detected capacity change from 0 to 2048
[  337.717405][ T7267] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  337.737467][ T7267] NILFS (loop4): mounting unchecked fs
[  337.940597][ T7267] NILFS (loop4): recovery complete
[  338.061308][ T7277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  338.326185][ T7281] loop3: detected capacity change from 0 to 64
[  340.963061][ T7320] loop3: detected capacity change from 0 to 2048
[  341.009742][ T7320] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  341.039484][ T7320] NILFS (loop3): mounting unchecked fs
[  341.096108][ T7320] NILFS (loop3): recovery complete
[  341.126005][ T7321] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  341.148579][   T26] kauditd_printk_skb: 23 callbacks suppressed
[  341.148594][   T26] audit: type=1800 audit(1754609525.820:298): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="file1" dev="loop3" ino=15 res=0 errno=0
[  341.281575][   T26] audit: type=1800 audit(1754609525.850:299): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="file1" dev="loop3" ino=15 res=0 errno=0
[  342.152215][ T7333] loop4: detected capacity change from 0 to 64
[  342.649757][ T7337] loop1: detected capacity change from 0 to 128
[  344.333043][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'.
[  344.404862][ T7360] loop2: detected capacity change from 0 to 2048
[  344.416541][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'.
[  345.178918][ T7360] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  345.200262][ T7360] NILFS (loop2): mounting unchecked fs
[  345.245548][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop2
[  345.271788][ T7360] NILFS (loop2): recovery complete
[  345.315815][ T7368] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  345.357784][   T26] audit: type=1800 audit(1754609530.030:300): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file1" dev="loop2" ino=15 res=0 errno=0
[  345.437841][   T26] audit: type=1800 audit(1754609530.050:301): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file1" dev="loop2" ino=15 res=0 errno=0
[  345.578758][ T7377] loop3: detected capacity change from 0 to 64
[  346.315576][   T26] audit: type=1326 audit(1754609530.980:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  347.447497][ T7387] loop2: detected capacity change from 0 to 32768
[  347.701308][ T7387] read_mapping_page failed!
[  347.706052][ T7387] ERROR: (device loop2): txCommit: 
[  347.706052][ T7387] 
[  347.991651][   T26] audit: type=1326 audit(1754609531.010:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  348.349749][ T7394] loop3: detected capacity change from 0 to 128
[  348.854416][   T26] audit: type=1326 audit(1754609531.010:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  348.892828][   T26] audit: type=1326 audit(1754609531.010:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  349.055290][   T26] audit: type=1326 audit(1754609531.020:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  349.104513][   T26] audit: type=1326 audit(1754609531.030:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  349.138716][   T26] audit: type=1326 audit(1754609531.030:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  349.170279][   T26] audit: type=1326 audit(1754609531.030:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  349.217559][   T26] audit: type=1326 audit(1754609531.030:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  350.023147][   T26] audit: type=1326 audit(1754609531.030:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  350.981456][ T7412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'.
[  351.084426][ T7414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'.
[  351.376754][ T7420] loop4: detected capacity change from 0 to 2048
[  351.398034][ T7422] loop1: detected capacity change from 0 to 64
[  351.431032][ T7420] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  351.462826][ T7420] NILFS (loop4): mounting unchecked fs
[  351.583589][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop4
[  351.596664][ T7420] NILFS (loop4): recovery complete
[  351.698226][ T7426] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  351.718744][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  351.718759][   T26] audit: type=1800 audit(1754609536.390:331): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.911" name="file1" dev="loop4" ino=15 res=0 errno=0
[  351.898429][   T26] audit: type=1800 audit(1754609536.430:332): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.911" name="file1" dev="loop4" ino=15 res=0 errno=0
[  354.573379][ T7441] loop4: detected capacity change from 0 to 32768
[  354.704531][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.923'.
[  354.778726][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[  355.490668][ T7470] loop3: detected capacity change from 0 to 64
[  355.539725][ T5341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  356.791146][ T7479] loop1: detected capacity change from 0 to 2048
[  356.851770][ T7479] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  356.887502][ T7479] NILFS (loop1): mounting unchecked fs
[  356.987711][ T7479] NILFS (loop1): recovery complete
[  357.017090][ T7480] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.033019][   T26] audit: type=1800 audit(1754609541.700:333): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.928" name="file1" dev="loop1" ino=15 res=0 errno=0
[  357.128042][   T26] audit: type=1800 audit(1754609541.700:334): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.928" name="file1" dev="loop1" ino=15 res=0 errno=0
[  360.024261][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'.
[  360.087866][ T7512] loop0: detected capacity change from 0 to 64
[  360.120021][ T5341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  360.212382][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'.
[  361.420119][ T7532] binder: 7527:7532 ioctl c0306201 0 returned -14
[  361.798404][ T7534] loop0: detected capacity change from 0 to 2048
[  361.846565][ T7534] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  361.900818][ T7534] NILFS (loop0): mounting unchecked fs
[  361.918836][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop0
[  361.986852][ T7534] NILFS (loop0): recovery complete
[  362.036492][ T7537] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  362.100725][   T26] audit: type=1800 audit(1754609546.770:335): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.942" name="file1" dev="loop0" ino=15 res=0 errno=0
[  362.349767][   T26] audit: type=1800 audit(1754609546.820:336): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.942" name="file1" dev="loop0" ino=15 res=0 errno=0
[  362.533730][ T7539] loop1: detected capacity change from 0 to 2048
[  362.698754][ T7539] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  363.460573][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  364.562735][ T7558] loop3: detected capacity change from 0 to 64
[  365.215607][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'.
[  365.290537][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'.
[  365.375273][   T26] audit: type=1326 audit(1754609550.040:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  365.782162][   T26] audit: type=1326 audit(1754609550.070:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  366.501396][ T7572] loop2: detected capacity change from 0 to 32768
[  366.558739][ T7570] find_entry called with index = 0
[  366.564203][ T7570] find_entry called with index = 0
[  366.570142][ T7570] read_mapping_page failed!
[  366.574740][ T7570] ERROR: (device loop2): txCommit: 
[  366.574740][ T7570] 
[  366.721211][   T26] audit: type=1326 audit(1754609550.070:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  366.743706][   T26] audit: type=1326 audit(1754609550.070:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  366.766001][   T26] audit: type=1326 audit(1754609550.080:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  366.793190][   T26] audit: type=1326 audit(1754609550.080:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  366.905425][   T26] audit: type=1326 audit(1754609550.080:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.173389][   T26] audit: type=1326 audit(1754609550.090:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.407374][   T26] audit: type=1326 audit(1754609550.090:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.517485][   T26] audit: type=1326 audit(1754609550.090:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.684794][   T26] audit: type=1326 audit(1754609550.090:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.709016][   T26] audit: type=1326 audit(1754609550.090:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18d550 code=0x7ffc0000
[  367.757345][   T26] audit: type=1326 audit(1754609550.090:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.787564][ T7583] loop3: detected capacity change from 0 to 2048
[  367.809674][   T26] audit: type=1326 audit(1754609550.090:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  367.865550][ T7583] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  368.077636][   T26] audit: type=1326 audit(1754609550.090:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  368.101035][   T26] audit: type=1326 audit(1754609550.090:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  368.124905][ T7583] NILFS (loop3): mounting unchecked fs
[  368.137140][   T26] audit: type=1326 audit(1754609550.090:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7566 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  368.303622][ T7583] NILFS (loop3): recovery complete
[  368.313193][ T7591] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.428544][ T7594] loop2: detected capacity change from 0 to 32768
[  369.533904][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  369.588131][ T7598] loop1: detected capacity change from 0 to 32768
[  369.653640][ T4267] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  372.154088][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'.
[  372.235979][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.968'.
[  372.261065][   T26] kauditd_printk_skb: 16 callbacks suppressed
[  372.261105][   T26] audit: type=1326 audit(1754609556.930:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.402814][   T26] audit: type=1326 audit(1754609556.970:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.426069][   T26] audit: type=1326 audit(1754609556.970:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.448625][   T26] audit: type=1326 audit(1754609556.970:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.471102][   T26] audit: type=1326 audit(1754609556.970:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.493954][   T26] audit: type=1326 audit(1754609556.970:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.517209][   T26] audit: type=1326 audit(1754609556.970:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.539759][   T26] audit: type=1326 audit(1754609556.970:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.570589][   T26] audit: type=1326 audit(1754609556.970:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  372.940290][   T26] audit: type=1326 audit(1754609556.980:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7629 comm="syz.1.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  373.645802][ T7634] loop1: detected capacity change from 0 to 32768
[  373.680246][ T7633] read_mapping_page failed!
[  373.684970][ T7633] ERROR: (device loop1): txCommit: 
[  373.684970][ T7633] 
[  376.019336][   T14] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  376.361565][   T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  376.377313][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.397790][   T14] usb 3-1: Product: syz
[  376.406464][   T14] usb 3-1: Manufacturer: syz
[  376.421812][   T14] usb 3-1: SerialNumber: syz
[  376.443426][   T14] usb 3-1: config 0 descriptor??
[  376.656549][   T14] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  377.874193][ T7670] loop0: detected capacity change from 0 to 16
[  377.932487][ T7670] erofs: (device loop0): mounted with root inode @ nid 36.
[  378.025908][ T7673] loop4: detected capacity change from 0 to 2048
[  378.062252][ T7673] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  378.088674][   T14] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  378.117731][ T7673] NILFS (loop4): mounting unchecked fs
[  378.127495][   T14] usb 3-1: USB disconnect, device number 13
[  378.215272][ T7673] NILFS (loop4): recovery complete
[  378.286094][ T7677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  378.296688][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  378.296701][   T26] audit: type=1800 audit(1754609562.960:402): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="file1" dev="loop4" ino=15 res=0 errno=0
[  378.327325][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'.
[  378.345667][   T26] audit: type=1800 audit(1754609563.010:403): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.981" name="file1" dev="loop4" ino=15 res=0 errno=0
[  378.559389][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.565761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  379.229476][ T7691] input: syz0 as /devices/virtual/input/input14
[  379.512694][ T7693] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  379.607472][ T7693] syz.0.980: attempt to access beyond end of device
[  379.607472][ T7693] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  380.227206][ T7682] loop1: detected capacity change from 0 to 32768
[  380.312064][ T4267] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  380.391301][ T7686] loop2: detected capacity change from 0 to 32768
[  380.461560][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  382.836446][ T7720] loop0: detected capacity change from 0 to 2048
[  382.912852][ T7720] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  382.961167][ T7720] NILFS (loop0): mounting unchecked fs
[  383.024316][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop0
[  383.066864][ T7720] NILFS (loop0): recovery complete
[  383.100459][ T7721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  383.135021][   T26] audit: type=1800 audit(1754609567.800:404): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="file1" dev="loop0" ino=15 res=0 errno=0
[  383.547826][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'.
[  384.221383][ T7737] input: syz0 as /devices/virtual/input/input15
[  384.972910][   T26] audit: type=1326 audit(1754609569.640:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  385.974961][ T7748] loop1: detected capacity change from 0 to 32768
[  386.239262][ T7747] read_mapping_page failed!
[  386.243889][ T7747] ERROR: (device loop1): txCommit: 
[  386.243889][ T7747] 
[  386.530491][   T26] audit: type=1326 audit(1754609569.670:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  386.680420][   T26] audit: type=1326 audit(1754609569.670:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  386.796967][   T26] audit: type=1326 audit(1754609569.670:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  386.903670][   T26] audit: type=1326 audit(1754609569.680:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.030454][   T26] audit: type=1326 audit(1754609569.680:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.168409][   T26] audit: type=1326 audit(1754609569.680:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.299441][   T26] audit: type=1326 audit(1754609569.680:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.403625][   T26] audit: type=1326 audit(1754609569.680:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.567083][ T7751] loop3: detected capacity change from 0 to 32768
[  387.576976][ T7766] loop0: detected capacity change from 0 to 16
[  387.594446][   T26] audit: type=1326 audit(1754609569.680:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7743 comm="syz.1.1002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  387.649749][ T7766] erofs: (device loop0): mounted with root inode @ nid 36.
[  387.664533][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  387.674038][ T7764] loop1: detected capacity change from 0 to 2048
[  387.892296][ T7764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  388.017800][ T7771] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  388.028465][ T7771] syz.0.1008: attempt to access beyond end of device
[  388.028465][ T7771] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  388.958420][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  389.175954][ T7780] kAFS: No cell specified
[  390.345211][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'.
[  390.605143][ T7800] input: syz0 as /devices/virtual/input/input16
[  391.280642][ T7803] loop3: detected capacity change from 0 to 256
[  391.312165][ T7803] exfat: Deprecated parameter 'utf8'
[  391.455893][ T7803] exfat: Unknown parameter 'zero_size_dir'
[  391.685972][ T7812] loop2: detected capacity change from 0 to 16
[  391.707029][ T7812] erofs: (device loop2): mounted with root inode @ nid 36.
[  391.894035][   T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  392.223878][ T7817] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  392.234282][ T7817] syz.2.1021: attempt to access beyond end of device
[  392.234282][ T7817] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  392.587934][   T14] usb 4-1: Using ep0 maxpacket: 8
[  392.614719][   T14] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  392.624211][   T14] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  392.657503][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.581611][ T7831] kAFS: No cell specified
[  394.072224][ T7821] loop2: detected capacity change from 0 to 32768
[  394.092261][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  394.342598][ T7837] input: syz0 as /devices/virtual/input/input17
[  394.394971][ T7838] loop0: detected capacity change from 0 to 128
[  394.580507][ T4329] usb 4-1: USB disconnect, device number 11
[  395.504265][ T7853] loop0: detected capacity change from 0 to 16
[  395.561647][ T7853] erofs: (device loop0): mounted with root inode @ nid 36.
[  396.036869][ T7858] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  396.047308][ T7858] syz.0.1033: attempt to access beyond end of device
[  396.047308][ T7858] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  396.813258][ T7866] kAFS: No cell specified
[  397.629040][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  397.629079][   T26] audit: type=1326 audit(1754609582.300:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  398.753193][ T7877] loop0: detected capacity change from 0 to 32768
[  398.909491][ T7876] read_mapping_page failed!
[  398.914206][ T7876] ERROR: (device loop0): txCommit: 
[  398.914206][ T7876] 
[  399.253830][   T26] audit: type=1326 audit(1754609582.330:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.388383][   T26] audit: type=1326 audit(1754609582.330:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.463437][   T26] audit: type=1326 audit(1754609582.330:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.580105][   T26] audit: type=1326 audit(1754609582.340:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.614127][ T7882] input: syz0 as /devices/virtual/input/input18
[  399.690337][   T26] audit: type=1326 audit(1754609582.340:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.816782][   T26] audit: type=1326 audit(1754609582.340:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  399.953358][   T26] audit: type=1326 audit(1754609582.340:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  400.005417][   T26] audit: type=1326 audit(1754609582.340:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  400.036584][   T26] audit: type=1326 audit(1754609582.340:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7873 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fccc2b8ebe9 code=0x7ffc0000
[  400.282739][ T7889] loop4: detected capacity change from 0 to 256
[  400.324504][ T7889] exfat: Deprecated parameter 'utf8'
[  400.332200][ T7889] exfat: Unknown parameter 'zero_size_dir'
[  400.565593][ T7892] loop0: detected capacity change from 0 to 128
[  400.657310][ T4307] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  400.857412][ T4307] usb 5-1: Using ep0 maxpacket: 8
[  400.864490][ T4307] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  400.962390][ T4307] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  401.036392][ T4307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.107441][ T7902] loop0: detected capacity change from 0 to 16
[  402.350075][ T7902] erofs: (device loop0): mounted with root inode @ nid 36.
[  402.856144][ T7911] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  402.866644][ T7911] syz.0.1046: attempt to access beyond end of device
[  402.866644][ T7911] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  403.014372][ T7894] loop3: detected capacity change from 0 to 32768
[  403.117395][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  403.710925][ T7919] kAFS: No cell specified
[  403.996650][ T5695] usb 5-1: USB disconnect, device number 4
[  404.229596][ T7923] input: syz0 as /devices/virtual/input/input19
[  405.074550][ T7921] loop2: detected capacity change from 0 to 32768
[  405.114592][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  405.961046][ T7942] read_mapping_page failed!
[  406.665330][ T7948] loop1: detected capacity change from 0 to 16
[  406.683084][ T7948] erofs: (device loop1): mounted with root inode @ nid 36.
[  406.924810][ T7954] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  406.935325][ T7954] syz.1.1061: attempt to access beyond end of device
[  406.935325][ T7954] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  407.878699][ T7960] kAFS: No cell specified
[  408.104195][ T7963] loop2: detected capacity change from 0 to 256
[  408.155514][ T7965] input: syz0 as /devices/virtual/input/input20
[  408.177843][ T7963] exfat: Deprecated parameter 'utf8'
[  408.192227][ T7963] exfat: Unknown parameter 'zero_size_dir'
[  408.578066][   T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  408.918055][   T14] usb 3-1: Using ep0 maxpacket: 8
[  408.926395][   T14] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  409.012457][   T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  409.075683][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.623901][ T4308] libceph: connect (1)[c::]:6789 error -101
[  409.628848][ T7968] loop1: detected capacity change from 0 to 32768
[  409.632321][ T4308] libceph: mon0 (1)[c::]:6789 connect error
[  409.671473][ T4267] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  409.755709][ T7980] ceph: No mds server is up or the cluster is laggy
[  409.768238][ T7986] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  409.783367][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  409.792958][ T7986] device bridge_slave_1 left promiscuous mode
[  409.799405][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.815921][ T7986] device bridge_slave_0 left promiscuous mode
[  409.823854][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.901446][ T7975] loop3: detected capacity change from 0 to 32768
[  409.929716][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  410.897298][ T5695] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  411.089538][ T5695] usb 5-1: Using ep0 maxpacket: 32
[  411.113901][ T4308] usb 3-1: USB disconnect, device number 14
[  411.137785][ T5695] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  411.146072][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.182034][ T5695] usb 5-1: config 0 has no interface number 0
[  411.188418][ T5695] usb 5-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.223622][ T5695] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  411.242992][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.255626][ T5695] usb 5-1: Product: syz
[  411.260232][ T5695] usb 5-1: Manufacturer: syz
[  411.265062][ T5695] usb 5-1: SerialNumber: syz
[  411.283616][ T5695] usb 5-1: config 0 descriptor??
[  411.315311][ T5695] smsc95xx v2.0.0
[  411.467303][ T5695] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  411.488074][ T5695] smsc95xx: probe of 5-1:0.67 failed with error -22
[  411.520832][ T8008] kAFS: No cell specified
[  411.849037][ T8011] input: syz0 as /devices/virtual/input/input21
[  411.867182][ T5695] usb 5-1: USB disconnect, device number 5
[  413.015499][ T8024] loop0: detected capacity change from 0 to 4096
[  413.140553][ T8031] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  413.839039][ T8027] loop3: detected capacity change from 0 to 32768
[  413.891335][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  413.952267][ T8036] loop2: detected capacity change from 0 to 256
[  413.973461][ T8036] exfat: Deprecated parameter 'utf8'
[  413.992973][ T8036] exfat: Unknown parameter 'zero_size_dir'
[  414.342586][   T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  414.687366][   T14] usb 3-1: Using ep0 maxpacket: 8
[  414.697369][   T14] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  414.733360][   T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  414.757348][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.314474][ T8044] loop1: detected capacity change from 0 to 2048
[  415.342751][ T8044] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  415.371100][ T8044] NILFS (loop1): mounting unchecked fs
[  415.485887][ T8044] NILFS (loop1): recovery complete
[  415.601849][ T8052] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  415.874166][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  415.874198][   T26] audit: type=1800 audit(1754609600.540:467): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1089" name="file1" dev="loop1" ino=15 res=0 errno=0
[  416.068074][   T26] audit: type=1800 audit(1754609600.620:468): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1089" name="file1" dev="loop1" ino=15 res=0 errno=0
[  416.480299][ T8063] input: syz0 as /devices/virtual/input/input22
[  416.645615][ T8070] loop0: detected capacity change from 0 to 4096
[  416.679765][ T8071] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  416.737295][ T4388] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  416.910311][ T4388] usb 2-1: device descriptor read/64, error -71
[  417.023839][ T8073] loop4: detected capacity change from 0 to 40427
[  417.043626][ T8073] F2FS-fs (loop4): Unrecognized mount option "á]žé(ÞšRX—sÔÏ2K�ŽðÂ&aÐh÷Ý\&kˆ%úÁš…tf(
\Ö™x6ýz¾B¨ª>7°žl6éwï€Aµ©
fn=©µ­~ÕŸÐÂî}–˜z«%qßþ|«hÕ[ÈaXj ·°¡)\Œ*Ðc*Ïo…Àdòc\­rÈ[Ž&1րƼŸ0¯Ú© ïxÉ«ïî7tÐìÖrżC7%k•xÿ+«è" or missing value
[  417.070604][ T4371] usb 3-1: USB disconnect, device number 15
[  417.297312][ T4388] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  417.534754][ T4388] usb 2-1: device descriptor read/64, error -71
[  418.037766][ T4388] usb usb2-port1: attempt power cycle
[  418.607407][ T4388] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  418.838108][ T4388] usb 2-1: device descriptor read/8, error -71
[  419.147357][ T4388] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  419.198439][ T4388] usb 2-1: device descriptor read/8, error -71
[  419.312389][ T8108] loop0: detected capacity change from 0 to 2048
[  419.319104][ T4388] usb usb2-port1: unable to enumerate USB device
[  419.349030][ T8108] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  419.404000][ T8108] NILFS (loop0): mounting unchecked fs
[  419.445786][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop0
[  419.490555][ T8108] NILFS (loop0): recovery complete
[  419.530152][ T8109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  419.561430][   T26] audit: type=1800 audit(1754609604.230:469): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file1" dev="loop0" ino=15 res=0 errno=0
[  419.645774][   T26] audit: type=1800 audit(1754609604.260:470): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file1" dev="loop0" ino=15 res=0 errno=0
[  419.666411][    C0] vkms_vblank_simulate: vblank timer overrun
[  419.700015][ T8111] input: syz0 as /devices/virtual/input/input23
[  420.136141][ T8116] loop1: detected capacity change from 0 to 4096
[  420.235867][ T8123] loop0: detected capacity change from 0 to 256
[  420.270439][ T8123] exfat: Deprecated parameter 'utf8'
[  420.289780][ T8124] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  420.316752][ T8123] exfat: Unknown parameter 'zero_size_dir'
[  420.703941][ T4388] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  420.917293][ T4388] usb 1-1: Using ep0 maxpacket: 8
[  420.929750][ T4388] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  420.979691][ T4388] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  420.999928][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.319951][ T8121] loop3: detected capacity change from 0 to 32768
[  421.364280][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  421.898378][ T4350] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  422.087354][ T4350] usb 2-1: Using ep0 maxpacket: 32
[  422.093919][ T4350] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  422.115588][ T4350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  422.132162][ T4350] usb 2-1: config 0 has no interface number 0
[  422.148614][ T4350] usb 2-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  422.157176][ T8146] loop4: detected capacity change from 0 to 2048
[  422.181480][ T4350] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  422.195769][ T4350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.217077][ T4350] usb 2-1: Product: syz
[  422.227271][ T4350] usb 2-1: Manufacturer: syz
[  422.231272][ T8146] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  422.237688][ T4350] usb 2-1: SerialNumber: syz
[  422.268652][ T8148] input: syz0 as /devices/virtual/input/input24
[  422.282469][ T8146] NILFS (loop4): mounting unchecked fs
[  422.300534][ T4350] usb 2-1: config 0 descriptor??
[  422.310694][ T5341] udevd[5341]: incorrect nilfs2 checksum on /dev/loop4
[  422.316978][ T4350] smsc95xx v2.0.0
[  422.322153][ T4350] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  422.334352][ T4350] smsc95xx: probe of 2-1:0.67 failed with error -22
[  422.366004][ T8146] NILFS (loop4): recovery complete
[  422.409280][ T8149] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  422.444697][   T26] audit: type=1800 audit(1754609607.110:471): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1118" name="file1" dev="loop4" ino=15 res=0 errno=0
[  422.467463][ T4308] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  422.476175][   T26] audit: type=1800 audit(1754609607.140:472): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1118" name="file1" dev="loop4" ino=15 res=0 errno=0
[  422.530021][ T5695] usb 2-1: USB disconnect, device number 14
[  422.617287][ T4308] usb 4-1: device descriptor read/64, error -71
[  422.785681][ T8159] loop2: detected capacity change from 0 to 4096
[  422.865765][ T8160] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  422.887323][ T4308] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  423.057460][ T4308] usb 4-1: device descriptor read/64, error -71
[  423.187501][ T4308] usb usb4-port1: attempt power cycle
[  423.282783][  T128] usb 1-1: USB disconnect, device number 13
[  423.627456][ T4308] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  423.668632][ T4308] usb 4-1: device descriptor read/8, error -71
[  423.947484][ T4308] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  423.979715][ T4308] usb 4-1: device descriptor read/8, error -71
[  424.108205][ T4308] usb usb4-port1: unable to enumerate USB device
[  424.683667][   T26] audit: type=1326 audit(1754609609.350:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  424.735602][ T8171] loop0: detected capacity change from 0 to 32768
[  424.870279][   T26] audit: type=1326 audit(1754609609.380:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  425.040757][ T4267] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  425.894822][   T26] audit: type=1326 audit(1754609609.380:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  425.917464][    C0] vkms_vblank_simulate: vblank timer overrun
[  425.986589][ T8180] loop4: detected capacity change from 0 to 32768
[  426.047575][ T8179] read_mapping_page failed!
[  426.052291][ T8179] ERROR: (device loop4): txCommit: 
[  426.052291][ T8179] 
[  426.265728][   T26] audit: type=1326 audit(1754609609.380:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  426.444258][   T26] audit: type=1326 audit(1754609609.390:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  426.466619][    C0] vkms_vblank_simulate: vblank timer overrun
[  426.631652][   T26] audit: type=1326 audit(1754609609.390:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  426.653920][    C0] vkms_vblank_simulate: vblank timer overrun
[  426.666812][ T8194] loop0: detected capacity change from 0 to 128
[  426.757339][   T26] audit: type=1326 audit(1754609609.390:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  426.839572][   T26] audit: type=1326 audit(1754609609.390:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbf1518ebe9 code=0x7ffc0000
[  427.562255][ T8203] loop2: detected capacity change from 0 to 256
[  427.629258][ T8203] exfat: Deprecated parameter 'utf8'
[  427.690251][ T8203] exfat: Unknown parameter 'zero_size_dir'
[  427.727435][   T14] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  427.809313][ T8205] loop4: detected capacity change from 0 to 4096
[  427.882243][ T8206] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  427.927454][   T14] usb 1-1: Using ep0 maxpacket: 32
[  427.934450][   T14] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  427.962784][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  427.991599][   T14] usb 1-1: config 0 has no interface number 0
[  428.006166][   T14] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  428.007423][ T4388] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  428.023440][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1138'.
[  428.047016][   T14] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  428.062906][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.097436][   T14] usb 1-1: Product: syz
[  428.114668][   T14] usb 1-1: Manufacturer: syz
[  428.129435][   T14] usb 1-1: SerialNumber: syz
[  428.184385][   T14] usb 1-1: config 0 descriptor??
[  428.224976][   T14] smsc95xx v2.0.0
[  428.233302][   T14] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  428.247344][ T4388] usb 3-1: Using ep0 maxpacket: 8
[  428.247450][   T14] smsc95xx: probe of 1-1:0.67 failed with error -22
[  428.274143][ T4388] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  428.303151][ T4388] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  428.737362][ T4388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.776750][   T14] usb 1-1: USB disconnect, device number 14
[  429.635731][   T26] kauditd_printk_skb: 23 callbacks suppressed
[  429.635746][   T26] audit: type=1326 audit(1754609614.300:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  430.611638][ T8231] loop3: detected capacity change from 0 to 32768
[  431.127018][ T8230] read_mapping_page failed!
[  431.131815][ T8230] ERROR: (device loop3): txCommit: 
[  431.131815][ T8230] 
[  431.280950][   T26] audit: type=1326 audit(1754609614.330:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.305109][   T26] audit: type=1326 audit(1754609614.340:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.328058][   T26] audit: type=1326 audit(1754609614.340:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.352286][   T26] audit: type=1326 audit(1754609614.350:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.377819][   T26] audit: type=1326 audit(1754609614.350:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.400901][   T26] audit: type=1326 audit(1754609614.350:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.423565][   T26] audit: type=1326 audit(1754609614.350:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.445869][ T4388] usb 3-1: USB disconnect, device number 16
[  431.477324][   T26] audit: type=1326 audit(1754609614.350:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  431.547914][   T26] audit: type=1326 audit(1754609614.350:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.3.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8d550 code=0x7ffc0000
[  431.566745][ T8217] loop4: detected capacity change from 0 to 32768
[  431.634299][ T8219] loop1: detected capacity change from 0 to 32768
[  431.656137][ T8217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1141 (8217)
[  431.712381][ T4267] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  431.732211][ T8217] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  432.179776][ T8217] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  432.259198][ T8217] BTRFS info (device loop4): setting nodatacow, compression disabled
[  432.307499][ T8217] BTRFS info (device loop4): max_inline at 0
[  432.314961][ T8217] BTRFS info (device loop4): enabling disk space caching
[  432.349091][ T8217] BTRFS info (device loop4): turning off barriers
[  432.435557][ T8217] BTRFS info (device loop4): turning on flush-on-commit
[  432.466099][ T8217] BTRFS info (device loop4): doing ref verification
[  432.492264][ T8217] BTRFS info (device loop4): force clearing of disk cache
[  432.510352][ T8217] BTRFS info (device loop4): enabling ssd optimizations
[  432.526160][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1150'.
[  432.539396][ T8217] BTRFS info (device loop4): max_inline at 4096
[  432.561735][ T8217] BTRFS info (device loop4): disk space caching is enabled
[  432.812769][ T8217] BTRFS error (device loop4): open_ctree failed: -12
[  433.057869][ T4259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4259)
[  434.507346][ T5690] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  434.717400][ T5690] usb 2-1: Using ep0 maxpacket: 16
[  434.725506][ T5690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.795457][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  434.840456][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  434.936358][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.006847][ T5690] usb 2-1: Product: syz
[  435.022908][ T5690] usb 2-1: Manufacturer: syz
[  435.040056][ T5690] usb 2-1: SerialNumber: syz
[  435.284942][ T5690] usb 2-1: 0:2 : does not exist
[  435.296413][ T5690] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  435.393600][ T5690] usb 2-1: USB disconnect, device number 15
[  435.425201][ T8283] loop0: detected capacity change from 0 to 256
[  435.450581][ T5341] udevd[5341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  435.482933][ T8283] exfat: Deprecated parameter 'utf8'
[  435.553174][ T8283] exfat: Unknown parameter 'zero_size_dir'
[  435.901818][ T8281] loop3: detected capacity change from 0 to 32768
[  435.956163][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  436.007436][ T4388] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  436.207830][ T4388] usb 1-1: Using ep0 maxpacket: 8
[  436.215601][ T4388] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  436.261214][ T4388] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  436.306888][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.469570][ T8289] loop2: detected capacity change from 0 to 32768
[  436.490931][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  437.070649][ T8293] loop4: detected capacity change from 0 to 32768
[  437.168656][ T8293] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  437.278514][ T8293] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  437.347419][ T8293] BTRFS info (device loop4): setting nodatacow, compression disabled
[  437.421170][ T8293] BTRFS info (device loop4): max_inline at 0
[  437.458143][ T8293] BTRFS info (device loop4): enabling disk space caching
[  437.511678][ T8293] BTRFS info (device loop4): turning off barriers
[  437.573143][ T8293] BTRFS info (device loop4): turning on flush-on-commit
[  437.633126][ T8293] BTRFS info (device loop4): doing ref verification
[  437.722000][ T8293] BTRFS info (device loop4): force clearing of disk cache
[  437.764204][ T8293] BTRFS info (device loop4): enabling ssd optimizations
[  437.797592][ T8293] BTRFS info (device loop4): max_inline at 4096
[  437.803999][ T8293] BTRFS info (device loop4): disk space caching is enabled
[  438.485656][ T8293] BTRFS info (device loop4): rebuilding free space tree
[  438.550228][ T4388] usb 1-1: USB disconnect, device number 15
[  438.560659][ T8293] BTRFS info (device loop4): disabling free space tree
[  438.587647][ T8293] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  438.599179][ T8293] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  438.843646][ T4265] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  439.779715][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  439.779730][   T26] audit: type=1326 audit(1754609624.450:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  440.009409][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.015795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.974070][ T8351] loop3: detected capacity change from 0 to 32768
[  441.007253][ T8351] read_mapping_page failed!
[  441.011955][ T8351] ERROR: (device loop3): txCommit: 
[  441.011955][ T8351] 
[  441.167785][   T26] audit: type=1326 audit(1754609624.480:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.190786][   T26] audit: type=1326 audit(1754609624.480:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.213530][   T26] audit: type=1326 audit(1754609624.480:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.285021][   T26] audit: type=1326 audit(1754609624.500:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.317505][   T26] audit: type=1326 audit(1754609624.500:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.367308][   T26] audit: type=1326 audit(1754609624.500:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.522764][ T8354] loop4: detected capacity change from 0 to 128
[  441.661482][   T26] audit: type=1326 audit(1754609624.500:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.750837][   T26] audit: type=1326 audit(1754609624.500:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  441.780797][ T8366] loop4: detected capacity change from 0 to 256
[  441.894178][ T8366] exfat: Deprecated parameter 'utf8'
[  441.902490][ T8366] exfat: Unknown parameter 'zero_size_dir'
[  441.926259][   T26] audit: type=1326 audit(1754609624.500:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8d550 code=0x7ffc0000
[  442.250886][ T5692] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  442.638831][ T5692] usb 5-1: Using ep0 maxpacket: 8
[  442.694041][ T5692] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  442.814683][ T5692] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  442.842397][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.577289][ T4413] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  443.817417][ T4413] usb 3-1: Using ep0 maxpacket: 16
[  443.824925][ T4413] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.835801][ T4413] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  443.860475][ T4413] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  443.878995][ T4413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.896114][ T4413] usb 3-1: Product: syz
[  443.904567][ T4413] usb 3-1: Manufacturer: syz
[  443.916883][ T4413] usb 3-1: SerialNumber: syz
[  444.134801][ T4413] usb 3-1: 0:2 : does not exist
[  444.143860][ T4413] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  444.192319][ T4413] usb 3-1: USB disconnect, device number 17
[  444.853322][ T4413] usb 5-1: USB disconnect, device number 6
[  445.229975][ T8423] device netdevsim0 entered promiscuous mode
[  445.294410][ T8423] device veth0_to_bridge entered promiscuous mode
[  445.299142][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'.
[  445.351907][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  446.599366][ T8443] loop2: detected capacity change from 0 to 256
[  446.606529][ T8443] exfat: Deprecated parameter 'utf8'
[  446.630412][ T8443] exfat: Unknown parameter 'zero_size_dir'
[  446.688585][ T5341] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  446.698579][ T8342] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  446.860777][ T4413] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  446.897348][ T8342] usb 1-1: Using ep0 maxpacket: 16
[  446.905807][ T8342] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.917108][ T8342] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.929449][ T8342] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  446.939089][ T8342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.947090][ T8342] usb 1-1: Product: syz
[  446.951591][ T8342] usb 1-1: Manufacturer: syz
[  446.956313][ T8342] usb 1-1: SerialNumber: syz
[  447.038765][ T5692] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  447.067373][ T4413] usb 4-1: Using ep0 maxpacket: 8
[  447.085212][ T4413] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.097270][ T4413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  447.147659][ T4413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  447.164588][ T4413] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  447.194495][ T8342] usb 1-1: 0:2 : does not exist
[  447.206704][ T4413] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  447.221365][ T4413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.238084][ T8342] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  447.307074][ T4413] hub 4-1:1.0: bad descriptor, ignoring hub
[  447.334147][ T4413] hub: probe of 4-1:1.0 failed with error -5
[  447.382965][ T8342] usb 1-1: USB disconnect, device number 16
[  447.411698][ T4413] cdc_wdm 4-1:1.0: skipping garbage
[  447.442872][ T4413] cdc_wdm 4-1:1.0: skipping garbage
[  447.517733][ T4413] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  447.537893][ T4413] cdc_wdm 4-1:1.0: Unknown control protocol
[  447.587958][ T4413] usb 4-1: USB disconnect, device number 16
[  447.803222][ T5341] udevd[5341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  447.863329][ T5692] usb 3-1: Using ep0 maxpacket: 8
[  447.878413][ T5692] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  447.923763][ T5692] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  448.014230][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.039599][   T26] kauditd_printk_skb: 40 callbacks suppressed
[  448.039721][   T26] audit: type=1326 audit(1754609632.710:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  448.284518][   T26] audit: type=1326 audit(1754609632.740:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  448.307250][    C0] vkms_vblank_simulate: vblank timer overrun
[  448.549005][   T26] audit: type=1326 audit(1754609632.740:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  448.572760][    C0] vkms_vblank_simulate: vblank timer overrun
[  449.168147][   T26] audit: type=1326 audit(1754609632.740:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.219628][ T8462] loop1: detected capacity change from 0 to 32768
[  449.284929][ T8460] read_mapping_page failed!
[  449.290385][ T8460] ERROR: (device loop1): txCommit: 
[  449.290385][ T8460] 
[  449.465699][   T26] audit: type=1326 audit(1754609632.750:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.488412][   T26] audit: type=1326 audit(1754609632.750:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.510843][   T26] audit: type=1326 audit(1754609632.750:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.534055][   T26] audit: type=1326 audit(1754609632.750:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.556549][   T26] audit: type=1326 audit(1754609632.750:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3a38ebe9 code=0x7ffc0000
[  449.579032][   T26] audit: type=1326 audit(1754609632.750:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c3a38d550 code=0x7ffc0000
[  449.813983][ T5695] usb 3-1: USB disconnect, device number 18
[  450.967302][ T5692] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  451.697490][ T5692] usb 5-1: Using ep0 maxpacket: 32
[  451.705524][ T5692] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  451.732234][ T5692] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  451.763862][ T5692] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  451.800454][ T5692] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  451.834028][ T5692] usb 5-1: config 0 interface 0 has no altsetting 0
[  451.846370][ T5692] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  451.876179][ T5692] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  451.907308][ T5692] usb 5-1: Product: syz
[  451.911524][ T5692] usb 5-1: Manufacturer: syz
[  451.942090][ T5692] usb 5-1: SerialNumber: syz
[  451.970924][ T5692] usb 5-1: config 0 descriptor??
[  452.002058][ T5692] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  452.016774][ T8509] loop3: detected capacity change from 0 to 256
[  452.053860][ T5692] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  452.061901][ T8509] exfat: Deprecated parameter 'utf8'
[  452.075278][ T8509] exfat: Unknown parameter 'zero_size_dir'
[  452.288222][ T8515] loop1: detected capacity change from 0 to 128
[  452.338789][ T5692] usb 5-1: USB disconnect, device number 7
[  452.345971][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  452.352811][ T8494] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  452.393396][ T5692] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  452.397347][ T4413] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  452.496449][ T8501] loop2: detected capacity change from 0 to 32768
[  452.535061][ T4267] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  452.607307][ T4413] usb 4-1: Using ep0 maxpacket: 8
[  452.630959][ T4413] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  452.660707][ T4413] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  452.691827][ T4413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.527644][ T8539] loop2: detected capacity change from 0 to 512
[  455.091264][ T5692] usb 4-1: USB disconnect, device number 17
[  455.898362][ T8557] loop3: detected capacity change from 0 to 32768
[  455.941434][ T4267] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  456.252636][ T8565] sctp: [Deprecated]: syz.0.1252 (pid 8565) Use of int in max_burst socket option deprecated.
[  456.252636][ T8565] Use struct sctp_assoc_value instead
[  456.847511][ T4267] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  456.856353][ T4267] Bluetooth: hci1: Injecting HCI hardware error event
[  456.867086][ T4274] Bluetooth: hci1: hardware error 0x00
[  457.645046][ T8561] loop2: detected capacity change from 0 to 32768
[  457.672225][ T8561] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1251 (8561)
[  458.030302][ T8561] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  458.113299][ T8561] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  458.147326][ T8561] BTRFS info (device loop2): setting nodatacow, compression disabled
[  458.155520][ T8561] BTRFS info (device loop2): max_inline at 0
[  458.266055][ T8561] BTRFS info (device loop2): enabling disk space caching
[  458.312768][ T8561] BTRFS info (device loop2): turning off barriers
[  458.330666][ T8561] BTRFS info (device loop2): turning on flush-on-commit
[  458.354890][ T8561] BTRFS info (device loop2): doing ref verification
[  458.370275][ T8561] BTRFS info (device loop2): force clearing of disk cache
[  458.380863][ T8561] BTRFS info (device loop2): enabling ssd optimizations
[  458.433599][ T8583] loop1: detected capacity change from 0 to 512
[  458.440067][ T8561] BTRFS info (device loop2): max_inline at 4096
[  458.446336][ T8561] BTRFS info (device loop2): disk space caching is enabled
[  458.604270][ T8561] BTRFS info (device loop2): rebuilding free space tree
[  458.625569][ T8561] BTRFS info (device loop2): disabling free space tree
[  458.633378][ T8561] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  458.646252][ T8561] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  458.727340][ T4307] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  458.841950][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  458.954962][ T4307] usb 4-1: Using ep0 maxpacket: 16
[  458.984964][ T4307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  458.995367][ T4307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.034997][ T4307] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  459.064988][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.077330][ T4307] usb 4-1: Product: syz
[  459.082033][ T4307] usb 4-1: Manufacturer: syz
[  459.087347][ T4307] usb 4-1: SerialNumber: syz
[  459.120804][ T5341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 12 /dev/loop2 scanned by udevd (5341)
[  459.340944][ T4307] usb 4-1: 0:2 : does not exist
[  459.357936][ T4307] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  459.442855][ T4307] usb 4-1: USB disconnect, device number 18
[  459.607633][ T4274] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  461.036258][ T8630] loop0: detected capacity change from 0 to 16
[  461.084161][ T8630] erofs: (device loop0): mounted with root inode @ nid 36.
[  461.650605][ T8628] loop3: detected capacity change from 0 to 32768
[  461.717479][ T4274] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  461.777087][ T8641] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  461.787538][ T8641] syz.0.1269: attempt to access beyond end of device
[  461.787538][ T8641] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  464.244791][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'.
[  464.762474][ T8649] loop2: detected capacity change from 0 to 32768
[  464.822857][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  464.822902][   T26] audit: type=1326 audit(1754609649.490:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  464.851412][    C1] vkms_vblank_simulate: vblank timer overrun
[  465.957497][ T8673] loop3: detected capacity change from 0 to 32768
[  466.207998][ T8673] read_mapping_page failed!
[  466.213456][ T8673] ERROR: (device loop3): txCommit: 
[  466.213456][ T8673] 
[  466.371086][   T26] audit: type=1326 audit(1754609649.530:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.395862][   T26] audit: type=1326 audit(1754609649.530:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.419743][   T26] audit: type=1326 audit(1754609649.530:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.446090][   T26] audit: type=1326 audit(1754609649.530:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.468750][   T26] audit: type=1326 audit(1754609649.530:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.491093][   T26] audit: type=1326 audit(1754609649.530:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.513738][   T26] audit: type=1326 audit(1754609649.530:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.537568][   T26] audit: type=1326 audit(1754609649.530:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1364b8ebe9 code=0x7ffc0000
[  466.578112][   T26] audit: type=1326 audit(1754609649.530:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.3.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1364b8d550 code=0x7ffc0000
[  468.309059][ T8692] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  468.341134][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.348427][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.715862][ T8713] loop1: detected capacity change from 0 to 64
[  469.770283][ T4506] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  470.606483][   T26] kauditd_printk_skb: 40 callbacks suppressed
[  470.606524][   T26] audit: type=1326 audit(1754609655.270:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  471.682385][ T8721] loop2: detected capacity change from 0 to 32768
[  472.014171][ T8721] read_mapping_page failed!
[  472.019103][ T8721] ERROR: (device loop2): txCommit: 
[  472.019103][ T8721] 
[  472.267913][   T26] audit: type=1326 audit(1754609655.310:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  472.410203][ T8729] loop1: detected capacity change from 0 to 16
[  472.442522][   T26] audit: type=1326 audit(1754609655.310:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  472.472028][ T8729] erofs: (device loop1): mounted with root inode @ nid 36.
[  472.579441][   T26] audit: type=1326 audit(1754609655.310:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  472.605414][   T26] audit: type=1326 audit(1754609655.310:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  473.068285][   T26] audit: type=1326 audit(1754609655.310:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  473.200708][   T26] audit: type=1326 audit(1754609655.310:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  473.288100][   T26] audit: type=1326 audit(1754609655.310:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  473.317591][   T26] audit: type=1326 audit(1754609655.310:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cee18ebe9 code=0x7ffc0000
[  473.360461][   T26] audit: type=1326 audit(1754609655.310:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6cee18d550 code=0x7ffc0000
[  473.409163][ T8737] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  473.419594][ T8737] syz.1.1297: attempt to access beyond end of device
[  473.419594][ T8737] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  475.024810][ T8751] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  475.329989][ T8726] loop4: detected capacity change from 0 to 32768
[  475.802835][ T8761] sctp: [Deprecated]: syz.4.1305 (pid 8761) Use of int in max_burst socket option deprecated.
[  475.802835][ T8761] Use struct sctp_assoc_value instead
[  476.558879][ T8767] loop3: detected capacity change from 0 to 64
[  478.093221][ T8771] loop0: detected capacity change from 0 to 512
[  478.312740][ T8787] netlink: 'syz.1.1312': attribute type 10 has an invalid length.
[  478.397908][ T4259] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  478.443264][ T8787] team0: Device ipvlan1 failed to register rx_handler
[  479.893175][ T8809] loop4: detected capacity change from 0 to 128
[  480.094286][ T8792] loop3: detected capacity change from 0 to 32768
[  480.165632][ T8792] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  480.179040][ T8811] loop2: detected capacity change from 0 to 64
[  480.197087][ T8792] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  480.227868][ T8792] BTRFS info (device loop3): setting nodatacow, compression disabled
[  480.236084][ T8792] BTRFS info (device loop3): max_inline at 0
[  480.314922][ T8792] BTRFS info (device loop3): enabling disk space caching
[  480.397505][ T8792] BTRFS info (device loop3): turning off barriers
[  480.404084][ T8792] BTRFS info (device loop3): turning on flush-on-commit
[  480.578241][ T8792] BTRFS info (device loop3): doing ref verification
[  480.636693][ T8792] BTRFS info (device loop3): force clearing of disk cache
[  480.914027][ T8792] BTRFS info (device loop3): enabling ssd optimizations
[  481.002321][ T8792] BTRFS info (device loop3): max_inline at 4096
[  481.008882][ T8792] BTRFS info (device loop3): disk space caching is enabled
[  482.154421][ T8792] BTRFS error (device loop3): open_ctree failed: -12
[  482.315778][ T8840] loop2: detected capacity change from 0 to 16
[  482.354400][ T8840] erofs: (device loop2): mounted with root inode @ nid 36.
[  482.621480][ T8843] loop0: detected capacity change from 0 to 512
[  482.692070][ T4506] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  482.752317][ T8850] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  482.763536][ T8850] syz.2.1324: attempt to access beyond end of device
[  482.763536][ T8850] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  483.223272][ T8854] input: syz0 as /devices/virtual/input/input25
[  485.783725][ T8872] loop1: detected capacity change from 0 to 64
[  485.829181][ T5341] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  487.520074][ T8862] loop3: detected capacity change from 0 to 32768
[  487.658863][ T8870] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  487.672400][ T8870] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  487.684634][ T8870] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  487.700148][ T8870] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  487.706578][ T8870] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  487.743343][ T8870] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  487.772061][ T8870] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  487.809672][ T8870] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  487.906312][ T8870] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  488.422740][ T8881] loop1: detected capacity change from 0 to 32768
[  488.478311][ T8881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1335 (8881)
[  488.597377][ T8881] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  488.642225][ T8881] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  488.696236][ T8881] BTRFS info (device loop1): setting nodatacow, compression disabled
[  488.751936][ T8881] BTRFS info (device loop1): max_inline at 0
[  488.797388][ T8881] BTRFS info (device loop1): enabling disk space caching
[  488.857426][ T8881] BTRFS info (device loop1): turning off barriers
[  488.869711][ T8881] BTRFS info (device loop1): turning on flush-on-commit
[  488.881434][ T8881] BTRFS info (device loop1): doing ref verification
[  488.954222][ T8881] BTRFS info (device loop1): force clearing of disk cache
[  488.987567][ T8881] BTRFS info (device loop1): enabling ssd optimizations
[  488.994604][ T8881] BTRFS info (device loop1): max_inline at 4096
[  489.087401][ T8881] BTRFS info (device loop1): disk space caching is enabled
[  489.398070][ T8881] BTRFS info (device loop1): rebuilding free space tree
[  489.442898][ T8881] BTRFS info (device loop1): disabling free space tree
[  489.447564][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout
[  489.450084][ T8881] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  489.468897][ T8881] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  489.757827][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout
[  489.837560][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout
[  489.909450][ T4271] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  490.627378][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1340'.
[  491.528568][ T4274] Bluetooth: hci2: command 0x0406 tx timeout
[  491.640244][ T8927] input: syz0 as /devices/virtual/input/input26
[  491.837580][ T4274] Bluetooth: hci4: command 0x0406 tx timeout
[  491.927344][ T4274] Bluetooth: hci3: command 0x0406 tx timeout
[  492.356303][ T4506] udevd[4506]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  493.084219][ T8930] tipc: Started in network mode
[  493.136139][ T8930] tipc: Node identity e0000001, cluster identity 4711
[  493.254352][ T8930] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  494.506425][ T8928] loop1: detected capacity change from 0 to 32768
[  494.508108][ T8944] loop4: detected capacity change from 0 to 16
[  494.977625][ T8944] erofs: (device loop4): mounted with root inode @ nid 36.
[  495.463397][ T8958] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  495.474158][ T8958] syz.4.1348: attempt to access beyond end of device
[  495.474158][ T8958] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  495.647273][ T8340] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  495.857247][ T8340] usb 3-1: Using ep0 maxpacket: 8
[  495.866537][ T8340] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  495.944769][ T8964] input: syz0 as /devices/virtual/input/input27
[  497.419708][ T8340] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  497.429973][ T8340] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  497.440353][ T8340] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  497.454540][ T8340] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  497.464146][ T8340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.865918][ T8340] usb 3-1: usb_control_msg returned -71
[  498.871733][ T8340] usbtmc 3-1:16.0: can't read capabilities
[  498.913120][ T8340] usb 3-1: USB disconnect, device number 19
[  500.145942][ T8979] loop1: detected capacity change from 0 to 32768
[  500.211432][ T4274] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  501.355986][ T9002] input: syz0 as /devices/virtual/input/input28
[  501.439956][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.451714][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  504.585196][ T9039] input: syz0 as /devices/virtual/input/input29
[  505.117598][ T4307] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  505.327693][ T4307] usb 5-1: Using ep0 maxpacket: 8
[  505.377473][ T4307] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  505.385754][ T4307] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  505.476131][ T4307] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  505.526307][ T4307] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  505.551237][ T4307] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  505.591841][ T4307] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  505.612762][ T4307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.705792][ T9032] loop2: detected capacity change from 0 to 32768
[  505.827396][ T4274] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  505.836985][ T4307] usb 5-1: GET_CAPABILITIES returned 0
[  505.851052][ T4307] usbtmc 5-1:16.0: can't read capabilities
[  506.284112][ T9054] read_mapping_page failed!
[  506.509655][ T4307] usb 5-1: USB disconnect, device number 8
[  507.897289][ T4322] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  508.097239][ T4322] usb 1-1: Using ep0 maxpacket: 8
[  508.105102][ T4322] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  508.121213][ T4322] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  508.147085][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  508.171779][ T4322] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  508.200019][ T4322] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  508.228390][ T4322] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  508.246556][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.327722][ T9076] loop3: detected capacity change from 0 to 32768
[  508.605566][ T4322] usb 1-1: usb_control_msg returned -32
[  508.612667][ T4322] usbtmc 1-1:16.0: can't read capabilities
[  508.671640][ T9088] input: syz0 as /devices/virtual/input/input30
[  510.529815][ T9107] 9p: Unknown Cache mode fscach
[  510.638834][ T5690] usb 1-1: USB disconnect, device number 17
[  510.686050][ T9109] 9pnet_virtio: no channels available for device syz
[  511.177473][ T5690] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  511.382283][ T5690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.402346][ T5690] usb 1-1: config 0 has no interfaces?
[  511.415035][ T5690] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  511.466877][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.513101][ T5690] usb 1-1: config 0 descriptor??
[  511.735063][ T5690] usb 1-1: USB disconnect, device number 18
[  513.107375][ T5696] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  513.327250][ T5696] usb 1-1: Using ep0 maxpacket: 8
[  513.333761][ T5696] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  513.369780][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  513.430056][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  513.462319][ T5696] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  513.506634][ T5696] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  513.556084][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.790103][ T5696] usb 1-1: GET_CAPABILITIES returned 0
[  513.803247][ T5696] usbtmc 1-1:16.0: can't read capabilities
[  514.000694][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.029901][ T9146] loop3: detected capacity change from 0 to 32768
[  514.034271][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.049817][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.058909][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.068007][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.307516][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.316640][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.325696][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.334758][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.343828][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  514.556432][ T9162] read_mapping_page failed!
[  515.170474][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.292486][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.301636][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.310712][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.319778][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.328831][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  515.341767][ T4385] usb 1-1: USB disconnect, device number 19
[  519.933024][ T4274] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  520.227663][ T8340] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  520.927282][ T8340] usb 3-1: Using ep0 maxpacket: 8
[  520.934018][ T8340] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  520.987480][ T8340] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  521.015406][ T8340] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  521.077561][ T8340] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  521.129670][ T8340] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  521.577309][ T8340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.833742][ T8340] usb 3-1: GET_CAPABILITIES returned 0
[  521.839596][ T8340] usbtmc 3-1:16.0: can't read capabilities
[  521.890883][ T9248] vivid-007: =================  START STATUS  =================
[  521.900587][ T9248] vivid-007: Enable Output Cropping: true
[  521.906905][ T9248] vivid-007: Enable Output Composing: true
[  521.912988][ T9248] vivid-007: Enable Output Scaler: true
[  521.920104][ T9248] vivid-007: Tx RGB Quantization Range: Automatic
[  521.926677][ T9248] vivid-007: Transmit Mode: HDMI
[  521.931865][ T9248] vivid-007: Display Present: true inactive
[  521.938119][ T9248] vivid-007: Hotplug Present: 0x00000001
[  521.977043][ T9248] vivid-007: RxSense Present: 0x00000001
[  521.982932][ T9248] vivid-007: EDID Present: 0x00000001
[  521.988553][ T9248] vivid-007: ==================  END STATUS  ==================
[  522.794979][ T8340] usb 3-1: USB disconnect, device number 20
[  523.617397][ T5696] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  523.847329][ T5696] usb 1-1: Using ep0 maxpacket: 16
[  523.863445][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  523.931756][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  523.980814][ T5696] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  524.013852][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.044387][ T5696] usb 1-1: Product: syz
[  524.060107][ T5696] usb 1-1: Manufacturer: syz
[  524.076269][ T5696] usb 1-1: SerialNumber: syz
[  524.308368][ T5696] usb 1-1: 0:2 : does not exist
[  524.414895][ T5696] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  524.540932][ T5696] usb 1-1: USB disconnect, device number 20
[  525.581413][ T5696] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  525.889006][ T5696] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  525.913490][ T5696] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  525.924675][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.939495][ T5696] usb 1-1: Product: syz
[  525.946393][ T5696] usb 1-1: Manufacturer: syz
[  525.951355][ T5696] usb 1-1: SerialNumber: syz
[  525.959295][ T5696] usb 1-1: config 0 descriptor??
[  528.032483][ T4330] usb 1-1: USB disconnect, device number 21
[  528.413792][ T9311] lo speed is unknown, defaulting to 1000
[  529.562858][ T9326] Bluetooth: MGMT ver 1.22
[  529.571219][ T9326] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  531.207340][   T41] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  531.437420][   T41] usb 1-1: device descriptor read/64, error -71
[  531.849916][   T41] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  532.319618][   T41] usb 1-1: device descriptor read/64, error -71
[  532.438220][   T41] usb usb1-port1: attempt power cycle
[  533.040656][   T41] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  533.117647][   T41] usb 1-1: device descriptor read/8, error -71
[  534.334505][ T9378] batadv0: mtu greater than device maximum
[  534.526277][ T9383] loop1: detected capacity change from 0 to 16
[  534.589416][ T9383] erofs: (device loop1): mounted with root inode @ nid 36.
[  534.819481][ T9385] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  534.829921][ T9385] syz.1.1493: attempt to access beyond end of device
[  534.829921][ T9385] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  535.860504][ T9394] loop4: detected capacity change from 0 to 128
[  536.839758][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1502'.
[  537.179578][ T9411] sd 0:0:1:0: PR command failed: 1026
[  537.185392][ T9411] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  537.192396][ T9411] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  537.302549][ T9411] lo speed is unknown, defaulting to 1000
[  540.712394][   T51] Bluetooth: hci5: Frame reassembly failed (-84)
[  541.134358][ T9434] Bluetooth: hci5: Frame reassembly failed (-84)
[  542.717722][ T4267] Bluetooth: hci5: command 0x1003 tx timeout
[  542.724312][ T4274] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  543.261789][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'.
[  543.559386][ T9464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1518'.
[  543.942940][ T9452] netlink: 'syz.4.1516': attribute type 10 has an invalid length.
[  543.967091][ T9452] 8021q: adding VLAN 0 to HW filter on device team0
[  543.975122][ T9452] bond0: (slave team0): Enslaving as an active interface with an up link
[  545.892920][ T9493] kAFS: No cell specified
[  547.999788][   T26] kauditd_printk_skb: 40 callbacks suppressed
[  547.999802][   T26] audit: type=1326 audit(1754609732.670:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9516 comm="syz.4.1535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf1518ebe9 code=0x0
[  548.304649][ T9522] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  548.324921][ T4274] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[  551.881337][ T9557] loop1: detected capacity change from 0 to 32768
[  552.033802][ T9557] read_mapping_page failed!
[  552.038448][ T9557] ERROR: (device loop1): txCommit: 
[  552.038448][ T9557] 
[  552.847309][ T4322] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  553.187441][ T4322] usb 3-1: Using ep0 maxpacket: 8
[  553.229294][ T4322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  553.417379][ T4322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  553.442158][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  553.461193][ T4322] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  553.477790][ T4322] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  553.497213][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.541834][ T4322] hub 3-1:1.0: bad descriptor, ignoring hub
[  553.587872][ T4322] hub: probe of 3-1:1.0 failed with error -5
[  553.625289][ T4322] cdc_wdm 3-1:1.0: skipping garbage
[  553.652148][ T4322] cdc_wdm 3-1:1.0: skipping garbage
[  553.684738][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'.
[  553.711824][ T4322] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  553.741352][ T4322] cdc_wdm 3-1:1.0: Unknown control protocol
[  553.818080][ T4322] usb 3-1: USB disconnect, device number 21
[  554.978280][ T4274] Bluetooth: hci3: unexpected event for opcode 0x0c6d
[  555.898896][ T9597] kAFS: No cell specified
[  557.402352][ T9621] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  558.334319][ T9619] loop2: detected capacity change from 0 to 32768
[  558.447318][ T8340] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  558.687498][ T8340] usb 5-1: Using ep0 maxpacket: 8
[  558.779211][ T9626] read_mapping_page failed!
[  558.943016][ T8340] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  559.050174][ T8340] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  559.094048][ T8340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  560.174401][ T8340] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  560.186303][ T8340] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  560.196005][ T8340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.236004][ T8340] hub 5-1:1.0: bad descriptor, ignoring hub
[  560.242648][ T8340] hub: probe of 5-1:1.0 failed with error -5
[  560.251897][ T8340] cdc_wdm 5-1:1.0: skipping garbage
[  560.257684][ T8340] cdc_wdm 5-1:1.0: skipping garbage
[  560.265196][ T8340] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  560.278515][ T8340] cdc_wdm 5-1:1.0: Unknown control protocol
[  561.055081][ T4274] Bluetooth: hci3: unexpected event for opcode 0x0c6d
[  561.639395][ T4413] usb 5-1: USB disconnect, device number 9
[  562.880571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.977232][ T9664] loop4: detected capacity change from 0 to 128
[  563.598790][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  566.017842][ T9691] loop4: detected capacity change from 0 to 16
[  566.040979][ T9691] erofs: (device loop4): mounted with root inode @ nid 36.
[  566.286639][ T9697] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  566.297006][ T9697] syz.4.1591: attempt to access beyond end of device
[  566.297006][ T9697] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  566.930823][ T9698] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  567.034333][ T4274] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  567.247795][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.255048][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.274177][ T9734] loop2: detected capacity change from 0 to 16
[  570.345529][ T9734] erofs: (device loop2): mounted with root inode @ nid 36.
[  570.617612][ T9738] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  570.628059][ T9738] syz.2.1605: attempt to access beyond end of device
[  570.628059][ T9738] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  571.192984][ T4430] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  574.240223][ T9778] loop4: detected capacity change from 0 to 16
[  574.685568][ T9778] erofs: (device loop4): mounted with root inode @ nid 36.
[  574.968008][ T9782] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  574.978478][ T9782] syz.4.1620: attempt to access beyond end of device
[  574.978478][ T9782] loop4: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  577.915259][ T9815] kAFS: No cell specified
[  578.027395][ T4322] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  578.238965][ T4322] usb 2-1: Using ep0 maxpacket: 8
[  579.190928][ T4322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  579.205024][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  579.219465][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  579.237298][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  579.250541][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  579.260345][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.371596][ T9805] loop0: detected capacity change from 0 to 32768
[  579.596061][ T4322] usb 2-1: GET_CAPABILITIES returned 0
[  579.606443][ T4322] usbtmc 2-1:16.0: can't read capabilities
[  579.756674][ T4274] Bluetooth: hci3: unexpected event for opcode 0x0c6d
[  580.548861][ T4322] usb 2-1: USB disconnect, device number 16
[  581.037273][ T4371] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  581.266420][ T4371] usb 3-1: Using ep0 maxpacket: 32
[  581.480029][ T4371] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  581.517241][ T4371] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  581.575340][ T4371] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  581.599317][ T4371] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  581.649165][ T4371] usb 3-1: config 0 interface 0 has no altsetting 0
[  581.670818][ T4371] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  581.696498][ T4371] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  581.745178][ T4371] usb 3-1: Product: syz
[  581.759985][ T4371] usb 3-1: Manufacturer: syz
[  581.770597][ T4371] usb 3-1: SerialNumber: syz
[  581.797843][ T4371] usb 3-1: config 0 descriptor??
[  581.812481][ T4371] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  581.831881][ T4371] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  582.716964][ T8342] usb 3-1: USB disconnect, device number 22
[  582.723380][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  582.760223][ T8342] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  584.614119][ T9873] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  585.736101][ T9863] loop2: detected capacity change from 0 to 32768
[  585.751776][ T4274] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  585.837346][ T8342] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  586.207228][ T8342] usb 4-1: Using ep0 maxpacket: 8
[  586.213657][ T8342] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  586.233599][ T8342] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  586.866008][ T8342] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  586.923960][ T8342] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  586.961519][ T8342] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  586.971334][ T8342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.237655][ T8342] usb 4-1: GET_CAPABILITIES returned 0
[  587.243310][ T8342] usbtmc 4-1:16.0: can't read capabilities
[  587.317279][ T4413] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  588.153170][ T8342] usb 4-1: USB disconnect, device number 19
[  588.317357][ T4413] usb 1-1: Using ep0 maxpacket: 32
[  588.332045][ T4413] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  588.375669][ T4413] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  588.405702][ T4413] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  588.452074][ T4413] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  588.505908][ T4413] usb 1-1: config 0 interface 0 has no altsetting 0
[  588.532467][ T4413] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  588.558632][ T4413] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  588.654322][ T4413] usb 1-1: Product: syz
[  588.672805][ T4413] usb 1-1: Manufacturer: syz
[  588.688685][ T4413] usb 1-1: SerialNumber: syz
[  588.716447][ T4413] usb 1-1: config 0 descriptor??
[  588.727871][ T4413] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  589.024090][ T4413] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  589.136666][ T5690] usb 1-1: USB disconnect, device number 26
[  589.162916][ T5690] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  589.500543][ T9925] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  589.524783][ T4274] Bluetooth: hci4: unexpected event for opcode 0x0c6d
[  591.717269][ T8342] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  592.445872][ T9953] loop2: detected capacity change from 0 to 16
[  592.460115][ T9953] erofs: (device loop2): mounted with root inode @ nid 36.
[  593.377278][ T8342] usb 4-1: Using ep0 maxpacket: 8
[  593.383906][ T8342] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  593.430964][ T8342] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  593.473760][ T8342] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  593.487639][ T8342] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  593.542847][ T8342] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  593.581135][ T8342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.643484][ T9967] loop0: detected capacity change from 0 to 64
[  594.854343][ T8342] usb 4-1: GET_CAPABILITIES returned 0
[  594.913449][ T8342] usbtmc 4-1:16.0: can't read capabilities
[  595.054873][ T8342] usb 4-1: USB disconnect, device number 20
[  595.220081][ T9979] 9pnet_virtio: no channels available for device syz
[  596.262525][ T9983] kAFS: No cell specified
[  596.665128][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'.
[  597.600612][T10005] loop4: detected capacity change from 0 to 64
[  597.660631][ T5341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  599.800801][T10023] afs: Unknown parameter 'Î'
[  600.292017][T10027] loop3: detected capacity change from 0 to 16
[  600.328153][T10027] erofs: (device loop3): mounted with root inode @ nid 36.
[  601.408811][T10036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'.
[  602.411578][T10047] loop3: detected capacity change from 0 to 64
[  602.468247][ T5341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  604.805226][T10070] afs: Unknown parameter 'Î'
[  605.356205][T10077] loop3: detected capacity change from 0 to 16
[  605.394646][T10077] erofs: (device loop3): mounted with root inode @ nid 36.
[  606.388727][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'.
[  607.253472][T10095] loop1: detected capacity change from 0 to 64
[  609.664359][T10123] afs: Unknown parameter 'Î'
[  610.359311][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'.
[  610.377849][T10136] loop3: detected capacity change from 0 to 64
[  613.322691][T10171] kAFS: No cell specified
[  614.044820][T10178] loop1: detected capacity change from 0 to 64
[  614.088358][ T5341] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  614.264751][T10164] loop0: detected capacity change from 0 to 32768
[  615.032507][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'.
[  617.948216][T10225] kAFS: No cell specified
[  618.491921][T10231] loop3: detected capacity change from 0 to 64
[  618.538626][ T5341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  619.492549][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'.
[  621.092594][T10265] kAFS: No cell specified
[  622.626943][T10281] loop1: detected capacity change from 0 to 64
[  622.685441][ T5341] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  623.809480][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'.
[  624.320895][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.330032][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  625.429630][T10317] kAFS: No cell specified
[  625.996454][T10323] loop4: detected capacity change from 0 to 64
[  626.030267][ T5341] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  627.430625][T10314] loop0: detected capacity change from 0 to 32768
[  628.529533][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'.
[  629.872296][T10364] loop3: detected capacity change from 0 to 64
[  629.997371][T10369] kAFS: No cell specified
[  630.006124][ T5341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  632.813584][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'.
[  633.827726][T10393] loop4: detected capacity change from 0 to 32768
[  634.929879][T10424] loop3: detected capacity change from 0 to 64
[  635.000595][ T4506] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  636.018261][T10437] kAFS: No cell specified
[  638.087997][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'.
[  639.264710][T10471] loop0: detected capacity change from 0 to 64
[  640.397226][T10485] kAFS: No cell specified
[  640.856022][T10458] loop3: detected capacity change from 0 to 32768
[  640.903541][ T4274] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  643.305076][T10515] loop3: detected capacity change from 0 to 64
[  643.347802][ T5341] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  643.379893][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1835'.
[  645.151147][T10540] kAFS: No cell specified
[  648.555748][T10565] loop2: detected capacity change from 0 to 64
[  648.593854][ T5341] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  648.771346][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'.
[  649.961241][T10588] kAFS: No cell specified
[  651.954732][T10603] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  651.984077][ T4274] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[  653.725541][T10615] loop0: detected capacity change from 0 to 64
[  653.861596][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'.
[  654.622879][T10624] loop1: detected capacity change from 0 to 32768
[  654.663999][ T4274] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  654.871226][T10639] kAFS: No cell specified
[  658.061530][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'.
[  658.837092][T10677] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  658.866890][ T4274] Bluetooth: hci3: unexpected event for opcode 0x0c6d
[  660.082560][T10684] kAFS: No cell specified
[  660.643658][T10673] loop0: detected capacity change from 0 to 32768
[  662.677430][T10706] loop3: detected capacity change from 0 to 64
[  662.707585][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'.
[  663.884563][T10727] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  664.925032][T10729] loop4: detected capacity change from 0 to 32768
[  665.705051][T10734] kAFS: No cell specified
[  667.428632][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'.
[  667.665917][T10760] loop0: detected capacity change from 0 to 64
[  667.792545][ T5341] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  667.953955][T10766] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  667.978311][ T4274] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[  670.493002][T10764] loop2: detected capacity change from 0 to 32768
[  670.535392][ T4274] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  671.252368][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'.
[  672.354334][T10813] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  678.197254][ T4413] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  678.408095][ T4413] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  678.447731][ T4413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.516813][ T4413] usb 1-1: Product: syz
[  678.549519][ T4413] usb 1-1: Manufacturer: syz
[  678.586922][ T4413] usb 1-1: SerialNumber: syz
[  678.664634][ T4413] usb 1-1: config 0 descriptor??
[  678.906709][ T4413] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  678.941339][ T5696] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  679.119068][ T4413] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  679.147361][ T5696] usb 4-1: device descriptor read/64, error -71
[  679.338030][T10884] loop4: detected capacity change from 0 to 32768
[  679.389545][T10887] 9pnet_virtio: no channels available for device syz
[  679.434669][T10884] read_mapping_page failed!
[  679.439295][T10884] ERROR: (device loop4): txCommit: 
[  679.439295][T10884] 
[  679.507246][ T5696] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  679.678018][ T5696] usb 4-1: device descriptor read/64, error -71
[  679.807471][ T5696] usb usb4-port1: attempt power cycle
[  680.217601][ T5696] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  680.267627][ T5696] usb 4-1: device descriptor read/8, error -71
[  680.389942][T10890] loop4: detected capacity change from 0 to 32768
[  680.547270][ T5696] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  680.590758][ T5696] usb 4-1: device descriptor read/8, error -71
[  680.789928][ T5696] usb usb4-port1: unable to enumerate USB device
[  680.807070][T10899] read_mapping_page failed!
[  681.004035][T10901] loop2: detected capacity change from 0 to 64
[  681.068127][ T4413] usb 1-1: USB disconnect, device number 27
[  681.237550][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1947'.
[  683.868955][T10922] loop3: detected capacity change from 0 to 32768
[  683.969733][ T4274] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  685.028176][T10940] loop2: detected capacity change from 0 to 128
[  685.803348][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.809700][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.544054][T10942] 9pnet_virtio: no channels available for device syz
[  793.217196][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  793.224253][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P10951/1:b..l
[  793.232976][    C0] 	(detected by 0, t=10502 jiffies, g=66705, q=11 ncpus=2)
[  793.240180][    C0] task:syz.2.1961      state:R  running task     stack:26496 pid:10951 ppid:4276   flags:0x00004000
[  793.252575][    C0] Call Trace:
[  793.255868][    C0]  <TASK>
[  793.258813][    C0]  __schedule+0x10ec/0x40b0
[  793.263353][    C0]  ? release_firmware_map_entry+0x18a/0x18a
[  793.269262][    C0]  ? lock_chain_count+0x20/0x20
[  793.274123][    C0]  ? preempt_schedule_irq+0xa6/0x150
[  793.279422][    C0]  preempt_schedule_irq+0xb1/0x150
[  793.284565][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  793.290318][    C0]  ? rcu_is_watching+0x11/0xa0
[  793.295100][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  793.300925][    C0]  irqentry_exit+0x63/0x70
[  793.305371][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  793.311362][    C0] RIP: 0010:lock_is_held_type+0x13a/0x190
[  793.317098][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  793.336721][    C0] RSP: 0018:ffffc9000e12f750 EFLAGS: 00000206
[  793.342799][    C0] RAX: df4f760b8637b700 RBX: ffff88802b1b3b80 RCX: df4f760b8637b700
[  793.350783][    C0] RDX: ffff88802b1b3b80 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320
[  793.358761][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff215ba49
[  793.366741][    C0] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: 0000000000000002
[  793.374727][    C0] R13: 0000000000000246 R14: ffffffff8cb2ae20 R15: ffff88802b1b46b0
[  793.382725][    C0]  xas_start+0x292/0x770
[  793.386987][    C0]  xas_load+0x28/0x140
[  793.391070][    C0]  __filemap_get_folio+0x1bb/0xdd0
[  793.396191][    C0]  ? __filemap_get_folio+0xf0/0xdd0
[  793.401401][    C0]  ? page_cache_prev_miss+0x350/0x350
[  793.406780][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  793.412776][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  793.417810][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  793.423190][    C0]  ? folio_batch_add_and_move+0x14a/0x250
[  793.428954][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  793.434168][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  793.439382][    C0]  shmem_get_folio_gfp+0x310/0x3400
[  793.444711][    C0]  shmem_write_begin+0xee/0x3f0
[  793.449581][    C0]  generic_perform_write+0x2db/0x560
[  793.454979][    C0]  ? generic_file_direct_write+0x660/0x660
[  793.460800][    C0]  ? __file_remove_privs+0x5b0/0x5b0
[  793.466093][    C0]  ? preempt_count_add+0x8d/0x190
[  793.471129][    C0]  ? rwsem_write_trylock+0x12f/0x1b0
[  793.476422][    C0]  ? clear_nonspinnable+0x60/0x60
[  793.481719][    C0]  ? generic_write_checks_count+0x3d9/0x4c0
[  793.487642][    C0]  __generic_file_write_iter+0x172/0x430
[  793.493295][    C0]  generic_file_write_iter+0xab/0x2e0
[  793.498683][    C0]  vfs_write+0x44c/0x960
[  793.502949][    C0]  ? file_end_write+0x250/0x250
[  793.507813][    C0]  ? __fget_files+0x44a/0x4d0
[  793.512507][    C0]  ? __fdget_pos+0x1d4/0x360
[  793.517109][    C0]  ? ksys_write+0x71/0x240
[  793.521540][    C0]  ksys_write+0x143/0x240
[  793.525880][    C0]  ? __ia32_sys_read+0x80/0x80
[  793.530743][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  793.535959][    C0]  do_syscall_64+0x4c/0xa0
[  793.540644][    C0]  ? clear_bhb_loop+0x60/0xb0
[  793.545334][    C0]  ? clear_bhb_loop+0x60/0xb0
[  793.550018][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  793.555931][    C0] RIP: 0033:0x7f6cee18d69f
[  793.560373][    C0] RSP: 002b:00007f6cef04edf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  793.568798][    C0] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007f6cee18d69f
[  793.576966][    C0] RDX: 0000000001000000 RSI: 00007f6ce3ff7000 RDI: 0000000000000003
[  793.585036][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005e04
[  793.593024][    C0] R10: 000020000000c742 R11: 0000000000000293 R12: 0000000000000003
[  793.601187][    C0] R13: 00007f6cef04eef0 R14: 00007f6cef04eeb0 R15: 00007f6ce3ff7000
[  793.609364][    C0]  </TASK>
[  793.612394][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10537 jiffies! g66705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  793.624728][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=38450
[  793.632619][    C0] rcu: rcu_preempt kthread starved for 10543 jiffies! g66705 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  793.643992][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  793.653966][    C0] rcu: RCU grace-period kthread stack dump:
[  793.659854][    C0] task:rcu_preempt     state:I stack:27464 pid:16    ppid:2      flags:0x00004000
[  793.669125][    C0] Call Trace:
[  793.672433][    C0]  <TASK>
[  793.675370][    C0]  __schedule+0x10ec/0x40b0
[  793.679916][    C0]  ? release_firmware_map_entry+0x18a/0x18a
[  793.685842][    C0]  schedule+0xb9/0x180
[  793.690093][    C0]  schedule_timeout+0x15c/0x280
[  793.694965][    C0]  ? console_conditional_schedule+0x40/0x40
[  793.700868][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  793.706871][    C0]  ? update_process_times+0x1b0/0x1b0
[  793.712272][    C0]  ? prepare_to_swait_event+0x335/0x350
[  793.717847][    C0]  rcu_gp_fqs_loop+0x2f2/0x1310
[  793.722714][    C0]  ? rcu_gp_kthread+0x380/0x380
[  793.727574][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  793.733567][    C0]  ? rcu_gp_init+0x14b0/0x14b0
[  793.738354][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[  793.743231][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  793.748448][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  793.753658][    C0]  rcu_gp_kthread+0x95/0x380
[  793.758263][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  793.763380][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  793.769288][    C0]  ? __kthread_parkme+0x162/0x1c0
[  793.774342][    C0]  kthread+0x29d/0x330
[  793.778451][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  793.783587][    C0]  ? kthread_blkcg+0xd0/0xd0
[  793.788201][    C0]  ret_from_fork+0x1f/0x30
[  793.792639][    C0]  </TASK>
[  793.795662][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  793.802002][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.147-syzkaller #0
[  793.809725][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  793.819911][    C0] RIP: 0010:default_idle+0xb/0x10
[  793.825044][    C0] Code: 48 89 df e8 c7 c9 b0 f7 e9 4c ff ff ff e8 ed 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 67 85 66 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  793.844669][    C0] RSP: 0018:ffffffff8c807d88 EFLAGS: 000002c6
[  793.850748][    C0] RAX: c51ec83efc3d8900 RBX: ffffffff8a201e87 RCX: c51ec83efc3d8900
[  793.858726][    C0] RDX: 0000000000000001 RSI: ffffffff8a8c0460 RDI: ffffffff8adef320
[  793.866711][    C0] RBP: ffffffff8c807ec0 R08: dffffc0000000000 R09: ffffed10171c6af6
[  793.874696][    C0] R10: ffffed10171c6af6 R11: 1ffff110171c6af5 R12: 0000000000000000
[  793.877067][    C1] sched: RT throttling activated
[  793.887618][    C0] R13: dffffc0000000000 R14: ffffffff8c8bc680 R15: 1ffffffff1c3e9b6
[  793.895615][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  793.904555][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  793.911145][    C0] CR2: 0000200000ff7000 CR3: 000000001777d000 CR4: 00000000003506f0
[  793.919106][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  793.927063][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  793.935034][    C0] Call Trace:
[  793.938300][    C0]  <TASK>
[  793.941216][    C0]  default_idle_call+0x84/0xc0
[  793.945988][    C0]  do_idle+0x1fc/0x570
[  793.950046][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  793.955315][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  793.960588][    C0]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  793.966209][    C0]  ? schedule_idle+0x57/0x90
[  793.971068][    C0]  cpu_startup_entry+0x3f/0x60
[  793.975977][    C0]  rest_init+0x2dc/0x300
[  793.980245][    C0]  ? time_init+0x33/0x33
[  793.984498][    C0]  arch_call_rest_init+0xa/0xa
[  793.989274][    C0]  start_kernel+0x490/0x539
[  793.993884][    C0]  secondary_startup_64_no_verify+0xcf/0xdb
[  793.999785][    C0]  </TASK>