last executing test programs:

4m52.705924286s ago: executing program 2 (id=522):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/82, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0x2, 0x0, [{0x0, 0x2f, &(0x7f00000000c0)=""/47}, {0x4, 0xffb, &(0x7f0000001d80)=""/4091}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, 0x0, 0x0)

4m52.550065559s ago: executing program 2 (id=523):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd000000001090212"], 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4081)
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}}], 0x1, 0x45)

4m51.170610845s ago: executing program 2 (id=536):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m50.823118614s ago: executing program 2 (id=538):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050))
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0))
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0))
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58)

4m50.765640665s ago: executing program 2 (id=539):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
setpgid(r0, r0)
setpgid(0x0, r0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)

4m50.661026618s ago: executing program 2 (id=540):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$key(0xf, 0x3, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

4m35.477268837s ago: executing program 32 (id=540):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
socket$key(0xf, 0x3, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

8.604951088s ago: executing program 0 (id=1825):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0)
getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.444606212s ago: executing program 0 (id=1828):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r1)

4.920849179s ago: executing program 0 (id=1835):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
close(0x3)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922196c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150c781f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xa, {0x8, 0xfffffffe, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x6000, 0xfffffffc, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r2, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20)

4.368717503s ago: executing program 3 (id=1838):
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.146508618s ago: executing program 3 (id=1839):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
gettid()
gettid()
tkill(0x0, 0x16)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$FUSE(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')

2.896911929s ago: executing program 0 (id=1841):
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x800003}}, 0xffffffd7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x48000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)

2.593093456s ago: executing program 1 (id=1846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000400000005000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="020000b901"], 0x48}, 0x1, 0x0, 0x0, 0x8008}, 0x40)
sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x8)
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000080)=@routing={0x32, 0x0, 0x2, 0xb0}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {0xfff3, 0x5}, {0xffe0, 0xe}}}, 0x24}}, 0x800)

2.46886563s ago: executing program 3 (id=1847):
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.317100493s ago: executing program 0 (id=1848):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = socket$inet6(0xa, 0x3, 0x3)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000140))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_pidfd_open(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
timer_create(0x6, &(0x7f00000000c0)={0x0, 0x30, 0x3}, &(0x7f0000000100))
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$rds(0x15, 0x5, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)

2.080813969s ago: executing program 4 (id=1851):
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x4894)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@discard}, {@fatal_errors_bug}, {@discard}]}, 0xf4, 0x559e, &(0x7f000000ac40)="$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")
r1 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x80000001, 0x1, {0x3, 0xff, 0x3, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

1.834772995s ago: executing program 3 (id=1852):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
socket$key(0xf, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
socket(0x200000100000011, 0x3, 0x6)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010)

1.750662867s ago: executing program 1 (id=1853):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1.63299671s ago: executing program 4 (id=1854):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000300)="f341b61a", 0x4}], 0x1, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

1.623620431s ago: executing program 4 (id=1855):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
gettid()
gettid()
tkill(0x0, 0x16)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$FUSE(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='0')

1.560855392s ago: executing program 1 (id=1856):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80)
pipe2(0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.477106484s ago: executing program 3 (id=1857):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8)
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xdffffffe, @mcast1, 0x9}, 0x1c)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
read$FUSE(r3, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000000)='0')
close_range(r1, 0xffffffffffffffff, 0x0)

1.25145406s ago: executing program 1 (id=1858):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)

1.071858284s ago: executing program 4 (id=1859):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x51)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x20100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f00000000c0)={0x1, 0x3, 0x6d7, 0x604f39d8888a9b0d, 0x9})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

291.621253ms ago: executing program 1 (id=1860):
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

261.721794ms ago: executing program 0 (id=1861):
creat(0x0, 0x88)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000b00), 0xfffffffffffffffe, 0x120001)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000c40)={0x0, 0x5, 0x7ff, 0x3, 0x3, 0x5, &(0x7f0000000b40)="7754ba"})

146.988007ms ago: executing program 1 (id=1862):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x80, 0x0, 0x1}, 0x48)

94.795208ms ago: executing program 3 (id=1863):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noinit_itable}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffc, 0x14c0348, 0xc0be, 0x2, 0xf296, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

93.591908ms ago: executing program 4 (id=1864):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0x70}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x7c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_USERDATA={0x68, 0x6, "39e4983ed3a871bf8e4ad75a6281838754f3306783aede73ab727b9a368648b07679f371ed7cb67f723304d6159e40d076930a5435118902ed95bba8dba2198120a34bcc5b4b34249f7eb4894af4b398add796411fbae8fac88e02821f9359a8921a2298"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 4 (id=1865):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
socket$key(0xf, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$tipc(0x1e, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
socket(0x200000100000011, 0x3, 0x6)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010)

kernel console output (not intermixed with test programs):

] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   94.090207][ T5778] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   94.099326][ T5778] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   95.087093][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   95.494138][ T5778] usb 1-1: config 220 has no interface number 2
[   95.534363][ T5778] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   95.584472][ T5778] usb 1-1: config 220 interface 0 has no altsetting 0
[   95.606377][ T5778] usb 1-1: config 220 interface 76 has no altsetting 0
[   95.624682][ T5778] usb 1-1: config 220 interface 1 has no altsetting 0
[   95.644773][ T5778] usb 1-1: string descriptor 0 read error: -71
[   95.651191][ T5778] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   95.678267][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.697542][ T5778] usb 1-1: can't set config #220, error -71
[   95.706943][ T5778] usb 1-1: USB disconnect, device number 5
[   95.853528][  T172] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   96.047447][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.067074][ T5778] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   96.081899][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.102332][  T172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.132746][  T172] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.151196][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.181257][  T172] usb 4-1: config 0 descriptor??
[   96.271905][ T5778] usb 1-1: Using ep0 maxpacket: 16
[   96.279210][ T5778] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.311135][ T5778] usb 1-1: config 0 interface 0 has no altsetting 0
[   96.339232][ T5778] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   96.369221][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.409256][ T5778] usb 1-1: config 0 descriptor??
[   96.613070][  T172] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[   96.632414][  T172] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   96.871235][ T5778] nzxt-smart2 0003:1E71:2009.0008: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[   96.899134][  T172] usb 4-1: USB disconnect, device number 5
[   97.271893][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.290653][  T172] usb 1-1: USB disconnect, device number 6
[   97.473334][ T5850] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   97.500743][ T5850] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   97.529999][ T5850] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   97.556931][ T5850] usb 3-1: config 220 has no interface number 2
[   97.581239][ T5850] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   97.620803][ T5850] usb 3-1: config 220 interface 0 has no altsetting 0
[   97.632052][ T5850] usb 3-1: config 220 interface 76 has no altsetting 0
[   97.649107][ T5850] usb 3-1: config 220 interface 1 has no altsetting 0
[   97.676429][ T5850] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   97.691935][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.710109][ T5850] usb 3-1: Product: syz
[   97.720197][ T5850] usb 3-1: Manufacturer: syz
[   97.750527][ T5850] usb 3-1: SerialNumber: syz
[   97.975265][ T5850] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[   97.992557][ T5850] usb 3-1: No valid video chain found.
[   98.002185][ T5850] usb 3-1: selecting invalid altsetting 0
[   98.029615][ T5850] usb 3-1: selecting invalid altsetting 0
[   98.041869][ T5850] usbtest: probe of 3-1:220.1 failed with error -22
[   98.051898][  T172] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   98.068210][ T5850] usb 3-1: USB disconnect, device number 5
[   98.141896][    T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   98.241876][  T172] usb 4-1: Using ep0 maxpacket: 16
[   98.249630][  T172] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.271892][  T172] usb 4-1: config 0 interface 0 has no altsetting 0
[   98.281905][  T172] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[   98.301537][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.322447][  T172] usb 4-1: config 0 descriptor??
[   98.342414][    T8] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[   98.350505][    T8] usb 1-1: config 0 has no interface number 0
[   98.366999][    T8] usb 1-1: config 0 interface 41 has no altsetting 0
[   98.384669][    T8] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   98.401877][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.421864][    T8] usb 1-1: Product: syz
[   98.426055][    T8] usb 1-1: Manufacturer: syz
[   98.440874][    T8] usb 1-1: SerialNumber: syz
[   98.455674][    T8] usb 1-1: config 0 descriptor??
[   98.748667][  T172] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[   99.269550][    T8] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   99.502351][    T8] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   99.527691][    T8] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[   99.550209][    T8] CoreChips: probe of 1-1:0.41 failed with error -71
[   99.573232][    T8] usb 1-1: USB disconnect, device number 7
[   99.781950][  T172] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.964373][  T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.975702][  T172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.986238][  T172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  100.000087][  T172] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  100.021948][  T172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.043985][  T172] usb 2-1: config 0 descriptor??
[  100.373089][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  100.472488][  T172] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  100.486591][  T172] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  100.561950][    T8] usb 1-1: Using ep0 maxpacket: 32
[  100.571617][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.581435][    T8] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  100.589875][    T8] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  100.600399][    T8] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  100.609964][    T8] usb 1-1: config 128 has no interface number 0
[  100.617465][    T8] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  100.628962][    T8] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.639307][    T8] usb 1-1: config 128 interface 127 has no altsetting 0
[  100.648301][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  100.657603][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.665749][    T8] usb 1-1: Product: syz
[  100.672073][    T8] usb 1-1: Manufacturer: syz
[  100.681362][    T8] usb 1-1: SerialNumber: syz
[  100.687788][  T172] usb 2-1: USB disconnect, device number 3
[  100.794076][ T5850] usb 4-1: USB disconnect, device number 6
[  100.960495][    T8] usb 1-1: USB disconnect, device number 8
[  100.985444][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.811940][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  102.042762][    T8] usb 2-1: config 0 has no interfaces?
[  102.053778][    T8] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  102.085015][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.105947][    T8] usb 2-1: Product: syz
[  102.116541][    T8] usb 2-1: Manufacturer: syz
[  102.121135][    T8] usb 2-1: SerialNumber: syz
[  102.145309][    T8] usb 2-1: config 0 descriptor??
[  102.366432][    T8] usb 2-1: USB disconnect, device number 4
[  102.712020][  T172] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  102.913976][  T172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.944552][  T172] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.976016][  T172] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  103.001875][  T172] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  103.021111][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.029210][ T5850] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  103.048569][  T172] usb 1-1: config 0 descriptor??
[  103.221850][ T5850] usb 4-1: Using ep0 maxpacket: 16
[  103.228521][ T5850] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.239782][ T5812] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  103.252268][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0
[  103.272145][ T5850] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  103.291877][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.316454][ T5850] usb 4-1: config 0 descriptor??
[  103.441911][ T5812] usb 2-1: Using ep0 maxpacket: 16
[  103.448932][ T5812] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.467724][  T172] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  103.483824][ T5812] usb 2-1: config 0 interface 0 has no altsetting 0
[  103.502222][ T5812] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  103.512101][  T172] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  103.532074][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.557315][ T5812] usb 2-1: config 0 descriptor??
[  103.681659][  T172] usb 1-1: USB disconnect, device number 9
[  103.750538][ T5850] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  103.988897][ T5812] nzxt-smart2 0003:1E71:2009.000D: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  104.200733][ T5812] usb 2-1: USB disconnect, device number 5
[  104.725133][ T5812] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  104.934803][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short
[  104.957257][ T5812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.975919][ T5812] usb 1-1: string descriptor 0 read error: -22
[  104.984455][ T5812] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  105.006704][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.662458][ T5812] usb 1-1: current rate 11342366 is different from the runtime rate 48000
[  105.773284][ T5778] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.826347][ T5850] usb 4-1: USB disconnect, device number 7
[  106.050687][ T5851] usb 1-1: USB disconnect, device number 10
[  106.075730][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.107466][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.167318][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.225280][ T5778] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.237302][ T6256] binder: 6255:6256 ioctl c018620b 0 returned -14
[  106.254141][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.295923][ T5778] usb 3-1: config 0 descriptor??
[  106.765123][   T27] audit: type=1326 audit(1786921568.361:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.144" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  106.779378][ T5778] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  106.878482][ T5778] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  107.010800][ T5778] usb 3-1: USB disconnect, device number 6
[  108.571872][ T5778] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  108.825713][ T5778] usb 4-1: Using ep0 maxpacket: 32
[  108.841909][ T5850] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  108.922295][ T5778] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  108.975325][ T5778] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  109.021998][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.063924][ T5778] usb 4-1: config 0 descriptor??
[  109.142765][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.182401][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.232029][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  109.295804][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  109.361908][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.391225][ T5850] usb 3-1: config 0 descriptor??
[  109.532446][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.582174][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.631991][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.639432][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.696814][   T27] audit: type=1326 audit(1786921571.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.0.156" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  109.702389][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.821919][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.850650][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.884193][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.902624][ T5850] usbhid 3-1:0.0: can't add hid device: -71
[  109.909818][ T5850] usbhid: probe of 3-1:0.0 failed with error -71
[  109.932761][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  109.955942][ T5850] usb 3-1: USB disconnect, device number 7
[  109.970475][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.005836][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.038852][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.069803][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.102749][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.139749][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.164150][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.187032][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.214868][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.237791][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.262869][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.287771][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.308316][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.333990][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.359494][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.383650][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.407812][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.423779][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.463087][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.496836][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.551877][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.559299][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.604222][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.653121][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.677291][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.706849][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.753381][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.785093][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.814299][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.838633][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.871162][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.886655][ T5778] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0
[  110.972112][ T5778] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found
[  111.023922][ T5778] usb 4-1: USB disconnect, device number 8
[  111.071902][ T5850] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  111.211638][ T6332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'.
[  111.271110][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  111.292474][ T5850] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.324312][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0
[  111.364592][ T5850] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  111.398277][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.440353][ T5850] usb 2-1: config 0 descriptor??
[  111.648786][ T6332] team0: Port device team_slave_0 removed
[  111.822152][ T5778] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.894753][ T5850] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  112.043940][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.072520][ T5778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.114175][ T5850] usb 2-1: USB disconnect, device number 6
[  112.120540][ T5778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  112.166755][ T5778] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  112.203338][ T5778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.243493][ T5778] usb 3-1: config 0 descriptor??
[  112.659452][ T5778] usbhid 3-1:0.0: can't add hid device: -71
[  112.682539][ T5778] usbhid: probe of 3-1:0.0 failed with error -71
[  112.714424][ T5778] usb 3-1: USB disconnect, device number 8
[  112.742109][ T5851] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  112.973518][ T5851] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  112.995812][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0
[  113.011922][ T5851] usb 4-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00
[  113.031192][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.062412][ T5851] usb 4-1: config 0 descriptor??
[  113.073828][ T6343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.535596][ T5851] thrustmaster 0003:044F:B605.0011: unknown main item tag 0x0
[  113.552062][ T5851] thrustmaster 0003:044F:B605.0011: unknown main item tag 0x0
[  113.580716][ T5851] thrustmaster 0003:044F:B605.0011: unknown main item tag 0x0
[  113.602425][ T5851] thrustmaster 0003:044F:B605.0011: unknown main item tag 0x0
[  113.630316][ T5851] thrustmaster 0003:044F:B605.0011: item fetching failed at offset 4/40
[  113.656421][ T5851] thrustmaster 0003:044F:B605.0011: parse failed
[  113.676452][ T5851] thrustmaster: probe of 0003:044F:B605.0011 failed with error -22
[  113.781724][ T5851] usb 4-1: USB disconnect, device number 9
[  114.542231][ T5851] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  114.651923][ T5850] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  114.734709][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.756543][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.776820][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.801877][ T5851] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.820592][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.840497][ T5851] usb 1-1: config 0 descriptor??
[  114.861935][ T5850] usb 4-1: Using ep0 maxpacket: 16
[  114.868498][ T5850] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.881907][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  114.899693][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.909803][ T5850] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  114.929110][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.950024][ T5850] usb 4-1: config 0 descriptor??
[  115.081917][ T5812] usb 3-1: Using ep0 maxpacket: 16
[  115.093345][ T5812] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  115.111556][ T5812] usb 3-1: config 0 has no interface number 0
[  115.121569][ T5812] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  115.144907][ T5812] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  115.169054][ T5812] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  115.185446][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.202917][ T5812] usb 3-1: Product: syz
[  115.212116][ T5812] usb 3-1: Manufacturer: syz
[  115.222130][ T5812] usb 3-1: SerialNumber: syz
[  115.228996][ T5812] usb 3-1: config 0 descriptor??
[  115.238002][ T6388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.245408][ T6388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.265273][ T5851] usbhid 1-1:0.0: can't add hid device: -71
[  115.279526][ T5851] usbhid: probe of 1-1:0.0 failed with error -71
[  115.304679][ T5851] usb 1-1: USB disconnect, device number 11
[  115.387774][ T5850] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  115.500532][ T6388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.518396][ T6388] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  115.740406][ T5812] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  116.429728][ T6402] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[  117.350988][ T5812] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  117.366492][ T5812] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  117.403298][ T5812] asix: probe of 3-1:0.34 failed with error -71
[  117.423243][  T172] usb 4-1: USB disconnect, device number 10
[  117.463413][ T5812] usb 3-1: USB disconnect, device number 9
[  117.531982][ T5851] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  117.733929][ T5851] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  117.751468][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0
[  117.766958][ T5851] usb 2-1: New USB device found, idVendor=044f, idProduct=b605, bcdDevice= 0.00
[  117.785509][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.816077][ T5851] usb 2-1: config 0 descriptor??
[  117.832736][ T6413] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  118.112592][ T6428] netlink: 76 bytes leftover after parsing attributes in process `syz.2.201'.
[  118.270334][ T5851] thrustmaster 0003:044F:B605.0013: unknown main item tag 0x0
[  118.290379][ T5851] thrustmaster 0003:044F:B605.0013: unknown main item tag 0x0
[  118.309566][ T5851] thrustmaster 0003:044F:B605.0013: unknown main item tag 0x0
[  118.341895][ T5851] thrustmaster 0003:044F:B605.0013: unknown main item tag 0x0
[  118.364479][ T5851] thrustmaster 0003:044F:B605.0013: item fetching failed at offset 4/40
[  118.392451][ T5851] thrustmaster 0003:044F:B605.0013: parse failed
[  118.412193][ T5851] thrustmaster: probe of 0003:044F:B605.0013 failed with error -22
[  118.532100][ T5851] usb 2-1: USB disconnect, device number 7
[  118.911879][ T5812] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  119.112091][ T5812] usb 3-1: Using ep0 maxpacket: 16
[  119.134061][ T5812] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.152252][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'.
[  119.171264][ T5812] usb 3-1: config 0 interface 0 has no altsetting 0
[  119.178253][ T5812] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  119.197580][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.223637][ T5812] usb 3-1: config 0 descriptor??
[  119.402016][ T5851] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  119.443188][ T6447] team0: Port device team_slave_0 removed
[  119.592140][ T5851] usb 4-1: Using ep0 maxpacket: 16
[  119.601298][ T5851] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  119.629917][ T5851] usb 4-1: config 0 has no interface number 0
[  119.641884][ T5851] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  119.669143][ T5812] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  119.698619][ T5851] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  119.734425][ T5851] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  119.757821][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.791906][ T5851] usb 4-1: Product: syz
[  119.796165][ T5851] usb 4-1: Manufacturer: syz
[  119.827287][ T5851] usb 4-1: SerialNumber: syz
[  119.849644][ T5851] usb 4-1: config 0 descriptor??
[  119.868319][ T6445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  119.886215][ T6445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.126058][ T6445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.133757][ T6445] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.347209][ T5851] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  120.981039][ T6476] 9pnet_fd: Insufficient options for proto=fd
[  126.520517][ T5851] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110
[  126.656413][ T5851] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffff92
[  126.672937][ T5812] usb 3-1: USB disconnect, device number 10
[  126.722724][ T5851] asix: probe of 4-1:0.34 failed with error -110
[  126.764205][ T5851] usb 4-1: USB disconnect, device number 11
[  131.802005][  T172] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  132.016865][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.061253][  T172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.100338][  T172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.162154][  T172] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.201539][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.239384][  T172] usb 4-1: config 0 descriptor??
[  132.854737][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  132.861085][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  137.761731][  T172] usbhid 4-1:0.0: can't add hid device: -32
[  137.856343][  T172] usbhid: probe of 4-1:0.0 failed with error -32
[  137.909245][  T172] usb 4-1: USB disconnect, device number 12
[  142.583226][ T3490] Bluetooth: hci4: Frame reassembly failed (-84)
[  142.606166][   T51] Bluetooth: hci4: unexpected event 0x02 length: 0 < 1
[  142.844887][   T27] audit: type=1326 audit(1786921604.441:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6580 comm="syz.2.254" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf44b9e0d9 code=0x0
[  144.611929][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  147.974803][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  148.115360][   T27] audit: type=1326 audit(1786921609.711:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.268" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  149.046168][ T6630] syz.0.270[6630]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  152.903499][ T6643] process 'syz.0.276' launched './file0' with NULL argv: empty string added
[  153.213181][   T27] audit: type=1326 audit(1786921614.811:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz.0.279" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  153.581878][ T5851] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  153.771874][ T5851] usb 4-1: Using ep0 maxpacket: 16
[  153.782498][ T5851] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.799956][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0
[  153.814128][ T5851] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  153.831910][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.851751][ T5851] usb 4-1: config 0 descriptor??
[  154.151964][ T5850] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  154.279452][ T5851] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  154.351910][ T5850] usb 3-1: Using ep0 maxpacket: 8
[  154.364596][ T5850] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.402005][ T5850] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  154.423364][ T5850] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.451974][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0
[  154.468840][ T5850] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  154.496675][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.517102][ T5850] usb 3-1: config 0 descriptor??
[  154.532942][ T6657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  154.746800][ T5851] usb 4-1: USB disconnect, device number 13
[  154.966642][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  154.982974][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.001341][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.009246][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.016741][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.023870][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.030790][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.040911][ T5850] ntrig 0003:1B96:000A.0016: unknown main item tag 0x0
[  155.047849][ T5850] ntrig 0003:1B96:000A.0016: unbalanced collection at end of report description
[  155.057403][ T5850] ntrig 0003:1B96:000A.0016: parse failed
[  155.064624][ T5850] ntrig: probe of 0003:1B96:000A.0016 failed with error -22
[  155.222824][ T5850] usb 3-1: USB disconnect, device number 11
[  155.252790][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  155.877641][   T27] audit: type=1326 audit(1786921617.471:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6684 comm="syz.3.292" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x0
[  156.426108][ T1093] Bluetooth: hci4: Frame reassembly failed (-84)
[  156.621877][ T5850] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.812206][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  156.823677][ T5850] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.856669][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0
[  156.876889][ T5850] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  156.901903][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.921916][ T5850] usb 3-1: config 0 descriptor??
[  157.352306][ T5850] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  157.801908][ T5850] usb 3-1: USB disconnect, device number 12
[  157.909686][   T27] audit: type=1326 audit(1786921619.501:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6719 comm="syz.3.307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x0
[  158.321906][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  158.452011][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  158.452040][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  158.501961][ T5850] usb 2-1: Using ep0 maxpacket: 8
[  158.533000][ T5850] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.553188][ T5850] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  158.582825][ T5850] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.615102][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0
[  158.631453][ T5850] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  158.667418][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.697176][ T5850] usb 2-1: config 0 descriptor??
[  158.709372][ T6723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.136586][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.179391][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.208233][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.231282][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.260815][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.277916][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.299349][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.331066][ T5850] ntrig 0003:1B96:000A.0018: unknown main item tag 0x0
[  159.350739][ T3490] Bluetooth: hci4: Frame reassembly failed (-84)
[  159.363226][ T5850] ntrig 0003:1B96:000A.0018: unbalanced collection at end of report description
[  159.385715][ T5850] ntrig 0003:1B96:000A.0018: parse failed
[  159.391489][ T5850] ntrig: probe of 0003:1B96:000A.0018 failed with error -22
[  159.422322][ T5850] usb 2-1: USB disconnect, device number 9
[  159.578212][   T27] audit: type=1326 audit(1786921621.171:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.0.322" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  160.414364][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  160.572030][ T5850] usb 2-1: device descriptor read/64, error -71
[  160.856165][ T5850] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  161.011945][ T5850] usb 2-1: device descriptor read/64, error -71
[  161.135166][ T5850] usb usb2-port1: attempt power cycle
[  161.411975][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  161.552726][ T5850] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  161.602638][ T5850] usb 2-1: device descriptor read/8, error -71
[  161.851896][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  161.902811][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  161.934625][ T5850] usb 2-1: device descriptor read/8, error -71
[  162.032006][ T5812] usb 4-1: Using ep0 maxpacket: 16
[  162.038686][ T5812] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.049792][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0
[  162.059396][ T5850] usb usb2-port1: unable to enumerate USB device
[  162.065870][ T5812] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  162.075748][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.086494][ T5812] usb 4-1: config 0 descriptor??
[  162.174560][   T27] audit: type=1326 audit(1786921623.771:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.2.337" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf44b9e0d9 code=0x0
[  162.505055][ T5812] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  162.957432][    T8] usb 4-1: USB disconnect, device number 14
[  163.572178][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  163.572658][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  163.715938][   T27] audit: type=1326 audit(1786921625.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6811 comm="syz.0.347" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  163.793918][ T5812] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  163.992668][ T5812] usb 4-1: Using ep0 maxpacket: 8
[  164.006229][ T5812] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.019853][ T5812] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  164.031166][ T5812] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.044333][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.050974][ T5812] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  164.064777][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.078298][ T5812] usb 4-1: config 0 descriptor??
[  164.083449][ T5850] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  164.091742][ T6810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  164.241939][ T5850] usb 3-1: device descriptor read/64, error -71
[  164.510624][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.519519][ T5850] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  164.527302][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.534995][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.552353][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.569410][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.581903][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.594455][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.608954][ T5812] ntrig 0003:1B96:000A.001A: unknown main item tag 0x0
[  164.621412][ T5812] ntrig 0003:1B96:000A.001A: unbalanced collection at end of report description
[  164.632378][ T5812] ntrig 0003:1B96:000A.001A: parse failed
[  164.638159][ T5812] ntrig: probe of 0003:1B96:000A.001A failed with error -22
[  164.686332][ T5850] usb 3-1: device descriptor read/64, error -71
[  164.754466][ T5812] usb 4-1: USB disconnect, device number 15
[  164.812176][ T5850] usb usb3-port1: attempt power cycle
[  164.881890][ T5851] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  165.061918][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  165.073563][ T5851] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.084995][ T5851] usb 1-1: config 0 interface 0 has no altsetting 0
[  165.091594][ T5851] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  165.100798][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.111108][ T5851] usb 1-1: config 0 descriptor??
[  165.222090][ T5850] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  165.253067][ T5850] usb 3-1: device descriptor read/8, error -71
[  165.521963][ T5850] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  165.541135][ T5851] nzxt-smart2 0003:1E71:2009.001B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  165.562640][ T5850] usb 3-1: device descriptor read/8, error -71
[  165.682222][ T5850] usb usb3-port1: unable to enumerate USB device
[  165.948238][ T5850] usb 1-1: USB disconnect, device number 12
[  166.709404][   T27] audit: type=1326 audit(1786921628.301:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x0
[  166.771976][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  166.896000][ T6858] Zero length message leads to an empty skb
[  167.812133][ T5850] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  168.002038][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  168.010210][ T5850] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.025050][ T5850] usb 3-1: config 0 interface 0 has no altsetting 0
[  168.031652][ T5850] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  168.040894][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.054471][ T5850] usb 3-1: config 0 descriptor??
[  168.251910][  T172] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  168.402136][  T172] usb 4-1: device descriptor read/64, error -71
[  168.489181][ T5850] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  168.671941][  T172] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  168.821872][  T172] usb 4-1: device descriptor read/64, error -71
[  168.876021][ T5850] usb 3-1: USB disconnect, device number 17
[  168.945892][  T172] usb usb4-port1: attempt power cycle
[  169.252422][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  169.259072][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  169.363310][  T172] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  169.422426][  T172] usb 4-1: device descriptor read/8, error -71
[  169.565797][   T27] audit: type=1326 audit(1786921631.161:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6901 comm="syz.0.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  169.711893][  T172] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  169.774118][  T172] usb 4-1: device descriptor read/8, error -71
[  169.912168][  T172] usb usb4-port1: unable to enumerate USB device
[  171.316441][   T27] audit: type=1326 audit(1786921632.911:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.2.392" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf44b9e0d9 code=0x0
[  171.911935][  T172] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  172.064958][  T172] usb 1-1: device descriptor read/64, error -71
[  172.351901][  T172] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  172.521939][  T172] usb 1-1: device descriptor read/64, error -71
[  172.541943][    T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  172.652939][  T172] usb usb1-port1: attempt power cycle
[  172.721898][    T8] usb 4-1: Using ep0 maxpacket: 16
[  172.729762][    T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.743752][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  172.750407][    T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  172.759844][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.769610][    T8] usb 4-1: config 0 descriptor??
[  173.074731][  T172] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  173.123335][  T172] usb 1-1: device descriptor read/8, error -71
[  173.371434][   T27] audit: type=1326 audit(1786921634.961:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6989 comm="syz.2.409" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf44b9e0d9 code=0x0
[  173.380259][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  173.401471][  T172] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  173.410562][    T8] usbhid: probe of 4-1:0.0 failed with error -71
[  173.419826][    T8] usb 4-1: USB disconnect, device number 20
[  173.432639][  T172] usb 1-1: device descriptor read/8, error -71
[  173.552161][  T172] usb usb1-port1: unable to enumerate USB device
[  174.093861][ T6999] syz.3.412 (6999) used greatest stack depth: 17896 bytes left
[  174.412761][    T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  174.595814][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.606879][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.617903][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  174.636201][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  174.645479][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.668359][    T8] usb 4-1: config 0 descriptor??
[  175.096014][    T8] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  175.136529][    T8] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  175.318956][   T27] audit: type=1326 audit(1786921636.911:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7032 comm="syz.2.424" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf44b9e0d9 code=0x0
[  175.363231][    T8] usb 4-1: USB disconnect, device number 21
[  176.901663][   T27] audit: type=1326 audit(1786921638.491:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.0.443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe48a39e0d9 code=0x0
[  178.124870][    T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  178.326805][    T8] usb 3-1: Using ep0 maxpacket: 16
[  178.338898][    T8] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.361221][ T7118] binder: 7117:7118 ioctl c0306201 200000000080 returned -14
[  178.377795][    T8] usb 3-1: config 0 interface 0 has no altsetting 0
[  178.393110][ T7118] binder: BINDER_SET_CONTEXT_MGR already set
[  178.399879][    T8] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  178.423203][ T7118] binder: 7117:7118 ioctl 4018620d 200000000040 returned -16
[  178.430818][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.450712][ T7119] binder: 7117:7119 ioctl c0306201 2000000003c0 returned -14
[  178.462928][    T8] usb 3-1: config 0 descriptor??
[  179.075481][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  179.081473][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  179.121720][    T8] usb 3-1: USB disconnect, device number 18
[  179.882521][ T5851] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  180.085296][ T5851] usb 3-1: Using ep0 maxpacket: 16
[  180.099653][ T5851] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.121329][ T5851] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.150641][ T5851] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  180.180747][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.210626][ T5851] usb 3-1: Product: syz
[  180.215111][ T5851] usb 3-1: Manufacturer: syz
[  180.219696][ T5851] usb 3-1: SerialNumber: syz
[  180.453855][ T5851] usb 3-1: 0:2 : does not exist
[  180.463302][ T5851] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  180.482717][ T5851] usb 3-1: USB disconnect, device number 19
[  180.519238][ T6542] udevd[6542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.525538][    T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  180.741915][    T8] usb 4-1: Using ep0 maxpacket: 16
[  180.748759][    T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.760049][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  180.767086][    T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  180.786107][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.816388][    T8] usb 4-1: config 0 descriptor??
[  180.922065][  T172] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  181.091960][  T172] usb 2-1: device descriptor read/64, error -71
[  181.371245][ T7183] capability: warning: `syz.2.484' uses deprecated v2 capabilities in a way that may be insecure
[  181.382024][  T172] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  181.437530][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  181.450091][    T8] usbhid: probe of 4-1:0.0 failed with error -71
[  181.466989][    T8] usb 4-1: USB disconnect, device number 22
[  181.533244][  T172] usb 2-1: device descriptor read/64, error -71
[  181.571034][ T7187] binder: 7186:7187 ioctl c018620c 0 returned -22
[  181.672036][  T172] usb usb2-port1: attempt power cycle
[  182.091911][  T172] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  182.122412][  T172] usb 2-1: device descriptor read/8, error -71
[  182.331893][    T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  182.391905][  T172] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  182.422934][  T172] usb 2-1: device descriptor read/8, error -71
[  182.513668][    T8] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  182.521930][    T8] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  182.532326][    T8] usb 4-1: config 0 has no interface number 0
[  182.541458][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  182.551986][  T172] usb usb2-port1: unable to enumerate USB device
[  182.558399][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.567350][    T8] usb 4-1: Product: syz
[  182.571567][    T8] usb 4-1: Manufacturer: syz
[  182.576273][    T8] usb 4-1: SerialNumber: syz
[  182.585648][    T8] usb 4-1: config 0 descriptor??
[  183.007276][    T8] usb 4-1: Found UVC 0.00 device syz (046d:0823)
[  183.015124][    T8] usb 4-1: No valid video chain found.
[  183.023260][    T8] usb 4-1: USB disconnect, device number 23
[  183.253120][  T172] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  183.433612][  T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  183.444598][  T172] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  183.458715][  T172] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  183.467833][  T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.477975][  T172] usb 3-1: config 0 descriptor??
[  183.483753][ T7214] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  183.663209][    T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  183.871884][    T8] usb 1-1: Using ep0 maxpacket: 16
[  183.878555][    T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.889724][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  183.896623][    T8] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  183.906439][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.918016][  T172] holtek_mouse 0003:04D9:A04A.001E: global environment stack underflow
[  183.927202][  T172] holtek_mouse 0003:04D9:A04A.001E: item 0 1 1 11 parsing failed
[  183.936012][    T8] usb 1-1: config 0 descriptor??
[  183.946552][  T172] holtek_mouse 0003:04D9:A04A.001E: hid parse failed: -22
[  183.953938][  T172] holtek_mouse: probe of 0003:04D9:A04A.001E failed with error -22
[  184.138038][ T5812] usb 3-1: USB disconnect, device number 20
[  184.549287][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  184.562181][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  184.579130][    T8] usb 1-1: USB disconnect, device number 17
[  189.381898][    T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  189.574463][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.596496][    T8] usb 3-1: config 0 has no interfaces?
[  189.610627][    T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  189.633192][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.653175][    T8] usb 3-1: config 0 descriptor??
[  189.912748][    T8] usb 3-1: USB disconnect, device number 21
[  191.265973][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.446397][ T7345] loop0: detected capacity change from 0 to 32768
[  192.490057][ T7345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.545 (7345)
[  192.577386][ T7345] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.611185][ T7345] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  192.643013][ T7345] BTRFS info (device loop0): using free space tree
[  192.816081][ T7345] BTRFS info (device loop0): enabling ssd optimizations
[  192.842065][ T7345] BTRFS info (device loop0): auto enabling async discard
[  193.177271][ T5773] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.299450][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.313158][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.476207][ T7399] batadv_slave_0: entered promiscuous mode
[  194.492276][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'.
[  194.516607][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.593380][ T7411] loop3: detected capacity change from 0 to 64
[  194.645079][   T27] audit: type=1804 audit(1786921656.241:19): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.561" name="/newroot/129/file1/file1" dev="loop3" ino=5 res=1 errno=0
[  194.706518][ T7399] batadv_slave_0 (unregistering): left promiscuous mode
[  194.722042][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.185221][ T7417] loop0: detected capacity change from 0 to 512
[  195.193890][ T7417] EXT4-fs: inline encryption not supported
[  195.202426][ T7417] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  195.215807][ T7417] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  195.229938][ T7417] EXT4-fs error (device loop0): __ext4_iget:5079: inode #15: block 1803188595: comm syz.0.564: invalid block
[  195.246514][ T7417] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.564: couldn't read orphan inode 15 (err -117)
[  195.259610][ T7417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.371289][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.380366][ T5783] Bluetooth: hci2: command 0x0406 tx timeout
[  196.380449][ T5783] Bluetooth: hci1: command 0x0406 tx timeout
[  196.386379][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  196.392321][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  196.951888][  T172] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  197.141951][  T172] usb 1-1: Using ep0 maxpacket: 16
[  197.148503][  T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.159528][  T172] usb 1-1: config 0 interface 0 has no altsetting 0
[  197.166231][  T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  197.175421][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.187319][  T172] usb 1-1: config 0 descriptor??
[  197.636713][  T172] nzxt-smart2 0003:1E71:2009.001F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  199.222464][ T7480] loop3: detected capacity change from 0 to 32768
[  199.262483][ T7480] (syz.3.585,7480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.297442][ T7480] (syz.3.585,7480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  199.373177][ T7480] JBD2: Ignoring recovery information on journal
[  199.483756][ T7480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  199.626304][ T5812] usb 1-1: USB disconnect, device number 18
[  199.763900][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  202.324806][ T7509] loop0: detected capacity change from 0 to 256
[  202.402421][ T7509] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  202.442468][ T7509] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  202.487427][ T7509] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  202.513428][ T7509] exFAT-fs (loop0): failed to load alloc-bitmap
[  202.519747][ T7509] exFAT-fs (loop0): failed to recognize exfat type
[  202.822783][ T7516] futex_wake_op: syz.0.599 tries to shift op by 144; fix this program
[  202.890554][   T12] Bluetooth: hci4: Frame reassembly failed (-90)
[  202.900932][ T7518] Bluetooth: hci4: Frame reassembly failed (-84)
[  204.932293][ T5779] Bluetooth: hci4: command 0x1003 tx timeout
[  204.939442][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  205.102027][ T7547] binder: BINDER_SET_CONTEXT_MGR already set
[  205.121899][ T7547] binder: 7546:7547 ioctl 4018620d 200000001000 returned -16
[  205.840384][ T7553] loop3: detected capacity change from 0 to 32768
[  205.866320][ T7553] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.611 (7553)
[  205.948960][ T7553] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.977075][ T7553] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  205.988529][ T7553] BTRFS info (device loop3): using free space tree
[  206.039981][ T7553] BTRFS info (device loop3): enabling ssd optimizations
[  206.056194][ T7553] BTRFS info (device loop3): auto enabling async discard
[  206.498188][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.770283][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.789670][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.798584][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.810777][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.819999][   T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  206.830928][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.335749][ T7584] chnl_net:caif_netlink_parms(): no params data found
[  207.865976][ T2928] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.925088][ T7584] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.933945][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.941068][ T7584] bridge_slave_0: entered allmulticast mode
[  207.948105][ T7584] bridge_slave_0: entered promiscuous mode
[  207.956965][ T7584] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.967194][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.974566][ T7584] bridge_slave_1: entered allmulticast mode
[  207.981210][ T7584] bridge_slave_1: entered promiscuous mode
[  208.118225][ T2928] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.178985][ T7584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.190077][ T7584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.324043][ T2928] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.386039][ T7584] team0: Port device team_slave_0 added
[  208.612055][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  208.612189][ T5779] Bluetooth: hci4: command 0x1003 tx timeout
[  208.651403][ T7584] team0: Port device team_slave_1 added
[  208.844070][ T2928] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.926870][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.941044][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.967334][ T5088] Bluetooth: hci5: command tx timeout
[  209.014963][ T7584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.035325][ T7584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.047921][ T7584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.081147][ T7584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.197710][ T7584] hsr_slave_0: entered promiscuous mode
[  209.242338][ T7584] hsr_slave_1: entered promiscuous mode
[  209.282090][ T7584] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.289648][ T7584] Cannot create hsr debugfs directory
[  211.003261][ T7584] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  211.014169][ T5088] Bluetooth: hci5: command tx timeout
[  212.985345][ T7584] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  213.057375][ T7584] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  213.100004][ T5088] Bluetooth: hci5: command tx timeout
[  213.117423][ T7584] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.335125][ T7626] ftl_cs: FTL header not found.
[  213.411286][ T7626] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072]
[  213.867305][ T7636] loop1: detected capacity change from 0 to 32768
[  213.925043][   T27] audit: type=1800 audit(1786921675.521:20): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.627" name="file1" dev="loop1" ino=7 res=0 errno=0
[  213.966224][   T27] audit: type=1800 audit(1786921675.561:21): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.627" name="file1" dev="loop1" ino=7 res=0 errno=0
[  214.468703][ T7584] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.858450][ T7584] 8021q: adding VLAN 0 to HW filter on device team0
[  215.058939][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.066201][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.172522][ T5779] Bluetooth: hci5: command tx timeout
[  215.284833][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.292023][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.364263][ T7662] loop1: detected capacity change from 0 to 40427
[  215.385190][ T7662] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  215.397805][ T7662] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  215.411384][ T7662] F2FS-fs (loop1): invalid crc value
[  215.545706][ T7662] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  215.561109][ T7662] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  215.652214][ T5088] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  215.831159][ T5771] syz-executor: attempt to access beyond end of device
[  215.831159][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  215.849626][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  217.046854][ T2928] hsr_slave_0: left promiscuous mode
[  217.293035][ T2928] hsr_slave_1: left promiscuous mode
[  217.374066][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.381553][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.423355][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.430772][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.497742][ T2928] bridge_slave_1: left allmulticast mode
[  217.507853][ T2928] bridge_slave_1: left promiscuous mode
[  217.516772][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.612771][ T2928] bridge_slave_0: left allmulticast mode
[  217.618449][ T2928] bridge_slave_0: left promiscuous mode
[  217.629882][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.942538][ T2928] veth1_macvtap: left promiscuous mode
[  217.948435][ T2928] veth0_macvtap: left promiscuous mode
[  217.960369][ T2928] veth1_vlan: left promiscuous mode
[  217.965944][ T2928] veth0_vlan: left promiscuous mode
[  218.656750][ T7710] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  219.332086][ T5779] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  219.332135][ T5088] Bluetooth: hci3: command 0x1003 tx timeout
[  221.244597][ T2928] team0 (unregistering): Port device team_slave_1 removed
[  221.462664][ T2928] team0 (unregistering): Port device team_slave_0 removed
[  221.682181][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.945144][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.554191][ T2928] bond0 (unregistering): Released all slaves
[  223.904026][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  224.068628][ T7584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.751444][ T7584] veth0_vlan: entered promiscuous mode
[  224.818522][ T7584] veth1_vlan: entered promiscuous mode
[  224.927282][ T7584] veth0_macvtap: entered promiscuous mode
[  225.300676][ T7584] veth1_macvtap: entered promiscuous mode
[  225.566706][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.662133][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.739061][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.827177][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.915098][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.051428][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.078273][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.106330][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.134446][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.154503][ T7584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.178658][ T7584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.229342][ T7584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.339646][ T7584] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.358535][ T7584] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.378610][ T7584] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.397126][ T7584] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.851927][ T5779] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  226.852165][ T5088] Bluetooth: hci3: command 0x1003 tx timeout
[  228.377913][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.398519][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.492066][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.520532][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.281991][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'.
[  230.532028][ T7780] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  233.575640][ T1076] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  234.771883][   T51] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  234.789219][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[  234.893971][ T7897] loop4: detected capacity change from 0 to 32768
[  235.025224][ T7897] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  235.069652][ T7897] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  235.116905][ T7897] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  235.145153][   T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  235.158088][   T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  235.230985][   T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms
[  235.246291][   T28] gfs2: fsid=syz:syz.0: jid=0: Done
[  235.253608][ T7897] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  235.447083][ T7897] gfs2: fsid=syz:syz.0: found 1 quota changes
[  235.699197][ T7584] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  235.699197][ T7584]   inode = 11 2339
[  235.699197][ T7584]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  235.719135][ T7584] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  235.737805][ T7584] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:7584 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  235.748751][ T7584] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  235.764904][ T7584] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  235.781351][ T7584] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  235.790882][ T7584] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  235.813166][ T7584] gfs2: fsid=syz:syz.0: File system withdrawn
[  235.819268][ T7584] CPU: 1 PID: 7584 Comm: syz-executor Not tainted syzkaller #0
[  235.826822][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  235.836894][ T7584] Call Trace:
[  235.840181][ T7584]  <TASK>
[  235.843120][ T7584]  dump_stack_lvl+0x18c/0x250
[  235.847820][ T7584]  ? show_regs_print_info+0x20/0x20
[  235.853035][ T7584]  ? load_image+0x420/0x420
[  235.857560][ T7584]  ? kobject_uevent_env+0x368/0x890
[  235.862785][ T7584]  gfs2_withdraw+0xe16/0x1400
[  235.867491][ T7584]  ? gfs2_lm+0x240/0x240
[  235.871752][ T7584]  ? preempt_schedule+0xc0/0xd0
[  235.876624][ T7584]  ? gfs2_consist_inode_i+0xf5/0x110
[  235.881929][ T7584]  gfs2_inode_refresh+0xb3c/0x11a0
[  235.887070][ T7584]  ? gfs2_inode_metasync+0xf0/0xf0
[  235.892207][ T7584]  ? gfs2_glock_nq+0xe2e/0x1440
[  235.897078][ T7584]  gfs2_instantiate+0x162/0x220
[  235.901951][ T7584]  gfs2_glock_wait+0x1d4/0x2a0
[  235.906731][ T7584]  do_sync+0x4b8/0xd90
[  235.910825][ T7584]  ? gfs2_quota_sync+0x411/0x5a0
[  235.915787][ T7584]  ? bh_get+0x760/0x760
[  235.919960][ T7584]  ? gfs2_quota_sync+0x318/0x5a0
[  235.924917][ T7584]  ? gfs2_quota_sync+0x411/0x5a0
[  235.929867][ T7584]  ? do_raw_spin_unlock+0x121/0x230
[  235.935090][ T7584]  ? do_raw_spin_unlock+0x121/0x230
[  235.940307][ T7584]  gfs2_quota_sync+0x411/0x5a0
[  235.945100][ T7584]  gfs2_sync_fs+0x4c/0xb0
[  235.949448][ T7584]  sync_filesystem+0xea/0x220
[  235.954145][ T7584]  generic_shutdown_super+0x6f/0x2b0
[  235.959452][ T7584]  kill_block_super+0x44/0x90
[  235.964150][ T7584]  deactivate_locked_super+0x97/0x100
[  235.969520][ T7584]  cleanup_mnt+0x3d7/0x460
[  235.973934][ T7584]  task_work_run+0x1d4/0x260
[  235.978524][ T7584]  ? task_work_cancel+0x220/0x220
[  235.983547][ T7584]  ? exit_to_user_mode_loop+0x3b/0x110
[  235.989004][ T7584]  exit_to_user_mode_loop+0xe6/0x110
[  235.994286][ T7584]  exit_to_user_mode_prepare+0xee/0x180
[  235.999831][ T7584]  syscall_exit_to_user_mode+0x1a/0x50
[  236.005283][ T7584]  do_syscall_64+0x61/0xb0
[  236.009690][ T7584]  ? clear_bhb_loop+0x40/0x90
[  236.014359][ T7584]  ? clear_bhb_loop+0x40/0x90
[  236.019034][ T7584]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  236.024933][ T7584] RIP: 0033:0x7f9d0dd9f317
[  236.029344][ T7584] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  236.048937][ T7584] RSP: 002b:00007ffc3f4aa8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  236.057344][ T7584] RAX: 0000000000000000 RBX: 00007f9d0de34474 RCX: 00007f9d0dd9f317
[  236.065305][ T7584] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3f4aa960
[  236.073267][ T7584] RBP: 00007ffc3f4aa960 R08: 00007ffc3f4ab960 R09: 00000000ffffffff
[  236.081227][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f4ab9f0
[  236.089188][ T7584] R13: 00007f9d0de34474 R14: 000000000003981e R15: 00007ffc3f4aba30
[  236.097163][ T7584]  </TASK>
[  236.212048][ T5812] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  237.178273][ T7930] loop4: detected capacity change from 0 to 1024
[  237.205661][ T7912] CacheFiles: No cache directory specified
[  237.338603][ T5812] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  237.355483][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.357444][ T5812] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  237.364230][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.393800][ T5812] usb 4-1: config 0 has no interface number 0
[  237.408242][ T5812] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  237.408469][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.422336][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.449360][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.452010][ T5812] usb 4-1: Product: syz
[  237.460968][ T5812] usb 4-1: Manufacturer: syz
[  237.461426][ T7933] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.471061][ T5812] usb 4-1: SerialNumber: syz
[  237.477765][ T7933] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.487674][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.500075][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.509063][ T7933] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.510698][ T5812] usb 4-1: config 0 descriptor??
[  237.525372][ T7933] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.532917][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.540351][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.558886][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.590498][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.599695][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.612973][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.620396][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.641198][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.662127][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.669975][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.678852][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.686523][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.695642][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.703372][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.710821][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.723953][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.733239][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.740651][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.753208][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.760585][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.771528][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.797338][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.809085][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.833561][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.845790][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.857263][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.873791][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.889323][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.898762][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.910011][ T7930] hfsplus: request for non-existent node 16777216 in B*Tree
[  237.917907][   T27] audit: type=1800 audit(1786921699.511:22): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.676" name="file1" dev="loop4" ino=20 res=0 errno=0
[  237.954901][ T5812] usb 4-1: Found UVC 0.00 device syz (046d:0823)
[  237.971528][ T5812] usb 4-1: No valid video chain found.
[  238.055630][   T12] hfsplus: request for non-existent node 16777216 in B*Tree
[  238.067832][   T12] hfsplus: request for non-existent node 16777216 in B*Tree
[  238.106791][ T5851] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  238.190216][ T5812] usb 4-1: USB disconnect, device number 24
[  238.307536][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.327326][ T5851] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  238.346675][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.368515][ T5851] usb 1-1: config 0 descriptor??
[  238.887017][ T5851] ath6kl: Failed to read usb control message: -71
[  238.908300][ T5851] ath6kl: Unable to read the bmi data from the device: -71
[  238.926791][ T5851] ath6kl: Unable to recv target info: -71
[  238.943463][ T7967] loop3: detected capacity change from 0 to 256
[  238.949829][ T5851] ath6kl: Failed to init ath6kl core: -71
[  238.959700][ T5851] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  238.968325][ T7967] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  238.979761][ T7967] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  238.993864][ T5851] usb 1-1: USB disconnect, device number 19
[  239.040513][ T7967] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  239.064143][ T7967] exFAT-fs (loop3): failed to load alloc-bitmap
[  239.074314][ T7967] exFAT-fs (loop3): failed to recognize exfat type
[  239.146914][ T7967] loop3: detected capacity change from 0 to 256
[  239.156429][ T7967] FAT-fs (loop3): Unrecognized mount option "mask=MAY_WR" or missing value
[  240.221960][   T51] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  240.226377][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[  240.974706][ T8009] loop4: detected capacity change from 0 to 512
[  241.014303][ T8009] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  241.104062][ T8009] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  241.140812][ T8009] EXT4-fs (loop4): mount failed
[  243.172127][   T51] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  243.172705][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[  243.472728][ T8068] loop3: detected capacity change from 0 to 512
[  243.499329][ T8068] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  243.564451][ T8068] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  243.605247][ T8068] EXT4-fs (loop3): mount failed
[  244.302001][  T172] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  244.542478][  T172] usb 1-1: Using ep0 maxpacket: 16
[  244.550171][  T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.579635][  T172] usb 1-1: config 0 interface 0 has no altsetting 0
[  244.586672][  T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  244.600248][ T5812] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  244.621870][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.662816][  T172] usb 1-1: config 0 descriptor??
[  244.828906][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.859922][ T5812] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  244.891327][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.928359][ T5812] usb 5-1: config 0 descriptor??
[  244.967194][ T2928] Bluetooth: hci3: Frame reassembly failed (-84)
[  245.286809][  T172] nzxt-smart2 0003:1E71:2009.0020: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  245.412951][ T5812] ath6kl: Failed to read usb control message: -71
[  245.421482][ T5812] ath6kl: Unable to read the bmi data from the device: -71
[  245.430341][ T5812] ath6kl: Unable to recv target info: -71
[  245.439896][ T5812] ath6kl: Failed to init ath6kl core: -71
[  245.447361][ T5812] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  245.460387][ T5812] usb 5-1: USB disconnect, device number 2
[  246.685636][ T8181] loop1: detected capacity change from 0 to 1024
[  246.804245][  T172] usb 1-1: USB disconnect, device number 20
[  247.012159][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[  247.012256][   T51] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  247.254176][ T8202] syzkaller0: create flow: hash 1847140463 index 2
[  247.570293][   T12] syzkaller0: tun_net_xmit 76
[  247.601615][ T5761] syzkaller0: tun_net_xmit 76
[  247.607224][   T12] syzkaller0: tun_net_xmit 48
[  247.793478][ T5761] syzkaller0: tun_net_xmit 76
[  248.103174][   T28] syzkaller0: tun_net_xmit 76
[  248.872033][ T5812] syzkaller0: tun_net_xmit 76
[  249.062067][ T8195] syzkaller0: delete flow: hash 1847140463 index 2
[  249.078795][ T5850] syzkaller0: tun_net_xmit 76
[  251.252045][   T51] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  251.252409][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[  255.738063][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.744464][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  262.023702][ T8301] loop4: detected capacity change from 0 to 32768
[  262.045644][ T8301] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  262.069519][ T8301] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  262.121271][ T8301] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  262.155917][   T28] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  262.171946][   T28] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  262.228364][   T28] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms
[  262.245319][   T28] gfs2: fsid=syz:syz.0: jid=0: Done
[  262.250564][ T8301] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  262.395461][ T8301] gfs2: fsid=syz:syz.0: found 1 quota changes
[  262.632284][ T7584] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  262.632284][ T7584]   inode = 11 2339
[  262.632284][ T7584]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  262.655797][ T7584] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  262.669137][ T7584] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:7584 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  262.682060][ T7584] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  262.690237][ T7584] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  262.719430][ T7584] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  262.733158][ T7584] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  262.742141][ T7584] gfs2: fsid=syz:syz.0: File system withdrawn
[  262.748226][ T7584] CPU: 1 PID: 7584 Comm: syz-executor Not tainted syzkaller #0
[  262.755778][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  262.765899][ T7584] Call Trace:
[  262.769192][ T7584]  <TASK>
[  262.772133][ T7584]  dump_stack_lvl+0x18c/0x250
[  262.776838][ T7584]  ? show_regs_print_info+0x20/0x20
[  262.782049][ T7584]  ? load_image+0x420/0x420
[  262.786574][ T7584]  ? kobject_uevent_env+0x368/0x890
[  262.791795][ T7584]  gfs2_withdraw+0xe16/0x1400
[  262.796512][ T7584]  ? gfs2_lm+0x240/0x240
[  262.800785][ T7584]  ? gfs2_consist_inode_i+0xf5/0x110
[  262.806093][ T7584]  gfs2_inode_refresh+0xb3c/0x11a0
[  262.811226][ T7584]  ? gfs2_inode_metasync+0xf0/0xf0
[  262.816358][ T7584]  ? gfs2_glock_nq+0xe2e/0x1440
[  262.821235][ T7584]  gfs2_instantiate+0x162/0x220
[  262.826113][ T7584]  gfs2_glock_wait+0x1d4/0x2a0
[  262.830897][ T7584]  do_sync+0x4b8/0xd90
[  262.834985][ T7584]  ? gfs2_quota_sync+0x411/0x5a0
[  262.839955][ T7584]  ? bh_get+0x760/0x760
[  262.844135][ T7584]  ? gfs2_quota_sync+0x318/0x5a0
[  262.849096][ T7584]  ? gfs2_quota_sync+0x411/0x5a0
[  262.854054][ T7584]  ? do_raw_spin_unlock+0x121/0x230
[  262.859278][ T7584]  ? do_raw_spin_unlock+0x121/0x230
[  262.864501][ T7584]  gfs2_quota_sync+0x411/0x5a0
[  262.869301][ T7584]  gfs2_sync_fs+0x4c/0xb0
[  262.873652][ T7584]  sync_filesystem+0xea/0x220
[  262.878347][ T7584]  generic_shutdown_super+0x6f/0x2b0
[  262.883651][ T7584]  kill_block_super+0x44/0x90
[  262.888338][ T7584]  deactivate_locked_super+0x97/0x100
[  262.893724][ T7584]  cleanup_mnt+0x3d7/0x460
[  262.898158][ T7584]  task_work_run+0x1d4/0x260
[  262.902767][ T7584]  ? task_work_cancel+0x220/0x220
[  262.907819][ T7584]  ? exit_to_user_mode_loop+0x3b/0x110
[  262.913300][ T7584]  exit_to_user_mode_loop+0xe6/0x110
[  262.918601][ T7584]  exit_to_user_mode_prepare+0xee/0x180
[  262.924163][ T7584]  syscall_exit_to_user_mode+0x1a/0x50
[  262.929639][ T7584]  do_syscall_64+0x61/0xb0
[  262.934069][ T7584]  ? clear_bhb_loop+0x40/0x90
[  262.938755][ T7584]  ? clear_bhb_loop+0x40/0x90
[  262.943450][ T7584]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.949350][ T7584] RIP: 0033:0x7f9d0dd9f317
[  262.953773][ T7584] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  262.973395][ T7584] RSP: 002b:00007ffc3f4aa8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  262.981828][ T7584] RAX: 0000000000000000 RBX: 00007f9d0de34474 RCX: 00007f9d0dd9f317
[  262.989809][ T7584] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3f4aa960
[  262.997793][ T7584] RBP: 00007ffc3f4aa960 R08: 00007ffc3f4ab960 R09: 00000000ffffffff
[  263.005778][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f4ab9f0
[  263.013766][ T7584] R13: 00007f9d0de34474 R14: 0000000000040173 R15: 00007ffc3f4aba30
[  263.021768][ T7584]  </TASK>
[  263.785282][ T8307] loop4: detected capacity change from 0 to 32768
[  263.819572][ T8307] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  267.241507][ T8317] loop1: detected capacity change from 0 to 2048
[  268.924717][ T7584] ocfs2: Unmounting device (7,4) on (node local)
[  268.981641][ T8318] ALSA: mixer_oss: invalid OSS volume 'syz_t'
[  270.235565][ T8349] loop1: detected capacity change from 0 to 512
[  270.304445][ T8349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.389263][ T8349] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.414252][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.422018][  T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  274.615718][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.627018][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.641221][  T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  274.656525][  T788] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  274.665893][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.680712][  T788] usb 5-1: config 0 descriptor??
[  275.140359][  T788] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving
[  275.178115][  T788] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  275.478321][  T788] usb 5-1: USB disconnect, device number 3
[  279.728132][ T8392] binder: BINDER_SET_CONTEXT_MGR already set
[  279.749827][ T8392] binder: 8391:8392 ioctl 4018620d 200000001000 returned -16
[  282.401687][ T8390] ALSA: mixer_oss: invalid OSS volume 'syz_t'
[  282.571769][ T8406] o2net: Error -99 while binding socket at 127.0.0.1:7
[  283.599586][ T8421] binder: BINDER_SET_CONTEXT_MGR already set
[  283.621878][ T8421] binder: 8419:8421 ioctl 4018620d 200000001000 returned -16
[  283.648274][ T8423] syzkaller0: entered promiscuous mode
[  283.661936][ T8423] syzkaller0: entered allmulticast mode
[  283.679139][ T8423] tipc: Started in network mode
[  283.694640][ T8423] tipc: Node identity 7eb6e8d70365, cluster identity 4711
[  283.725662][ T8423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.762645][ T8423] tipc: Resetting bearer <eth:syzkaller0>
[  283.769925][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.778428][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.786572][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.794698][ T8423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.905567][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.914000][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.042595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.122082][ T8422] tipc: Resetting bearer <eth:syzkaller0>
[  284.681139][ T8427] loop1: detected capacity change from 0 to 32768
[  285.651915][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  287.669917][ T8422] tipc: Disabling bearer <eth:syzkaller0>
[  288.554491][   T27] audit: type=1800 audit(1786921750.131:23): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.799" name="file0" dev="overlay" ino=1084 res=0 errno=0
[  288.723015][ T5812] tipc: Node number set to 2111039703
[  288.980216][ T8459] binder: BINDER_SET_CONTEXT_MGR already set
[  289.002145][ T8459] binder: 8458:8459 ioctl 4018620d 200000001000 returned -16
[  289.947793][ T8478] loop4: detected capacity change from 0 to 4096
[  289.970698][ T8478] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker.
[  290.026686][ T8478] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 10.
[  290.067190][ T8478] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  290.102296][ T8478] ntfs: (device loop4): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing.
[  290.126556][ T8478] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  290.160567][ T8478] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  290.196977][ T8478] ntfs: volume version 3.1.
[  290.219061][ T8478] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  290.242127][ T8478] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x18 as bad.  Run chkdsk.
[  290.288200][ T8478] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota.
[  291.941969][   T28] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  292.147821][   T28] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[  292.171878][   T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.198308][   T28] usb 5-1: config 0 has no interfaces?
[  292.219806][   T28] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  292.232036][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.283256][   T28] usb 5-1: config 0 descriptor??
[  292.435386][ T8484] loop1: detected capacity change from 0 to 32768
[  292.523766][ T8484] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  292.842711][ T5771] ocfs2: Unmounting device (7,1) on (node local)
[  294.599449][ T5761] usb 5-1: USB disconnect, device number 4
[  294.977592][ T8518] loop3: detected capacity change from 0 to 8192
[  295.033482][ T8518] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  295.074003][ T8518] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  295.132730][ T8518] REISERFS (device loop3): using ordered data mode
[  295.139260][ T8518] reiserfs: using flush barriers
[  295.216409][ T8518] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  295.279613][ T8518] REISERFS (device loop3): checking transaction log (loop3)
[  295.313649][ T8526] loop1: detected capacity change from 0 to 4096
[  295.337457][ T8518] REISERFS (device loop3): Using r5 hash to sort names
[  295.357790][ T8518] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  295.394305][ T8518] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  295.697366][ T8526] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  296.241924][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  296.523665][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  297.106726][ T8563] binder: BINDER_SET_CONTEXT_MGR already set
[  297.113923][ T8563] binder: 8562:8563 ioctl 4018620d 200000001000 returned -16
[  298.335706][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  299.413048][    T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  299.456259][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.507831][    T9] usb 4-1: can't set config #1, error -71
[  299.533468][    T9] usb 4-1: USB disconnect, device number 25
[  299.822344][  T172] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  300.034285][  T172] usb 1-1: Using ep0 maxpacket: 16
[  300.042217][  T172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.067014][  T172] usb 1-1: config 0 interface 0 has no altsetting 0
[  300.087960][  T172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  300.121350][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.150773][  T172] usb 1-1: config 0 descriptor??
[  300.304459][   T28] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  300.494358][   T28] usb 5-1: unable to get BOS descriptor or descriptor too short
[  300.501935][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  300.509052][   T28] usb 5-1: config 0 has no interfaces?
[  300.518118][   T28] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  300.531361][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.541125][   T28] usb 5-1: Product: syz
[  300.549915][   T28] usb 5-1: Manufacturer: syz
[  300.555320][   T28] usb 5-1: SerialNumber: syz
[  300.570820][   T28] usb 5-1: config 0 descriptor??
[  300.605832][  T172] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  300.691960][    T9] usb 4-1: Using ep0 maxpacket: 32
[  300.699202][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.726927][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.748231][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  300.768351][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.799076][    T9] usb 4-1: config 0 descriptor??
[  300.816940][    T9] hub 4-1:0.0: USB hub found
[  300.851339][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  300.873630][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  300.895889][   T28] usb 5-1: USB disconnect, device number 5
[  301.018375][    T9] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  301.260653][ T8614] loop1: detected capacity change from 0 to 512
[  301.276257][ T8614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  301.290388][ T8614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  301.298970][ T8614] System zones: 1-12
[  301.317635][ T8614] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  301.335928][ T8614] EXT4-fs (loop1): 1 truncate cleaned up
[  301.346189][ T8614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.435012][    T9] hid-generic 0003:046D:C31C.0023: unknown main item tag 0x0
[  301.484925][    T9] hid-generic 0003:046D:C31C.0023: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  301.565757][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.791347][    T9] usb 4-1: USB disconnect, device number 26
[  302.463905][ T8636] loop1: detected capacity change from 0 to 32768
[  302.523647][ T8636] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  302.575045][ T5812] usb 1-1: USB disconnect, device number 22
[  302.689676][ T8636] XFS (loop1): Ending clean mount
[  306.004032][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  306.191957][  T788] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  306.402184][  T788] usb 5-1: Using ep0 maxpacket: 16
[  306.416536][  T788] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.435315][  T788] usb 5-1: config 0 interface 0 has no altsetting 0
[  306.446264][  T788] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  306.458067][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.481297][  T788] usb 5-1: config 0 descriptor??
[  306.931439][  T788] nzxt-smart2 0003:1E71:2009.0024: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  307.106266][ T8672] autofs4:pid:8672:autofs_fill_super: called with bogus options
[  307.391969][  T788] usb 5-1: USB disconnect, device number 6
[  308.899697][ T8697] netlink: 'syz.1.884': attribute type 1 has an invalid length.
[  308.910008][ T8696] o2net: Error -99 while binding socket at 127.0.0.1:7
[  308.958659][ T8697] bond1: entered promiscuous mode
[  308.965605][ T8697] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.066775][ T8701] syzkaller0: entered promiscuous mode
[  309.074572][ T8701] syzkaller0: entered allmulticast mode
[  309.089284][ T8701] tipc: Started in network mode
[  309.100338][ T8701] tipc: Node identity 2a47e3be770b, cluster identity 4711
[  309.119166][ T8701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.162520][ T8700] tipc: Resetting bearer <eth:syzkaller0>
[  309.193528][ T8709] loop3: detected capacity change from 0 to 128
[  309.353613][ T8700] tipc: Disabling bearer <eth:syzkaller0>
[  309.494313][ T8710] loop1: detected capacity change from 0 to 32768
[  309.533635][ T8710] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  309.681383][ T8720] binder: 8717:8720 ioctl 4018620d 0 returned -22
[  309.853468][ T5771] ocfs2: Unmounting device (7,1) on (node local)
[  311.015841][ T8747] binder: BINDER_SET_CONTEXT_MGR already set
[  311.043636][ T8747] binder: 8746:8747 ioctl 4018620d 200000001000 returned -16
[  311.214188][ T8744] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.432980][   T28] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  311.464141][ T8744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.622656][   T28] usb 5-1: Using ep0 maxpacket: 16
[  311.629892][   T28] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.646042][   T28] usb 5-1: config 0 interface 0 has no altsetting 0
[  311.656020][   T28] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  311.678451][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.698212][   T28] usb 5-1: config 0 descriptor??
[  312.143161][   T28] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[  312.602025][  T788] usb 5-1: USB disconnect, device number 7
[  315.227061][ T8744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.381314][ T8776] binder: BINDER_SET_CONTEXT_MGR already set
[  315.402429][ T8776] binder: 8775:8776 ioctl 4018620d 200000001000 returned -16
[  315.825758][ T8744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.019270][ T8794] loop4: detected capacity change from 0 to 4096
[  316.069105][ T8794] EXT4-fs (loop4): Test dummy encryption mode enabled
[  316.152233][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  316.167920][ T8794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.372533][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  316.381847][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  316.441816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  316.491812][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  316.782097][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  316.801814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  316.861814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  317.222448][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.228833][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.232944][ T7584] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.533540][ T8798] UBIFS error (pid: 8798): cannot open "ubi0", error -19
[  318.134771][ T8744] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.175000][ T8802] binder: BINDER_SET_CONTEXT_MGR already set
[  318.181037][ T8802] binder: 8801:8802 ioctl 4018620d 200000001000 returned -16
[  318.195237][ T8744] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.234205][ T8744] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.261656][ T8744] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.282414][    T9] usb 2-1: Using ep0 maxpacket: 16
[  318.291441][    T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.307564][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  318.324953][    T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  318.350006][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.213426][    T9] usb 2-1: config 0 descriptor??
[  319.240203][    T9] usb 2-1: can't set config #0, error -71
[  319.261316][    T9] usb 2-1: USB disconnect, device number 19
[  320.803227][ T8812] loop1: detected capacity change from 0 to 32768
[  320.846225][ T8812] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  320.979119][ T8812] XFS (loop1): Ending clean mount
[  321.015990][ T8812] XFS (loop1): Quotacheck needed: Please wait.
[  321.102367][ T8812] XFS (loop1): Quotacheck: Done.
[  321.243101][ T8812] loop1: detected capacity change from 32768 to 0
[  321.251733][    C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 64 prio class 2
[  321.726845][ T8856] syz.1.934: attempt to access beyond end of device
[  321.726845][ T8856] loop1: rw=432129, sector=144, nr_sectors = 16 limit=0
[  321.756384][   T55] XFS (loop1): log I/O error -5
[  321.761498][   T55] XFS (loop1): Filesystem has been shut down due to log error (0x2).
[  321.770146][   T55] XFS (loop1): Please unmount the filesystem and rectify the problem(s).
[  321.781446][ T8856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  323.233674][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.962'.
[  324.520541][ T8928] vlan0: entered promiscuous mode
[  327.138285][ T8975] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  327.147114][ T8975] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  328.706224][ T9018] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.956228][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  330.058345][ T5850] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  330.267805][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.296244][ T5850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.322514][ T5850] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.352357][ T5850] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.391896][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.423492][ T5850] usb 1-1: config 0 descriptor??
[  331.049424][ T5850] usbhid 1-1:0.0: can't add hid device: -71
[  331.056147][ T5850] usbhid: probe of 1-1:0.0 failed with error -71
[  331.075910][ T5850] usb 1-1: USB disconnect, device number 23
[  334.512330][ T5850] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  334.716498][ T5850] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  334.732372][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.750580][ T5850] usb 1-1: Product: syz
[  334.760693][ T5850] usb 1-1: Manufacturer: syz
[  334.770808][ T5850] usb 1-1: SerialNumber: syz
[  334.987301][ T5850] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  335.006375][ T5850] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  335.021660][ T5850] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  335.034026][ T5850] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  335.045478][ T5850] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  335.104734][ T5850] lan78xx: probe of 1-1:1.0 failed with error -71
[  335.121511][ T5850] usb 1-1: USB disconnect, device number 24
[  338.353142][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  339.905134][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.916723][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.928631][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  339.942508][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  339.951567][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.963338][    T9] usb 1-1: config 0 descriptor??
[  342.672677][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  342.692500][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  342.723050][    T9] usb 1-1: USB disconnect, device number 25
[  343.172183][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  343.362722][    T9] usb 1-1: Using ep0 maxpacket: 16
[  343.374338][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.402782][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  343.427074][    T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  343.578446][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.597313][    T9] usb 1-1: config 0 descriptor??
[  347.909636][ T9262] syz.4.1110 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  350.442571][    T9] usbhid 1-1:0.0: can't add hid device: -32
[  350.448891][    T9] usbhid: probe of 1-1:0.0 failed with error -32
[  350.518886][    T9] usb 1-1: USB disconnect, device number 26
[  352.043506][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  352.616797][ T9303] can: request_module (can-proto-4) failed.
[  352.883344][ T9309] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1129'.
[  357.012310][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  357.193643][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.205058][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.222482][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  357.246793][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  357.265652][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.290807][    T9] usb 1-1: config 0 descriptor??
[  359.411387][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  359.428986][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  359.451035][    T9] usb 1-1: USB disconnect, device number 27
[  362.146732][   T51] Bluetooth: hci5: command 0x0406 tx timeout
[  363.092359][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  363.292202][    T9] usb 1-1: Using ep0 maxpacket: 16
[  363.301609][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.336770][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  363.397950][    T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  363.418098][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.439062][    T9] usb 1-1: config 0 descriptor??
[  363.872836][    T9] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  364.489654][ T9455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1176'.
[  364.509050][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1176'.
[  365.637569][    T9] usb 1-1: USB disconnect, device number 28
[  368.232741][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  368.422455][    T9] usb 1-1: Using ep0 maxpacket: 16
[  368.531071][    T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.745347][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  368.872613][    T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  368.881704][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.960622][    T9] usb 1-1: config 0 descriptor??
[  369.401263][    T9] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  370.459507][ T5850] usb 1-1: USB disconnect, device number 29
[  371.549855][ T9615] o2hb: Heartbeat mode set to global
[  371.551867][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  371.551928][   T27] audit: type=1800 audit(1786921833.141:24): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1244" name="mode" dev="configfs" ino=31019 res=0 errno=0
[  371.968607][   T27] audit: type=1800 audit(1786921833.561:25): pid=9629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1251" name="bmaControls" dev="configfs" ino=31087 res=0 errno=0
[  372.402909][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'.
[  374.755894][ T9677] fuse: Bad value for 'group_id'
[  375.123573][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'.
[  375.389816][ T9697] fuse: Bad value for 'group_id'
[  377.799623][ T9706] overlayfs: missing 'lowerdir'
[  378.615632][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  378.626393][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  379.718443][ T9725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'.
[  387.308843][ T9827] MTD: Couldn't look up './dev/mtdblock0': -2
[  388.108028][ T9831] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  390.175810][ T9852] random: crng reseeded on system resumption
[  390.293345][ T9848] xt_TCPMSS: Only works on TCP SYN packets
[  390.359743][ T9857] 9pnet_virtio: no channels available for device ./proc
[  395.923748][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1372'.
[  395.933427][ T9933] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1372'.
[  397.614171][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'.
[  400.090951][T10004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.192670][T10015] MTD: Couldn't look up './dev/mtdblock0': -2
[  400.333161][T10004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.553695][T10004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.874974][T10004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.095945][T10004] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.140814][T10004] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.169492][T10004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.195059][T10004] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.369186][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  405.389142][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  405.429331][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  405.465078][T10073] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1428'.
[  405.552813][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'.
[  406.725724][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'.
[  408.535168][T10133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1448'.
[  409.408654][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'.
[  409.418212][T10145] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1451'.
[  410.400025][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'.
[  410.633234][T10178] UBIFS error (pid: 10178): cannot open "ubi0", error -19
[  410.659785][T10184] fuse: Bad value for 'fd'
[  411.607647][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'.
[  411.919569][T10216] fuse: Bad value for 'fd'
[  412.051251][   T27] audit: type=1326 audit(1786921873.632:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.101192][   T27] audit: type=1326 audit(1786921873.632:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.159512][   T27] audit: type=1326 audit(1786921873.672:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.213597][   T27] audit: type=1326 audit(1786921873.672:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.269191][   T27] audit: type=1326 audit(1786921873.672:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.324537][   T27] audit: type=1326 audit(1786921873.672:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.432867][   T27] audit: type=1326 audit(1786921873.672:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.462499][   T27] audit: type=1326 audit(1786921873.672:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.520685][   T27] audit: type=1326 audit(1786921873.672:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7afc35e90e code=0x7ffc0000
[  412.560423][   T27] audit: type=1326 audit(1786921873.672:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10219 comm="syz.3.1480" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afc39e0d9 code=0x7ffc0000
[  412.811170][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1485'.
[  413.030064][T10238] fuse: Bad value for 'fd'
[  413.701173][ T5851] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  413.884317][ T5851] usb 1-1: unable to get BOS descriptor or descriptor too short
[  413.898802][ T5851] usb 1-1: not running at top speed; connect to a high speed hub
[  413.923096][ T5851] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  413.943155][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.967451][ T5851] usb 1-1: Product: syz
[  413.990186][ T5851] usb 1-1: Manufacturer: syz
[  414.001134][ T5851] usb 1-1: SerialNumber: syz
[  414.384525][ T5851] usb 1-1: 1:1: cannot set freq 44100 to ep 0x1
[  414.411500][ T5851] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  414.429827][T10259] ip6gretap0: entered promiscuous mode
[  414.509558][ T5851] usb 1-1: USB disconnect, device number 30
[  414.619739][T10267] udevd[10267]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[  414.757254][T10274] fuse: Bad value for 'fd'
[  415.508279][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1506'.
[  416.073481][T10311] fuse: Bad value for 'fd'
[  418.472338][T10344] fuse: Invalid rootmode
[  419.927627][T10379] fuse: Invalid rootmode
[  422.313718][T10409] fuse: Invalid rootmode
[  429.097045][T10519] batadv_slave_0: entered promiscuous mode
[  429.129191][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  429.156119][T10519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  429.985518][T10519] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.191615][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1577'.
[  440.199136][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.205474][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  441.331711][T10664] jffs2: notice: (10664) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  444.535208][T10718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1641'.
[  445.271676][T10748] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1654'.
[  447.361365][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1666'.
[  449.657651][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'.
[  449.666878][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'.
[  449.967409][T10806] fuse: Unknown parameter 'user_id00000000000000000000'
[  451.129420][T10833] fuse: Bad value for 'fd'
[  452.372797][T10863] fuse: Bad value for 'fd'
[  453.069728][T10881] autofs4:pid:10881:autofs_fill_super: called with bogus options
[  453.152332][T10882] vlan2: entered allmulticast mode
[  453.157535][T10882] bond0: entered allmulticast mode
[  453.162706][T10882] bond_slave_0: entered allmulticast mode
[  453.168513][T10882] bond_slave_1: entered allmulticast mode
[  455.266842][T10893] fuse: Bad value for 'fd'
[  457.055215][T10920] fuse: Unknown parameter '0x0000000000000005'
[  458.038731][ T5851] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  458.340326][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  458.354438][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.374605][ T5851] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  458.407670][ T5851] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  458.420539][T10943] fuse: Unknown parameter '0x0000000000000005'
[  458.438618][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.478885][ T5851] usb 1-1: config 0 descriptor??
[  459.937323][T10969] fuse: Unknown parameter '0x0000000000000005'
[  460.950578][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'.
[  460.961499][T10983] overlayfs: failed to clone lowerpath
[  460.972067][  T172] usb 1-1: USB disconnect, device number 31
[  461.300642][T10995] fuse: Unknown parameter '0x0000000000000005'
[  462.402374][T11016] fuse: Unknown parameter '0x0000000000000005'
[  462.887401][T11040] fuse: Unknown parameter '0x0000000000000005'
[  463.057444][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'.
[  464.695779][T11063] fuse: Unknown parameter 'fd0x0000000000000005'
[  466.402493][T11092] fuse: Unknown parameter 'fd0x0000000000000005'
[  470.436149][T11137] overlayfs: failed to clone upperpath
[  470.486981][T11138] fuse: Unknown parameter 'fd0x0000000000000005'
[  479.228261][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1846'.
[  481.570634][ T2972] ------------[ cut here ]------------
[  481.576489][ T2972] WARNING: CPU: 0 PID: 2972 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830
[  481.587038][ T2972] Modules linked in:
[  481.590971][ T2972] CPU: 0 PID: 2972 Comm: kworker/u4:9 Not tainted syzkaller #0
[  481.599923][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  481.610704][ T2972] Workqueue: iou_exit io_ring_exit_work
[  481.616295][ T2972] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  481.622726][ T2972] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 91 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 b1 f0 00 f7 e9 b1 fd ff ff e8 a7 f0 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  481.643618][ T2972] RSP: 0018:ffffc9000bf97a40 EFLAGS: 00010293
[  481.650529][ T2972] RAX: ffffffff8a868179 RBX: ffff88802fb3e000 RCX: ffff88802c241e00
[  481.659087][ T2972] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[  481.667768][ T2972] RBP: ffffc9000bf97bb0 R08: ffffc9000bf979c7 R09: 1ffff920017f2f38
[  481.675760][ T2972] R10: dffffc0000000000 R11: fffff520017f2f39 R12: dffffc0000000000
[  481.684310][ T2972] R13: 0000000100004635 R14: 0000000100004638 R15: ffff88802fb3e510
[  481.692706][ T2972] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  481.701697][ T2972] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  481.708318][ T2972] CR2: 0000001b2d823ffc CR3: 0000000060b00000 CR4: 00000000003506f0
[  481.716282][ T2972] Call Trace:
[  481.720169][ T2972]  <TASK>
[  481.723167][ T2972]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  481.729465][ T2972]  ? _raw_spin_unlock_irq+0x23/0x50
[  481.734724][ T2972]  ? process_scheduled_works+0x975/0x1600
[  481.741050][ T2972]  ? process_scheduled_works+0x975/0x1600
[  481.748292][ T2972]  process_scheduled_works+0xa60/0x1600
[  481.753873][ T2972]  ? worker_attach_to_pool+0x370/0x370
[  481.759972][ T2972]  ? assign_work+0x3cc/0x5d0
[  481.764593][ T2972]  worker_thread+0xa5e/0xfe0
[  481.769619][ T2972]  ? _raw_spin_unlock+0x40/0x40
[  481.774485][ T2972]  ? __kthread_parkme+0x71/0x1c0
[  481.779973][ T2972]  kthread+0x2fa/0x390
[  481.784061][ T2972]  ? pr_cont_work+0x550/0x550
[  481.789200][ T2972]  ? kthread_blkcg+0xd0/0xd0
[  481.793787][ T2972]  ret_from_fork+0x48/0x80
[  481.798771][ T2972]  ? kthread_blkcg+0xd0/0xd0
[  481.803374][ T2972]  ret_from_fork_asm+0x11/0x20
[  481.808918][ T2972]  </TASK>
[  481.811949][ T2972] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  481.819222][ T2972] CPU: 0 PID: 2972 Comm: kworker/u4:9 Not tainted syzkaller #0
[  481.826776][ T2972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  481.836817][ T2972] Workqueue: iou_exit io_ring_exit_work
[  481.842353][ T2972] Call Trace:
[  481.845626][ T2972]  <TASK>
[  481.848557][ T2972]  dump_stack_lvl+0x18c/0x250
[  481.853232][ T2972]  ? show_regs_print_info+0x20/0x20
[  481.858417][ T2972]  ? load_image+0x420/0x420
[  481.862929][ T2972]  panic+0x2ca/0x720
[  481.866825][ T2972]  ? bpf_jit_dump+0xd0/0xd0
[  481.871357][ T2972]  ? ret_from_fork_asm+0x11/0x20
[  481.876391][ T2972]  __warn+0x2e0/0x470
[  481.880363][ T2972]  ? io_ring_exit_work+0x3b9/0x830
[  481.885464][ T2972]  ? io_ring_exit_work+0x3b9/0x830
[  481.890573][ T2972]  report_bug+0x2be/0x4f0
[  481.894945][ T2972]  ? io_ring_exit_work+0x3b9/0x830
[  481.900046][ T2972]  ? io_ring_exit_work+0x3b9/0x830
[  481.905155][ T2972]  ? io_ring_exit_work+0x3bb/0x830
[  481.910254][ T2972]  handle_bug+0xcf/0x120
[  481.914576][ T2972]  exc_invalid_op+0x1a/0x50
[  481.919076][ T2972]  asm_exc_invalid_op+0x1a/0x20
[  481.923971][ T2972] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  481.929685][ T2972] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 91 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 b1 f0 00 f7 e9 b1 fd ff ff e8 a7 f0 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  481.949282][ T2972] RSP: 0018:ffffc9000bf97a40 EFLAGS: 00010293
[  481.955338][ T2972] RAX: ffffffff8a868179 RBX: ffff88802fb3e000 RCX: ffff88802c241e00
[  481.963301][ T2972] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000
[  481.971263][ T2972] RBP: ffffc9000bf97bb0 R08: ffffc9000bf979c7 R09: 1ffff920017f2f38
[  481.979224][ T2972] R10: dffffc0000000000 R11: fffff520017f2f39 R12: dffffc0000000000
[  481.987196][ T2972] R13: 0000000100004635 R14: 0000000100004638 R15: ffff88802fb3e510
[  481.995166][ T2972]  ? io_ring_exit_work+0x3b9/0x830
[  482.000286][ T2972]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  482.006105][ T2972]  ? _raw_spin_unlock_irq+0x23/0x50
[  482.011297][ T2972]  ? process_scheduled_works+0x975/0x1600
[  482.017013][ T2972]  ? process_scheduled_works+0x975/0x1600
[  482.022730][ T2972]  process_scheduled_works+0xa60/0x1600
[  482.028283][ T2972]  ? worker_attach_to_pool+0x370/0x370
[  482.033736][ T2972]  ? assign_work+0x3cc/0x5d0
[  482.038356][ T2972]  worker_thread+0xa5e/0xfe0
[  482.042950][ T2972]  ? _raw_spin_unlock+0x40/0x40
[  482.047793][ T2972]  ? __kthread_parkme+0x71/0x1c0
[  482.052725][ T2972]  kthread+0x2fa/0x390
[  482.056790][ T2972]  ? pr_cont_work+0x550/0x550
[  482.061466][ T2972]  ? kthread_blkcg+0xd0/0xd0
[  482.066044][ T2972]  ret_from_fork+0x48/0x80
[  482.070456][ T2972]  ? kthread_blkcg+0xd0/0xd0
[  482.075036][ T2972]  ret_from_fork_asm+0x11/0x20
[  482.079804][ T2972]  </TASK>
[  482.083050][ T2972] Kernel Offset: disabled
[  482.087465][ T2972] Rebooting in 86400 seconds..