last executing test programs:

14m1.842931444s ago: executing program 0 (id=218):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x20, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'Eo'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xf2d4}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x3}})
syz_usb_control_io(r0, 0x0, 0x0)

13m57.92437479s ago: executing program 0 (id=224):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0}}, 0x8040)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@dioread_nolock}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0x4000000007}}, {@dont_appraise}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"})

13m56.031526601s ago: executing program 0 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x95, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

13m52.898428742s ago: executing program 0 (id=228):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

13m49.936025136s ago: executing program 0 (id=234):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup(r0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x9cfa, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x416d)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001d00010028bd7000cddbdf2507000000", @ANYRES32=r5, @ANYBLOB="800002080a004100ffffff1100"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_procfs(r1, &(0x7f00000000c0)='net/sockstat\x00')
preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000320400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="001f00"], 0x48}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x40884)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'})

13m49.168600021s ago: executing program 0 (id=237):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x4, "84bd00a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x33, 0x4, "fc627dac"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000d40)={0x20, 0x31, 0x4, "f7c53323"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000001240)={0x0, 0x17, 0x4, "d92d923d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m48.731114945s ago: executing program 32 (id=237):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000140)={0x40, 0x15, 0x4, "84bd00a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000340)={0x40, 0x33, 0x4, "fc627dac"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000f80)={0x44, &(0x7f0000000d40)={0x20, 0x31, 0x4, "f7c53323"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000001240)={0x0, 0x17, 0x4, "d92d923d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

13m33.276949122s ago: executing program 3 (id=265):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup(r0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x9cfa, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x416d)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001d00010028bd7000cddbdf2507000000", @ANYRES32=r5, @ANYBLOB="800002080a004100ffffff1100"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f00000000c0)='net/sockstat\x00')
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000320400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="001f00"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x48}}, 0x40884)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'})

13m31.990239173s ago: executing program 3 (id=267):
syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, &(0x7f0000044000))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002180)={'raw\x00', 0x2, [{}, {}]}, 0x48)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
ftruncate(0xffffffffffffffff, 0x2000009)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004)

13m30.878424359s ago: executing program 3 (id=269):
r0 = epoll_create1(0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200)=0x1, 0x4)
eventfd(0xfffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000180)={[{0x0, 0x1, 0x7, 0xa0, 0x78, 0x3, 0x8, 0x8, 0xf4, 0x8, 0x5, 0x5, 0x4}, {0x1, 0x1, 0xb3, 0x4, 0x8, 0x60, 0x8, 0x8, 0x5, 0x1, 0x0, 0x1, 0x4}, {0x7, 0x800, 0x7, 0xc, 0x5, 0x6, 0xa9, 0x4, 0x3, 0x4, 0x1, 0x3, 0xa}], 0x4})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000000c0)={0xa000000a})
read$FUSE(r4, &(0x7f0000001a00)={0x2020}, 0x2020)
ppoll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)

13m30.568760679s ago: executing program 3 (id=271):
r0 = socket(0x10, 0x80003, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

13m30.373300025s ago: executing program 3 (id=273):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @local, 0x5}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = dup2(r3, r3)
sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890)

13m29.002657729s ago: executing program 3 (id=275):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x100000002, 0x62e98896, 0x1, 0x9, 0x5}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x9})
ioctl$KVM_NMI(r2, 0xae9a)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
io_setup(0x1, &(0x7f00000003c0))
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./bus\x00', 0x14040, &(0x7f0000000700)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}], [{@smackfshat}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2920844, &(0x7f0000000100)=ANY=[@ANYBLOB='tots,allow_utime=00000000000000000000020,usefree,gid=', @ANYRES16, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESOCT], 0x1, 0x249, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000100))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x80004, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000)

13m13.940042598s ago: executing program 33 (id=275):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x100000002, 0x62e98896, 0x1, 0x9, 0x5}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x9})
ioctl$KVM_NMI(r2, 0xae9a)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
io_setup(0x1, &(0x7f00000003c0))
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./bus\x00', 0x14040, &(0x7f0000000700)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}], [{@smackfshat}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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")
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2920844, &(0x7f0000000100)=ANY=[@ANYBLOB='tots,allow_utime=00000000000000000000020,usefree,gid=', @ANYRES16, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESOCT], 0x1, 0x249, &(0x7f0000000780)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, &(0x7f0000000100))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x80004, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000)

3m52.6642068s ago: executing program 1 (id=1493):
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000240)={[{@uquota}, {@usrquota}, {@usrquota}]}, 0x1, 0xb9c8, &(0x7f000000cc40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3300051, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3m49.7999809s ago: executing program 1 (id=1500):
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x5)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0xe30, 0x0, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x41}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = dup(0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_setup_queues(r7, r6, &(0x7f00000006c0)={0x0, 0xe948, 0x1, 0x20003, 0x260, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4295, 0x2000, 0x1000002, 0x10000002}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x1, 0x0, 0x106, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a38, 0x1820, 0x0, 0xfffffffc, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0)

3m47.429410488s ago: executing program 1 (id=1503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)

3m47.116364632s ago: executing program 1 (id=1504):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
getpeername$l2tp(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, 0x0], 0x2, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

3m46.615370155s ago: executing program 1 (id=1506):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m46.464402852s ago: executing program 1 (id=1507):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
unshare(0x27010100)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x19980330}, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000010000000040000000000000008a86c74b4aff71c7aea92c4e59caa3db727b808477797daf4f731362bd48de99365f729dfac3b45728a143d9ff3f000000c81573d885102389dd38dbf6decd368d5a75481cadb11d2f3203b1aea97cf614596c31b25c6a0c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x7, 0x55)
recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)

3m31.12671775s ago: executing program 34 (id=1507):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
unshare(0x27010100)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000000)={0x19980330}, 0x0)
ioctl$TIOCGSOFTCAR(r2, 0x4b46, &(0x7f0000000140))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000010000000040000000000000008a86c74b4aff71c7aea92c4e59caa3db727b808477797daf4f731362bd48de99365f729dfac3b45728a143d9ff3f000000c81573d885102389dd38dbf6decd368d5a75481cadb11d2f3203b1aea97cf614596c31b25c6a0c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x7, 0x55)
recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0)

14.192174313s ago: executing program 4 (id=2013):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102110109021b0001000010000904590201801e2a"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="001354"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

11.662298944s ago: executing program 2 (id=2023):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0)
timer_create(0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bdf462395362d3bdf70000", @ANYRES32=0x0, @ANYBLOB="001004000100000008001b"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080)

10.502324582s ago: executing program 4 (id=2025):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)

9.385188588s ago: executing program 4 (id=2028):
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
syz_open_procfs(0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8280, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000010000100000000000000005d6400000a3000010000000000000000020000080900010073797a3000000000090003007300000000000000000500000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000039000100fafb070004000000010000000900ec0002412b2f00000000c7c204f64f6a48f81b59eecd14b445ce866e8add1ab4b137f9d9f0b1bc763f9c71dfcc1754adecf78c4489c793b57f9cf8038c1a0b19135f854a25f1620864d13c08f0fca97b72d7844b12175ce11160"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8041)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020021d20f0c0ba0742f0d96568f000001000000f9ffffffffffffff00"], 0x24, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x894, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x80, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x6, 0xec, 0x88, 0x3b, 0x8, 0x7fff, 0x4, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x8, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0xfffffffd, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x1, 0x9, 0x0, 0x10000, 0x2, 0x0, 0x48, 0xf0, 0x1c3, 0xac20, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x3, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x4, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x4, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0x78, 0x8, 0x1, 0x200, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0x7, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0xf83f, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x3, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x4, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x8, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x7, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x8c, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x2, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x10000000, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x7fffffff, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0x9, 0xffffffff, 0x10002, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0xb4, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x1, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x3, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2c000000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa5f, 0xffffffffffffffff, 0x7, 0x5e0aede4, 0x4, {0x4, 0x0, 0x4, 0x4, 0x2, 0xc3}, {0x4, 0x1, 0x200, 0x40, 0xfffc, 0x7}, 0x1, 0x4, 0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)

7.186312879s ago: executing program 6 (id=2033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800)

6.552468019s ago: executing program 6 (id=2035):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
getpeername$l2tp(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, 0x0], 0x2, 0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5.657724828s ago: executing program 6 (id=2037):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x8c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

5.448344695s ago: executing program 5 (id=2038):
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084)
socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x5)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x1, 0xe30, 0x0, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x41}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_setup_queues(r7, r5, &(0x7f00000006c0)={0x0, 0xe948, 0x1, 0x20003, 0x260, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4295, 0x2000, 0x1000002, 0x10000002}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x1, 0x0, 0x106, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a38, 0x1820, 0x0, 0xfffffffc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x4, 0x4, 0x0, 0x0}}, 0x0)

4.542254294s ago: executing program 5 (id=2039):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
write$tun(r0, 0x0, 0x62)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040)

4.448135717s ago: executing program 5 (id=2040):
openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close(0xffffffffffffffff)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r3=>0x0], &(0x7f0000000180)=[<r4=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r3, r4], 0x2})

3.40367661s ago: executing program 5 (id=2041):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000862000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4000000003, 0x0, 0x2, 0xa}}, 0x20)
pipe(&(0x7f0000000240))

3.11051994s ago: executing program 4 (id=2042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendto(r3, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21d", 0x4f, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
epoll_create1(0x80000)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.476449431s ago: executing program 6 (id=2043):
syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
flistxattr(r0, 0x0, 0x0)

2.459117421s ago: executing program 2 (id=2044):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
shutdown(r0, 0x1)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r0)
sendto(r2, &(0x7f0000000580), 0x0, 0x1, 0x0, 0x0)

2.354446004s ago: executing program 5 (id=2045):
socket$packet(0x11, 0x3, 0x300)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x2, 0x9, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.450205173s ago: executing program 4 (id=2046):
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)

1.439880534s ago: executing program 2 (id=2047):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x53, 0x20040000)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

1.356335647s ago: executing program 6 (id=2048):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0)
write$tun(r0, 0x0, 0x62)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x4c040)

1.25132767s ago: executing program 2 (id=2049):
socket$nl_generic(0x10, 0x3, 0x10)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000010046)

1.192638582s ago: executing program 4 (id=2050):
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
syz_open_procfs(0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8280, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000010000100000000000000005d6400000a3000010000000000000000020000080900010073797a3000000000090003007300000000000000000500000a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xffc}, 0x2d, 0xfffffffffffffffa)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000039000100fafb070004000000010000000900ec0002412b2f00000000c7c204f64f6a48f81b59eecd14b445ce866e8add1ab4b137f9d9f0b1bc763f9c71dfcc1754adecf78c4489c793b57f9cf8038c1a0b19135f854a25f1620864d13c08f0fca97b72d7844b12175ce11160"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8041)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020021d20f0c0ba0742f0d96568f000001000000f9ffffffffffffff00"], 0x24, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x894, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0x0, 0x7, 0x1, 0x8, 0x2, 0x9, 0x8, 0x4, 0x4, 0x80, 0x7, 0x6, 0x4, 0x7, 0x6000000, 0x6, 0x1, 0x2, 0x8, 0x1, 0x2d7f, 0xffff12a3, 0x3, 0xffffffff, 0xe000, 0x5, 0x3ff, 0x0, 0x1e5, 0x0, 0xd6, 0x3, 0x5, 0x6, 0xb, 0x10, 0x8001, 0x10, 0xdc, 0x0, 0x401, 0x0, 0x3, 0x4be4e83a, 0x6, 0xec, 0x88, 0x3b, 0x8, 0x7fff, 0x4, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x3, 0x9, 0x5, 0x9, 0x8, 0x10001, 0xfffff948, 0x43b5, 0x9, 0x101, 0x0, 0x9841, 0x5, 0xfffffffd, 0x7, 0xf, 0x401, 0x2, 0xfff, 0x6, 0x7, 0x0, 0x22, 0x67d0, 0x6, 0x2, 0x1, 0x9, 0x0, 0x10000, 0x2, 0x0, 0x48, 0xf0, 0x1c3, 0xac20, 0x0, 0x5, 0xd, 0x5, 0xc0, 0x100, 0x0, 0x40, 0x9, 0x957, 0x0, 0x7, 0x3, 0x5, 0x0, 0x80000000, 0xfffffff4, 0x1ff, 0x0, 0x8, 0x6, 0x2, 0x1, 0x400, 0xfffffffe, 0x2, 0x5, 0x231f7c56, 0x6, 0x6, 0x3, 0x3, 0x4, 0x4cb1, 0x3, 0xfffffff7, 0x9, 0x7, 0xfffffffc, 0x20000000, 0xd, 0xb95, 0x80000000, 0xc6, 0x7, 0xce, 0x8, 0x7, 0xa141, 0x6, 0xdd2, 0xe05, 0x3, 0xfffffffa, 0x10b39f1b, 0x4, 0x1d8d, 0x38e8, 0xffff7fff, 0xfffffff4, 0xfffffffc, 0x1, 0x9, 0x8, 0x3e5, 0xffffffff, 0x78, 0x8, 0x1, 0x200, 0x2, 0x1c00, 0xa416, 0x2, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xfffffff8, 0x40, 0x856, 0x6, 0x7, 0x3, 0xfffffff7, 0x6, 0x1ff, 0x9, 0x200, 0x1, 0x9, 0x8, 0x7, 0xfffffffc, 0x51, 0x2, 0x9, 0x6, 0x1, 0x401, 0x3, 0xf, 0x7, 0x5, 0x80000001, 0x8, 0x4, 0x11bca77f, 0x7ff, 0x1000, 0x3, 0x800, 0x2, 0x10, 0x1, 0xf83f, 0x0, 0x3, 0x5, 0x4, 0x2, 0x5, 0xd, 0xad, 0x3, 0x2, 0x9, 0xffffffff, 0x4b6, 0xaf88, 0x9, 0x2, 0x6, 0x3, 0x3, 0x8, 0x9, 0x10001, 0xac7, 0x7f, 0x1, 0x7, 0x1, 0xffff, 0x1000, 0x4, 0x9, 0x7fffffff, 0x606, 0x9, 0x81, 0x2, 0x4, 0x6, 0x4, 0x0, 0x2299, 0x2, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x8, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x7, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87fc, 0xfff, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x0, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x2, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x8c, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x2, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x10000000, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x7fffffff, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x3, 0x4, 0x7, 0x7f, 0x5, 0x4, 0x9, 0xffffffff, 0x10002, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0xb4, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x1, 0xc, 0x6, 0x9982, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x3, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2c000000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xa5f, 0xffffffffffffffff, 0x7, 0x5e0aede4, 0x4, {0x4, 0x0, 0x4, 0x4, 0x2, 0xc3}, {0x4, 0x1, 0x200, 0x40, 0xfffc, 0x7}, 0x1, 0x4, 0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)

1.124161364s ago: executing program 6 (id=2051):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
mount$9p_virtio(0x0, 0x0, &(0x7f0000000280), 0x8800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2)
pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x21fffffe)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

223.131413ms ago: executing program 2 (id=2052):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090)
socket$nl_netfilter(0x10, 0x3, 0xc)

37.877359ms ago: executing program 5 (id=2053):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000862000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4000000003, 0x0, 0x2, 0xa}}, 0x20)
pipe(&(0x7f0000000240))

0s ago: executing program 2 (id=2054):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

kernel console output (not intermixed with test programs):

.766153][ T7733] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  728.967951][ T7733] usb 3-1: Using ep0 maxpacket: 32
[  728.989236][ T7733] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  729.037036][ T7733] usb 3-1: config 0 has no interface number 0
[  729.066020][ T7733] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  729.113009][ T7733] usb 3-1: config 0 interface 89 has no altsetting 0
[  729.142209][ T7733] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  729.164230][ T7733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  729.192371][ T7733] usb 3-1: Product: syz
[  729.296881][ T7733] usb 3-1: Manufacturer: syz
[  729.323124][ T7733] usb 3-1: SerialNumber: syz
[  729.344318][ T7733] usb 3-1: config 0 descriptor??
[  729.369264][ T7733] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  729.399484][ T7733] em28xx 3-1:0.89: Video interface 89 found:
[  729.643183][T10996] binder: BINDER_SET_CONTEXT_MGR already set
[  729.649512][T10996] binder: 10995:10996 ioctl 4018620d 200000001000 returned -16
[  729.982173][ T7733] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  730.213733][T11002] 9pnet_fd: Insufficient options for proto=fd
[  731.602614][ T7733] em28xx 3-1:0.89: writing to i2c device at 0xa0 failed (error=-5)
[  731.619553][ T7733] em28xx 3-1:0.89: failed to read eeprom (err=-5)
[  731.626691][ T7733] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  731.709721][ T7733] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  731.738805][ T7733] em28xx 3-1:0.89: analog set to bulk mode.
[  731.744936][ T7731] em28xx 3-1:0.89: Registering V4L2 extension
[  731.779349][ T7733] usb 3-1: USB disconnect, device number 22
[  731.850592][ T7733] em28xx 3-1:0.89: Disconnecting em28xx
[  731.914163][T11022] binder: BINDER_SET_CONTEXT_MGR already set
[  731.923664][T11022] binder: 11020:11022 ioctl 4018620d 200000001000 returned -16
[  732.106285][ T7731] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  732.144250][ T7731] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  732.190793][ T7731] em28xx 3-1:0.89: No AC97 audio processor
[  732.211417][ T7731] usb 3-1: Decoder not found
[  732.252159][ T7731] em28xx 3-1:0.89: failed to create media graph
[  732.288317][ T7731] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  732.332800][ T7731] em28xx 3-1:0.89: Registering snapshot button...
[  732.473916][ T7731] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input40
[  732.521643][ T7731] em28xx 3-1:0.89: Remote control support is not available for this card.
[  732.563592][ T7733] em28xx 3-1:0.89: Closing input extension
[  732.590435][ T7733] em28xx 3-1:0.89: Deregistering snapshot button
[  732.693421][ T7733] em28xx 3-1:0.89: Freeing device
[  732.730117][ T9762] udevd[9762]: setting mode of /dev/bus/usb/003/022 to 020664 failed: No such file or directory
[  732.781922][ T9762] udevd[9762]: setting owner of /dev/bus/usb/003/022 to uid=0, gid=0 failed: No such file or directory
[  734.428760][T11040] loop5: detected capacity change from 0 to 1024
[  734.437460][ T7733] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  734.439314][T11040] EXT4-fs: Ignoring removed mblk_io_submit option
[  734.605143][T11040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  734.630092][ T7733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.674924][ T7733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  734.710022][T11040] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 3: comm syz.5.1380: lblock 3 mapped to illegal pblock 3 (length 3)
[  734.725263][T11040] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  734.737806][ T7733] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  734.737837][ T7733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.973180][T11040] EXT4-fs (loop5): This should not happen!! Data will be lost
[  734.973180][T11040] 
[  735.137868][T11045] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  735.412215][T11047] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: block 3: comm syz.5.1380: lblock 3 mapped to illegal pblock 3 (length 1)
[  735.628228][ T7733] usb 5-1: config 0 descriptor??
[  735.658217][ T5872] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  735.716699][ T5872] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  735.746043][ T5872] EXT4-fs (loop5): This should not happen!! Data will be lost
[  735.746043][ T5872] 
[  735.808932][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  736.254865][ T7733] usb 5-1: language id specifier not provided by device, defaulting to English
[  736.655699][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  736.666577][ T7733] uclogic 0003:256C:006D.0025: interface is invalid, ignoring
[  736.727691][ T7733] usb 5-1: USB disconnect, device number 20
[  738.388895][ T7733] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  738.576149][ T7733] usb 2-1: Using ep0 maxpacket: 8
[  738.626702][ T7733] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  738.635819][ T7733] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  739.493067][ T7733] usb 2-1: Product: syz
[  739.497685][ T7733] usb 2-1: Manufacturer: syz
[  739.502353][ T7733] usb 2-1: SerialNumber: syz
[  739.509870][ T7733] usb 2-1: config 0 descriptor??
[  739.525521][ T7733] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  740.143710][ T7733] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41
[  740.342608][ T5820] usb 2-1: USB disconnect, device number 31
[  740.608762][T11088] loop2: detected capacity change from 0 to 1024
[  740.631627][T11088] EXT4-fs: Ignoring removed mblk_io_submit option
[  740.693745][T11088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  740.729817][T11088] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 3)
[  740.755761][T11088] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  740.768308][T11088] EXT4-fs (loop2): This should not happen!! Data will be lost
[  740.768308][T11088] 
[  740.806776][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  740.841968][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  740.859430][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  740.904510][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  740.970312][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  741.036843][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  741.064968][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  741.124637][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  741.179580][T11088] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1392: lblock 3 mapped to illegal pblock 3 (length 1)
[  741.308189][T11085] loop4: detected capacity change from 0 to 65536
[  741.421791][T11085] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  741.513294][   T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  741.538992][   T42] EXT4-fs (loop2): This should not happen!! Data will be lost
[  741.538992][   T42] 
[  741.566415][T11085] XFS (loop4): Ending clean mount
[  741.575066][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  741.609858][T11085] XFS (loop4): Quotacheck needed: Please wait.
[  741.774542][T11085] XFS (loop4): Quotacheck: Done.
[  742.665349][T11106] syzkaller0: entered promiscuous mode
[  742.697697][T11106] syzkaller0: entered allmulticast mode
[  742.908125][ T6750] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  745.699059][T11129] loop4: detected capacity change from 0 to 32768
[  745.879340][T11129] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  745.903279][T11129] JBD2: Ignoring recovery information on journal
[  746.092452][T11129] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  746.255650][ T6750] ocfs2: Unmounting device (7,4) on (node local)
[  746.556809][T11137] binder: 11136:11137 ioctl c0306201 0 returned -14
[  747.295490][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  747.303026][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  747.467648][T11139] loop4: detected capacity change from 0 to 256
[  747.561065][T11139] FAT-fs (loop4): Directory bread(block 64) failed
[  747.568024][T11139] FAT-fs (loop4): Directory bread(block 65) failed
[  747.574927][T11139] FAT-fs (loop4): Directory bread(block 66) failed
[  747.583493][T11139] FAT-fs (loop4): Directory bread(block 67) failed
[  747.599721][T11139] FAT-fs (loop4): Directory bread(block 68) failed
[  747.611401][T11139] FAT-fs (loop4): Directory bread(block 69) failed
[  747.619911][T11139] FAT-fs (loop4): Directory bread(block 70) failed
[  747.627163][T11139] FAT-fs (loop4): Directory bread(block 71) failed
[  747.647708][T11139] FAT-fs (loop4): Directory bread(block 72) failed
[  747.667474][T11139] FAT-fs (loop4): Directory bread(block 73) failed
[  748.959738][ T7731] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  749.171861][ T7731] usb 3-1: Using ep0 maxpacket: 32
[  749.200100][ T7731] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  749.208665][ T7731] usb 3-1: config 0 has no interface number 0
[  749.217834][ T7731] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  749.227162][ T7731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.235230][ T7731] usb 3-1: Product: syz
[  749.239742][ T7731] usb 3-1: Manufacturer: syz
[  749.245401][ T7731] usb 3-1: SerialNumber: syz
[  749.252836][ T7731] usb 3-1: config 0 descriptor??
[  749.262093][ T7731] smsc95xx v2.0.0
[  749.715367][ T7731] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  749.727942][ T7731] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  751.964606][ T7731] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  751.990008][ T7731] smsc95xx: probe of 3-1:0.67 failed with error -71
[  752.003364][T11164] binder: 11163:11164 ioctl c0306201 0 returned -14
[  752.014031][ T7731] usb 3-1: USB disconnect, device number 23
[  752.406476][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  754.728871][T11181] syzkaller0: entered promiscuous mode
[  754.734447][T11181] syzkaller0: entered allmulticast mode
[  756.134366][T11192] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1420'.
[  758.346053][ T5767] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  758.545935][ T5767] usb 2-1: Using ep0 maxpacket: 32
[  758.564941][ T5767] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  758.573522][ T5767] usb 2-1: config 0 has no interface number 0
[  758.585921][ T5767] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  758.603930][ T5767] usb 2-1: config 0 interface 89 has no altsetting 0
[  758.628619][ T5767] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  758.638200][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  758.655995][ T5767] usb 2-1: Product: syz
[  758.660299][ T5767] usb 2-1: Manufacturer: syz
[  758.670923][ T5767] usb 2-1: SerialNumber: syz
[  758.691771][ T5767] usb 2-1: config 0 descriptor??
[  758.709889][ T5767] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  758.735906][ T5767] em28xx 2-1:0.89: Video interface 89 found:
[  759.350354][ T5767] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  759.979644][ T5767] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  760.004787][ T5767] em28xx 2-1:0.89: board has no eeprom
[  760.102267][ T5767] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  760.125425][ T5767] em28xx 2-1:0.89: analog set to bulk mode.
[  760.133788][ T5820] em28xx 2-1:0.89: Registering V4L2 extension
[  760.144931][ T5767] usb 2-1: USB disconnect, device number 32
[  760.156903][ T5767] em28xx 2-1:0.89: Disconnecting em28xx
[  760.229606][ T5820] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  760.239678][ T5820] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  760.249959][ T5820] em28xx 2-1:0.89: No AC97 audio processor
[  760.258106][ T5820] usb 2-1: Decoder not found
[  760.262957][ T5820] em28xx 2-1:0.89: failed to create media graph
[  760.269770][ T5820] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  760.283681][ T5820] em28xx 2-1:0.89: Registering snapshot button...
[  760.308080][ T5820] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input42
[  760.333618][ T5820] em28xx 2-1:0.89: Remote control support is not available for this card.
[  760.344877][ T5767] em28xx 2-1:0.89: Closing input extension
[  760.350834][ T5767] em28xx 2-1:0.89: Deregistering snapshot button
[  760.400098][ T5767] em28xx 2-1:0.89: Freeing device
[  760.447515][ T5819] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  760.855807][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  760.863406][ T5819] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  760.873248][ T5819] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  760.882297][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  760.892046][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  760.903812][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  760.913953][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  760.942177][ T5819] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  760.952101][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.964430][ T5819] usb 3-1: config 0 descriptor??
[  761.550725][ T5819] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  761.623179][ T5819] usb 3-1: USB disconnect, device number 24
[  761.660507][ T5819] usblp0: removed
[  762.070646][ T5819] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  762.276110][ T5819] usb 3-1: Using ep0 maxpacket: 32
[  762.283416][ T5819] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  762.295911][ T5819] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  762.304609][ T5819] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  762.346250][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  762.385924][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  762.410331][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  762.464354][ T5819] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  762.531781][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.577182][ T5819] usb 3-1: config 0 descriptor??
[  762.700077][T11209] loop4: detected capacity change from 0 to 256
[  762.811643][T11209] FAT-fs (loop4): Directory bread(block 64) failed
[  762.865498][T11209] FAT-fs (loop4): Directory bread(block 65) failed
[  762.880319][ T5819] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  762.906038][T11209] FAT-fs (loop4): Directory bread(block 66) failed
[  762.946306][T11209] FAT-fs (loop4): Directory bread(block 67) failed
[  762.953021][T11209] FAT-fs (loop4): Directory bread(block 68) failed
[  763.016137][T11209] FAT-fs (loop4): Directory bread(block 69) failed
[  763.064732][T11209] FAT-fs (loop4): Directory bread(block 70) failed
[  763.092826][T11209] FAT-fs (loop4): Directory bread(block 71) failed
[  763.166115][T11209] FAT-fs (loop4): Directory bread(block 72) failed
[  763.175272][T11209] FAT-fs (loop4): Directory bread(block 73) failed
[  764.406621][T11219] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1429'.
[  764.514636][T11216] usblp0:failed reading printer status (-32)
[  764.728272][ T5819] usb 3-1: USB disconnect, device number 25
[  764.806886][ T5819] usblp0: removed
[  766.071129][T11237] syzkaller0: entered promiscuous mode
[  766.077988][T11237] syzkaller0: entered allmulticast mode
[  766.112905][ T7733] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  766.320198][ T7733] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  766.336006][ T7733] usb 5-1: config 0 has no interface number 0
[  766.360148][ T7733] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  766.396029][ T7733] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  766.433465][ T7733] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  766.442984][ T7733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.475473][ T7733] usb 5-1: Product: syz
[  766.479890][ T7733] usb 5-1: Manufacturer: syz
[  766.484544][ T7733] usb 5-1: SerialNumber: syz
[  766.518693][ T7733] usb 5-1: config 0 descriptor??
[  766.525484][T11229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  766.559850][ T7733] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  766.603050][ T7733] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  766.986659][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.995617][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.028383][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.059643][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.088604][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.111327][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.139681][T11229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.166948][T11229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.226349][ T5819] usb 5-1: USB disconnect, device number 21
[  767.255775][ T5819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  767.309521][ T5819] cyberjack 5-1:0.69: device disconnected
[  770.555475][T11255] loop4: detected capacity change from 0 to 256
[  770.719377][T11255] FAT-fs (loop4): Directory bread(block 64) failed
[  770.736333][T11255] FAT-fs (loop4): Directory bread(block 65) failed
[  770.743058][T11255] FAT-fs (loop4): Directory bread(block 66) failed
[  770.761136][T11255] FAT-fs (loop4): Directory bread(block 67) failed
[  770.771355][T11255] FAT-fs (loop4): Directory bread(block 68) failed
[  770.796139][T11255] FAT-fs (loop4): Directory bread(block 69) failed
[  770.802871][T11255] FAT-fs (loop4): Directory bread(block 70) failed
[  770.838620][T11255] FAT-fs (loop4): Directory bread(block 71) failed
[  770.856299][T11255] FAT-fs (loop4): Directory bread(block 72) failed
[  770.871025][T11255] FAT-fs (loop4): Directory bread(block 73) failed
[  772.210962][T11262] loop5: detected capacity change from 0 to 512
[  772.320122][T11262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  772.402462][T11268] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1441'.
[  772.724634][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.184890][ T7733] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  774.061687][ T7733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  774.075240][ T7733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  774.091324][ T7733] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  774.103537][ T7733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.118993][ T7733] usb 6-1: config 0 descriptor??
[  774.763007][ T7733] usb 6-1: language id specifier not provided by device, defaulting to English
[  774.963076][ T7733] uclogic 0003:256C:006D.0026: failed retrieving Huion firmware version: -71
[  774.986795][ T7733] uclogic 0003:256C:006D.0026: failed probing parameters: -71
[  774.994448][ T7733] uclogic: probe of 0003:256C:006D.0026 failed with error -71
[  775.011374][ T7733] usb 6-1: USB disconnect, device number 15
[  778.640084][T11298] loop4: detected capacity change from 0 to 256
[  778.932562][T11298] FAT-fs (loop4): Directory bread(block 64) failed
[  779.028868][T11298] FAT-fs (loop4): Directory bread(block 65) failed
[  779.183198][T11298] FAT-fs (loop4): Directory bread(block 66) failed
[  779.360246][T11298] FAT-fs (loop4): Directory bread(block 67) failed
[  779.511709][T11298] FAT-fs (loop4): Directory bread(block 68) failed
[  779.688312][T11298] FAT-fs (loop4): Directory bread(block 69) failed
[  779.695020][T11298] FAT-fs (loop4): Directory bread(block 70) failed
[  779.742787][T11298] FAT-fs (loop4): Directory bread(block 71) failed
[  779.776376][T11305] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1451'.
[  779.789300][T11298] FAT-fs (loop4): Directory bread(block 72) failed
[  779.806488][T11298] FAT-fs (loop4): Directory bread(block 73) failed
[  781.906104][ T7733] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  782.349492][ T7733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  782.365890][ T7733] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.396094][ T7733] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  782.427270][ T7733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.471257][ T7733] usb 6-1: config 0 descriptor??
[  785.269420][ T7733] usb 6-1: string descriptor 0 read error: -71
[  785.276547][ T7733] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71
[  785.285437][ T7733] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71
[  785.938495][T11342] loop5: detected capacity change from 0 to 256
[  785.984896][ T7733] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71
[  785.994239][ T7733] uclogic 0003:256C:006D.0027: failed probing parameters: -71
[  786.026043][ T7733] uclogic: probe of 0003:256C:006D.0027 failed with error -71
[  786.055571][ T7733] usb 6-1: USB disconnect, device number 16
[  786.127893][T11342] FAT-fs (loop5): Directory bread(block 64) failed
[  786.166072][T11342] FAT-fs (loop5): Directory bread(block 65) failed
[  786.174162][T11342] FAT-fs (loop5): Directory bread(block 66) failed
[  786.188724][T11342] FAT-fs (loop5): Directory bread(block 67) failed
[  786.195451][T11342] FAT-fs (loop5): Directory bread(block 68) failed
[  786.204994][T11342] FAT-fs (loop5): Directory bread(block 69) failed
[  786.236301][T11342] FAT-fs (loop5): Directory bread(block 70) failed
[  786.253204][T11342] FAT-fs (loop5): Directory bread(block 71) failed
[  786.276439][T11342] FAT-fs (loop5): Directory bread(block 72) failed
[  786.283066][T11342] FAT-fs (loop5): Directory bread(block 73) failed
[  786.984292][T11348] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  788.056597][ T5819] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  788.241225][ T5819] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  788.271448][ T5819] usb 2-1: config 0 has no interface number 0
[  788.289635][ T5819] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  788.313792][ T5819] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  788.344756][ T5819] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  788.363687][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.393558][ T5819] usb 2-1: Product: syz
[  788.422570][ T5819] usb 2-1: Manufacturer: syz
[  788.433307][ T5819] usb 2-1: SerialNumber: syz
[  788.453860][ T5819] usb 2-1: config 0 descriptor??
[  788.485277][T11359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  788.497642][ T5819] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  788.535607][ T5819] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  789.109297][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.234375][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.467630][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.517405][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.548127][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.586650][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.616634][ T5819] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  789.644272][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.683770][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.731505][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.763002][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.804500][ T5767] usb 2-1: USB disconnect, device number 33
[  789.868705][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  789.881584][ T5767] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  789.918887][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  789.930763][ T5767] cyberjack 2-1:0.69: device disconnected
[  789.964269][ T5819] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  790.015328][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.067349][ T5819] usb 3-1: config 0 descriptor??
[  791.147369][ T5819] usb 3-1: language id specifier not provided by device, defaulting to English
[  791.362647][ T5819] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71
[  791.565990][ T5819] uclogic 0003:256C:006D.0028: failed probing parameters: -71
[  791.627718][ T5819] uclogic: probe of 0003:256C:006D.0028 failed with error -71
[  791.681215][ T5819] usb 3-1: USB disconnect, device number 26
[  792.819994][T11385] loop2: detected capacity change from 0 to 256
[  792.889628][T11385] FAT-fs (loop2): Directory bread(block 64) failed
[  792.910405][T11385] FAT-fs (loop2): Directory bread(block 65) failed
[  792.926008][T11385] FAT-fs (loop2): Directory bread(block 66) failed
[  792.932615][T11385] FAT-fs (loop2): Directory bread(block 67) failed
[  792.966458][T11385] FAT-fs (loop2): Directory bread(block 68) failed
[  793.019606][T11385] FAT-fs (loop2): Directory bread(block 69) failed
[  793.053955][T11385] FAT-fs (loop2): Directory bread(block 70) failed
[  793.108293][T11385] FAT-fs (loop2): Directory bread(block 71) failed
[  793.156271][T11385] FAT-fs (loop2): Directory bread(block 72) failed
[  793.188539][T11385] FAT-fs (loop2): Directory bread(block 73) failed
[  794.315356][T11383] loop4: detected capacity change from 0 to 40427
[  794.343210][T11383] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  794.376001][T11383] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  794.400060][T11383] F2FS-fs (loop4): invalid crc value
[  794.417827][T11383] F2FS-fs (loop4): Found nat_bits in checkpoint
[  794.556007][T11383] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  794.563142][T11383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  794.935962][T11395] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  797.134085][ T5782] Bluetooth: hci2: unexpected event for opcode 0x0413
[  797.394201][T11421] loop4: detected capacity change from 0 to 256
[  797.405055][T11420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.434705][T11418] tipc: Disabling bearer <eth:syzkaller0>
[  797.484001][T11421] FAT-fs (loop4): Directory bread(block 64) failed
[  797.503961][T11421] FAT-fs (loop4): Directory bread(block 65) failed
[  797.524303][T11421] FAT-fs (loop4): Directory bread(block 66) failed
[  797.550073][T11421] FAT-fs (loop4): Directory bread(block 67) failed
[  797.566418][T11421] FAT-fs (loop4): Directory bread(block 68) failed
[  797.583291][T11421] FAT-fs (loop4): Directory bread(block 69) failed
[  797.636058][T11421] FAT-fs (loop4): Directory bread(block 70) failed
[  797.653011][T11421] FAT-fs (loop4): Directory bread(block 71) failed
[  797.676411][T11421] FAT-fs (loop4): Directory bread(block 72) failed
[  797.710122][T11421] FAT-fs (loop4): Directory bread(block 73) failed
[  798.269482][T11429] loop5: detected capacity change from 0 to 512
[  798.344117][T11429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  798.611352][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.776603][ T5767] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  798.988911][ T5767] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  799.107563][ T5767] usb 5-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  799.306284][ T5767] usb 5-1: config 0 interface 0 has no altsetting 0
[  799.402740][ T5767] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  799.655232][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.689584][ T5767] usb 5-1: config 0 descriptor??
[  799.706373][T11434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  800.015433][T11430] loop4: detected capacity change from 0 to 1024
[  800.076614][T11430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  800.120823][T11442] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  800.477523][T11452] tipc: Started in network mode
[  800.482583][T11452] tipc: Node identity b6a69c896b97, cluster identity 4711
[  800.492872][T11452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  800.522598][T11451] tipc: Disabling bearer <eth:syzkaller0>
[  800.529390][ T5767] usbhid 5-1:0.0: can't add hid device: -71
[  800.535459][ T5767] usbhid: probe of 5-1:0.0 failed with error -71
[  800.574658][ T5767] usb 5-1: USB disconnect, device number 22
[  801.209146][ T5782] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  801.220019][ T5782] Bluetooth: hci2: Injecting HCI hardware error event
[  801.229948][ T5782] Bluetooth: hci2: hardware error 0x00
[  801.255390][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.604299][T11459] loop4: detected capacity change from 0 to 256
[  801.712610][T11459] FAT-fs (loop4): Directory bread(block 64) failed
[  801.734461][T11459] FAT-fs (loop4): Directory bread(block 65) failed
[  801.759312][T11459] FAT-fs (loop4): Directory bread(block 66) failed
[  801.788533][T11459] FAT-fs (loop4): Directory bread(block 67) failed
[  801.795422][T11459] FAT-fs (loop4): Directory bread(block 68) failed
[  801.841423][T11459] FAT-fs (loop4): Directory bread(block 69) failed
[  801.866156][T11459] FAT-fs (loop4): Directory bread(block 70) failed
[  801.884319][T11459] FAT-fs (loop4): Directory bread(block 71) failed
[  801.913344][T11459] FAT-fs (loop4): Directory bread(block 72) failed
[  801.935149][T11459] FAT-fs (loop4): Directory bread(block 73) failed
[  803.318197][ T5782] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  803.436078][    T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  803.758435][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  804.058278][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  804.492822][    T8] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  804.513469][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.568113][    T8] usb 3-1: config 0 descriptor??
[  805.009711][    T8] usbhid 3-1:0.0: can't add hid device: -71
[  805.027145][    T8] usbhid: probe of 3-1:0.0 failed with error -71
[  805.064151][    T8] usb 3-1: USB disconnect, device number 27
[  805.749040][T11485] binder: BINDER_SET_CONTEXT_MGR already set
[  805.755272][T11485] binder: 11484:11485 ioctl 4018620d 200000001000 returned -16
[  806.111676][T11479] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  808.732283][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  808.739961][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  808.899989][T11507] loop4: detected capacity change from 0 to 256
[  809.313708][T11507] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  809.549899][T11507] FAT-fs (loop4): Filesystem has been set read-only
[  809.812805][T11507] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  809.855063][T11507] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  809.905989][   T27] audit: type=1800 audit(810.234:11): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1511" name="file1" dev="loop4" ino=1048790 res=0 errno=0
[  810.425993][ T5819] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  810.512737][T11521] loop2: detected capacity change from 0 to 256
[  810.541249][T11521] FAT-fs (loop2): Directory bread(block 64) failed
[  810.548399][T11521] FAT-fs (loop2): Directory bread(block 65) failed
[  810.593962][T11521] FAT-fs (loop2): Directory bread(block 66) failed
[  810.624856][T11521] FAT-fs (loop2): Directory bread(block 67) failed
[  810.652984][T11521] FAT-fs (loop2): Directory bread(block 68) failed
[  810.677850][T11521] FAT-fs (loop2): Directory bread(block 69) failed
[  810.712244][T11521] FAT-fs (loop2): Directory bread(block 70) failed
[  810.741802][T11521] FAT-fs (loop2): Directory bread(block 71) failed
[  810.765915][ T5819] usb 6-1: Using ep0 maxpacket: 32
[  810.765954][T11521] FAT-fs (loop2): Directory bread(block 72) failed
[  810.776471][ T5819] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  810.796146][ T5819] usb 6-1: config 0 has no interface number 0
[  810.815886][ T5819] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  810.835869][ T5819] usb 6-1: config 0 interface 89 has no altsetting 0
[  810.845539][ T5819] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  810.865955][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  810.876128][ T5819] usb 6-1: Product: syz
[  810.880376][ T5819] usb 6-1: Manufacturer: syz
[  810.892376][T11521] FAT-fs (loop2): Directory bread(block 73) failed
[  810.899139][ T5819] usb 6-1: SerialNumber: syz
[  810.915421][ T5819] usb 6-1: config 0 descriptor??
[  810.928487][ T5819] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  810.952234][ T5819] em28xx 6-1:0.89: Video interface 89 found:
[  811.958546][T11525] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  812.136385][ T5819] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  814.319894][ T5819] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  814.334775][T11540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  814.336718][ T5819] em28xx 6-1:0.89: board has no eeprom
[  814.397342][T11539] tipc: Disabling bearer <eth:syzkaller0>
[  814.435876][ T5819] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  814.443196][ T5819] em28xx 6-1:0.89: analog set to bulk mode.
[  814.459475][ T5767] em28xx 6-1:0.89: Registering V4L2 extension
[  814.480709][ T5819] usb 6-1: USB disconnect, device number 17
[  814.517082][ T5819] em28xx 6-1:0.89: Disconnecting em28xx
[  815.275853][ T5767] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  815.319568][ T5767] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  815.429902][ T5767] em28xx 6-1:0.89: No AC97 audio processor
[  815.617459][ T5767] usb 6-1: Decoder not found
[  815.659913][ T5767] em28xx 6-1:0.89: failed to create media graph
[  815.701157][ T5767] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  815.817101][ T5767] em28xx 6-1:0.89: Registering snapshot button...
[  816.097493][ T5767] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input44
[  816.394002][ T5767] em28xx 6-1:0.89: Remote control support is not available for this card.
[  816.445865][ T5819] em28xx 6-1:0.89: Closing input extension
[  816.464049][ T5819] em28xx 6-1:0.89: Deregistering snapshot button
[  816.535424][ T5819] em28xx 6-1:0.89: Freeing device
[  817.392785][T11567] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  818.441316][T11575] fuse: Bad value for 'fd'
[  819.794249][T11590] loop2: detected capacity change from 0 to 256
[  819.807045][T11590] exfat: Deprecated parameter 'utf8'
[  819.812724][T11590] exfat: Deprecated parameter 'namecase'
[  819.819191][T11590] exfat: Deprecated parameter 'namecase'
[  819.824997][T11590] exfat: Deprecated parameter 'utf8'
[  820.106655][T11591] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1534'.
[  820.267863][T11590] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  820.595966][ T7733] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  821.058275][ T7733] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  821.066689][ T7733] usb 6-1: config 0 has no interface number 0
[  821.072865][ T7733] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  821.096316][ T7733] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  821.119295][ T7733] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  821.135870][ T7733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.143950][ T7733] usb 6-1: Product: syz
[  821.175173][ T7733] usb 6-1: Manufacturer: syz
[  821.185869][ T7733] usb 6-1: SerialNumber: syz
[  821.217737][ T7733] usb 6-1: config 0 descriptor??
[  821.226350][T11583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  821.277683][ T7733] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  821.903060][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.090820][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.190417][T11601] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  822.276186][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.285064][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.382606][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.401376][ T7733] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  822.467685][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.632866][T11583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.662925][T11583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.694827][ T7733] usb 6-1: USB disconnect, device number 18
[  822.752548][ T7733] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  822.810084][ T7733] cyberjack 6-1:0.69: device disconnected
[  823.812076][T11609] binder: 11608:11609 ioctl 4018620d 0 returned -22
[  824.063098][T11457] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  824.074821][T11457] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  824.087461][T11457] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  824.099183][T11457] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  824.108374][T11457] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  824.117488][T11457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  825.262204][T11612] chnl_net:caif_netlink_parms(): no params data found
[  825.290835][T11623] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  825.497812][T11630] loop5: detected capacity change from 0 to 256
[  825.509338][T11630] exfat: Deprecated parameter 'utf8'
[  825.514987][T11630] exfat: Deprecated parameter 'namecase'
[  825.521416][T11630] exfat: Deprecated parameter 'namecase'
[  825.527298][T11630] exfat: Deprecated parameter 'utf8'
[  825.906555][T11630] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  826.117457][T10652] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  826.245049][ T5782] Bluetooth: hci2: command tx timeout
[  826.494455][T11612] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.519181][T11612] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.535188][T11612] bridge_slave_0: entered allmulticast mode
[  826.546828][T11612] bridge_slave_0: entered promiscuous mode
[  826.559989][T11612] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.567917][T11612] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.575225][T11612] bridge_slave_1: entered allmulticast mode
[  826.590151][T11612] bridge_slave_1: entered promiscuous mode
[  827.274973][T11612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  827.333150][T11612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  827.369903][T11641] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  827.559534][T11612] team0: Port device team_slave_0 added
[  827.619947][T11612] team0: Port device team_slave_1 added
[  827.799590][T11612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  827.822159][T11644] loop4: detected capacity change from 0 to 512
[  827.874353][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.024475][T11644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  828.065900][T11612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.171172][T10652] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  828.179481][T11612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.186537][T11612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  828.213700][T11612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.498485][ T5782] Bluetooth: hci2: command tx timeout
[  829.397890][T11612] hsr_slave_0: entered promiscuous mode
[  829.490338][T11612] hsr_slave_1: entered promiscuous mode
[  829.533099][T11612] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  829.559824][T11612] Cannot create hsr debugfs directory
[  829.603034][T11657] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1549'.
[  830.296497][T11647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  830.566674][ T5782] Bluetooth: hci2: command tx timeout
[  830.620324][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  831.030071][T11671] loop2: detected capacity change from 0 to 256
[  831.055144][T11671] exfat: Deprecated parameter 'utf8'
[  831.109347][T11671] exfat: Deprecated parameter 'namecase'
[  831.122174][T11612] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  831.152093][T11612] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  831.167155][T11671] exfat: Deprecated parameter 'namecase'
[  831.192318][T11612] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  831.236210][T11671] exfat: Deprecated parameter 'utf8'
[  831.242478][T11612] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  831.340835][T11671] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  831.574445][T11612] 8021q: adding VLAN 0 to HW filter on device bond0
[  831.642564][T11612] 8021q: adding VLAN 0 to HW filter on device team0
[  831.706193][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.713404][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  831.759407][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.766663][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state
[  832.656392][ T5782] Bluetooth: hci2: command tx timeout
[  833.480018][T11685] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  834.019945][T11689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'.
[  834.270737][T11612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  836.648722][ T5782] Bluetooth: hci1: unexpected event for opcode 0x0413
[  838.943918][T11612] veth0_vlan: entered promiscuous mode
[  838.969138][T11612] veth1_vlan: entered promiscuous mode
[  839.001426][T11728] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  839.060229][T11612] veth0_macvtap: entered promiscuous mode
[  839.088353][T11612] veth1_macvtap: entered promiscuous mode
[  839.114306][T11732] loop2: detected capacity change from 0 to 256
[  839.129198][T11732] exfat: Deprecated parameter 'utf8'
[  839.134616][T11732] exfat: Deprecated parameter 'namecase'
[  839.141021][T11732] exfat: Deprecated parameter 'namecase'
[  839.147186][T11732] exfat: Deprecated parameter 'utf8'
[  839.174497][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.199553][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.220694][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.252896][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.273701][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.325077][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.373285][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.422121][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.466138][T11732] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  839.481916][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  839.502647][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.542401][T11612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  839.635684][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  839.689479][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.749008][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  839.804253][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.857357][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  839.934277][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  839.988377][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  840.036834][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  840.301400][T11612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  841.212572][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  841.221991][ T5782] Bluetooth: hci1: Injecting HCI hardware error event
[  841.234452][ T5782] Bluetooth: hci1: hardware error 0x00
[  841.437751][T11612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  841.667190][T11612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.784119][T11612] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.846053][T11612] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.856242][T11612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.878845][T11612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  841.917300][T11457] Bluetooth: hci0: unexpected event for opcode 0x0413
[  842.866309][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.874249][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  842.978101][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.993072][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.043302][T11753] loop4: detected capacity change from 0 to 1024
[  843.068045][T11753] EXT4-fs: Ignoring removed mblk_io_submit option
[  843.136748][T11753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  843.234102][T10652] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  843.300356][T11753] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 3)
[  843.399612][T11753] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  843.431548][T11753] EXT4-fs (loop4): This should not happen!! Data will be lost
[  843.431548][T11753] 
[  843.453474][T10652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  843.475522][T11752] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.523779][T11760] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.547169][T10652] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  843.558548][T10652] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  843.568390][T10652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.603487][T11752] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.630039][T10652] usb 6-1: config 0 descriptor??
[  843.694261][T11760] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.744708][T11753] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.789593][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  843.800912][T11760] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.823618][T11753] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.896499][T11753] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  843.920085][T11760] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1572: lblock 3 mapped to illegal pblock 3 (length 1)
[  844.373324][T10652] usbhid 6-1:0.0: can't add hid device: -71
[  844.733234][ T8802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  844.794948][T10652] usbhid: probe of 6-1:0.0 failed with error -71
[  844.804176][T10652] usb 6-1: USB disconnect, device number 19
[  844.826372][ T8802] EXT4-fs (loop4): This should not happen!! Data will be lost
[  844.826372][ T8802] 
[  844.929389][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  845.249478][T11771] loop5: detected capacity change from 0 to 32768
[  845.296313][T11771] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  845.318794][T11771] JBD2: Ignoring recovery information on journal
[  845.381141][T11771] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  845.629071][ T7103] ocfs2: Unmounting device (7,5) on (node local)
[  845.748092][T11773] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  845.926791][ T5782] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  845.937580][ T5782] Bluetooth: hci0: Injecting HCI hardware error event
[  845.947853][T11457] Bluetooth: hci0: hardware error 0x00
[  848.256089][T11457] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  849.710182][T11792] loop2: detected capacity change from 0 to 1024
[  849.751021][T11792] EXT4-fs: Ignoring removed mblk_io_submit option
[  849.832601][T11792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  849.970542][T11792] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 3)
[  850.021207][T11792] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  850.034977][T11792] EXT4-fs (loop2): This should not happen!! Data will be lost
[  850.034977][T11792] 
[  850.074126][T11792] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  850.251313][T11791] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  850.401961][T11791] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  850.671437][T11792] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  850.957817][T11801] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  851.033565][T11792] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  851.064052][T11801] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  851.528039][T11801] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.1582: lblock 3 mapped to illegal pblock 3 (length 1)
[  851.780445][ T5872] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:13: lblock 8 mapped to illegal pblock 8 (length 8)
[  851.822857][ T5872] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  851.863429][T11811] loop5: detected capacity change from 0 to 256
[  851.891542][ T5872] EXT4-fs (loop2): This should not happen!! Data will be lost
[  851.891542][ T5872] 
[  851.974718][T11811] exfat: Deprecated parameter 'utf8'
[  851.980232][T11811] exfat: Deprecated parameter 'namecase'
[  851.986096][T11811] exfat: Deprecated parameter 'namecase'
[  851.991816][T11811] exfat: Deprecated parameter 'utf8'
[  852.024561][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  852.158965][T11816] 9pnet: Could not find request transport: fd00000000000000000005
[  852.181500][T11811] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  852.236488][ T7733] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  852.706412][ T7733] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  853.767071][T11825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  855.698735][ T7733] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  855.806063][T10652] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  855.893164][T11856] 9pnet: Could not find request transport: fd00000000000000000005
[  855.905228][ T7733] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  855.914921][ T7733] usb 6-1: config 0 has no interface number 0
[  855.921637][ T7733] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  855.933594][ T7733] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  855.951765][ T7733] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  855.961742][ T7733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.970284][ T7733] usb 6-1: Product: syz
[  855.974740][ T7733] usb 6-1: Manufacturer: syz
[  855.984093][ T7733] usb 6-1: SerialNumber: syz
[  855.995999][T10652] usb 5-1: Using ep0 maxpacket: 8
[  856.003769][ T7733] usb 6-1: config 0 descriptor??
[  856.004515][T10652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  856.029998][T11849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  856.030735][T10652] usb 5-1: config 0 has no interfaces?
[  856.049960][T11847] loop6: detected capacity change from 0 to 40427
[  856.059466][T10652] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  856.067990][ T7733] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  856.077507][T10652] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  856.077536][T10652] usb 5-1: Product: syz
[  856.077552][T10652] usb 5-1: Manufacturer: syz
[  856.077567][T10652] usb 5-1: SerialNumber: syz
[  856.100998][T11847] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  856.111483][T10652] usb 5-1: config 0 descriptor??
[  856.119410][T11847] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  856.145889][T11847] F2FS-fs (loop6): invalid crc value
[  856.165441][T11847] F2FS-fs (loop6): Found nat_bits in checkpoint
[  856.178498][ T7733] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  856.364047][T11847] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  856.371654][T11847] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  856.577943][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.624498][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.651850][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.665690][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.677855][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.688164][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.706538][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  856.718494][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  857.078555][ T5819] usb 6-1: USB disconnect, device number 20
[  857.176816][ T5819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  857.209285][ T5819] cyberjack 6-1:0.69: device disconnected
[  858.754094][ T7733] usb 5-1: USB disconnect, device number 23
[  858.854645][T11881] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  859.857995][T11890] loop6: detected capacity change from 0 to 256
[  859.865610][T11890] exfat: Deprecated parameter 'utf8'
[  859.871204][T11890] exfat: Deprecated parameter 'namecase'
[  859.877278][T11890] exfat: Deprecated parameter 'namecase'
[  859.883123][T11890] exfat: Deprecated parameter 'utf8'
[  860.278350][T11890] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  860.336247][ T5819] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  860.406114][ T5819] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  860.967555][T11907] 9pnet: Could not find request transport: fd00000000000000000005
[  861.450391][T11909] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  861.846124][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  863.585962][ T7733] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  863.848978][ T7733] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  863.903658][ T7733] usb 5-1: config 0 has no interface number 0
[  863.992344][ T7733] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  864.071699][ T7733] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  864.257116][ T7733] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  864.355952][ T7733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.364036][ T7733] usb 5-1: Product: syz
[  864.413093][ T7733] usb 5-1: Manufacturer: syz
[  864.428885][ T7733] usb 5-1: SerialNumber: syz
[  864.496876][ T7733] usb 5-1: config 0 descriptor??
[  864.510027][T11922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  864.558743][ T7733] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  864.637513][ T7733] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  864.667928][T11935] loop2: detected capacity change from 0 to 256
[  864.675400][T11935] exfat: Deprecated parameter 'utf8'
[  864.680876][T11935] exfat: Deprecated parameter 'namecase'
[  864.686699][T11935] exfat: Deprecated parameter 'namecase'
[  864.692391][T11935] exfat: Deprecated parameter 'utf8'
[  864.707737][T11935] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  865.126530][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.135535][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.185893][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.194824][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.252612][T11940] 9pnet_fd: Insufficient options for proto=fd
[  865.343397][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.450661][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.483657][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  865.497606][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  865.553527][ T5819] usb 5-1: USB disconnect, device number 24
[  865.600362][ T5819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  865.627547][ T5819] cyberjack 5-1:0.69: device disconnected
[  866.106249][T10652] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  866.316364][T10652] usb 3-1: Using ep0 maxpacket: 8
[  866.338486][T10652] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.375693][T10652] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  866.409089][T10652] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  866.434457][T10652] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  866.460102][T10652] usb 3-1: Product: syz
[  866.477578][T10652] usb 3-1: Manufacturer: syz
[  866.495812][T10652] usb 3-1: SerialNumber: syz
[  866.514502][T10652] usb 3-1: config 0 descriptor??
[  867.723063][T11964] binder: 11963:11964 ioctl 4018620d 0 returned -22
[  867.956498][T11959] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  869.617964][T10652] usb 3-1: USB disconnect, device number 28
[  869.814255][T11976] loop2: detected capacity change from 0 to 256
[  869.821884][T11976] exfat: Deprecated parameter 'utf8'
[  869.827392][T11976] exfat: Deprecated parameter 'namecase'
[  869.833188][T11976] exfat: Deprecated parameter 'namecase'
[  869.838984][T11976] exfat: Deprecated parameter 'utf8'
[  870.170348][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  870.177640][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  870.188015][T11976] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  870.612246][T11984] 9pnet_fd: Insufficient options for proto=fd
[  871.425674][T11987] loop4: detected capacity change from 0 to 1024
[  871.433351][T11987] EXT4-fs: Ignoring removed mblk_io_submit option
[  871.559141][T11987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  871.669377][T11987] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 3)
[  871.796225][T11987] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  871.832357][T11987] EXT4-fs (loop4): This should not happen!! Data will be lost
[  871.832357][T11987] 
[  871.843773][T11995] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.862702][T11995] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.879208][T11986] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.899755][T11995] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.922683][T11986] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.938190][T11995] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.953476][T11987] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.969005][T11995] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  871.989975][T11987] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: block 3: comm syz.4.1631: lblock 3 mapped to illegal pblock 3 (length 1)
[  872.078949][T11998] binder: 11997:11998 ioctl 4018620d 0 returned -22
[  872.296868][T10205] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  872.309725][T10205] EXT4-fs (loop4): This should not happen!! Data will be lost
[  872.309725][T10205] 
[  872.330409][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  872.785863][T10652] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  875.395820][T10652] usb 5-1: Using ep0 maxpacket: 8
[  875.492395][T12013] loop2: detected capacity change from 0 to 256
[  875.500107][T12013] exfat: Deprecated parameter 'utf8'
[  875.506510][T12013] exfat: Deprecated parameter 'namecase'
[  875.506936][T10652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.512968][T12013] exfat: Deprecated parameter 'namecase'
[  875.528654][T12013] exfat: Deprecated parameter 'utf8'
[  875.776697][T10652] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  875.816644][T12013] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  875.874860][T10652] usb 5-1: string descriptor 0 read error: -71
[  875.909297][T10652] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  875.985825][T10652] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  876.039655][T10652] usb 5-1: config 0 descriptor??
[  876.066348][T10652] usb 5-1: can't set config #0, error -71
[  876.086736][T12020] 9pnet_fd: Insufficient options for proto=fd
[  876.102173][T10652] usb 5-1: USB disconnect, device number 25
[  877.893469][T12032] binder: 12031:12032 ioctl 4018620d 0 returned -22
[  877.994330][T12034] binder: 12033:12034 ioctl c0306201 200000000680 returned -14
[  880.474082][T12051] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1648'.
[  881.352613][T12056] loop2: detected capacity change from 0 to 256
[  881.360689][T12056] exfat: Deprecated parameter 'utf8'
[  881.366339][T12056] exfat: Deprecated parameter 'namecase'
[  881.372139][T12056] exfat: Deprecated parameter 'namecase'
[  881.377926][T12056] exfat: Deprecated parameter 'utf8'
[  881.711445][T12056] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  882.223434][T12062] 9pnet_fd: Insufficient options for proto=fd
[  883.751210][T12072] loop5: detected capacity change from 0 to 1024
[  883.761720][T12072] EXT4-fs: Ignoring removed mblk_io_submit option
[  883.888119][T12072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  883.936770][ T5819] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  884.140877][ T5819] usb 3-1: unable to get BOS descriptor or descriptor too short
[  884.175680][   T48] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1)
[  884.198423][ T5819] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  884.247466][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.277154][   T48] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  884.299506][ T5819] usb 3-1: Product: syz
[  884.320286][ T5819] usb 3-1: Manufacturer: syz
[  884.329901][   T48] EXT4-fs (loop5): This should not happen!! Data will be lost
[  884.329901][   T48] 
[  884.347325][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  884.361239][ T5819] usb 3-1: SerialNumber: syz
[  884.554245][T12074] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  885.206032][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.309168][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.470459][ T5819] usb 3-1: unit 5 not found!
[  886.531833][ T5819] usb 3-1: unit 3 not found!
[  886.742368][ T5819] usb_set_interface error
[  886.775647][ T5819] snd-usb-us122l: probe of 3-1:1.1 failed with error -22
[  886.919015][T12094] loop6: detected capacity change from 0 to 256
[  886.929749][T12094] exfat: Deprecated parameter 'utf8'
[  886.935358][T12094] exfat: Deprecated parameter 'namecase'
[  886.941707][T12094] exfat: Deprecated parameter 'namecase'
[  886.947670][T12094] exfat: Deprecated parameter 'utf8'
[  887.325431][T12094] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  887.561438][T11603] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  887.721307][ T5819] usb 3-1: USB disconnect, device number 29
[  888.154284][T12105] loop6: detected capacity change from 0 to 1024
[  888.161849][T12105] EXT4-fs: Ignoring removed mblk_io_submit option
[  888.328161][T12102] loop2: detected capacity change from 0 to 32768
[  888.592744][T12105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  888.663556][T12102] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  888.689599][T12102] JBD2: Ignoring recovery information on journal
[  888.971316][ T7733] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  889.100884][T12102] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  889.179274][ T9399] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1)
[  889.209656][   T27] audit: type=1800 audit(889.544:12): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1662" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  889.217100][ T9399] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  889.330874][ T9399] EXT4-fs (loop6): This should not happen!! Data will be lost
[  889.330874][ T9399] 
[  889.378149][T11612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  889.609156][ T5778] ocfs2: Unmounting device (7,2) on (node local)
[  891.850801][T12127] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  893.270173][T12138] Bluetooth: MGMT ver 1.22
[  893.575314][T12143] loop2: detected capacity change from 0 to 256
[  893.653820][T12143] exfat: Deprecated parameter 'utf8'
[  893.682899][T12143] exfat: Deprecated parameter 'namecase'
[  893.702794][T12143] exfat: Deprecated parameter 'namecase'
[  893.722211][T12143] exfat: Deprecated parameter 'utf8'
[  893.801399][T12143] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  894.209517][T12152] loop6: detected capacity change from 0 to 1024
[  894.225194][T12152] EXT4-fs: Ignoring removed mblk_io_submit option
[  894.307632][T12152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  894.416659][ T3444] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1)
[  894.486036][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  894.590896][ T3444] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  894.897774][ T3444] EXT4-fs (loop6): This should not happen!! Data will be lost
[  894.897774][ T3444] 
[  895.407243][T11612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  899.214168][T12197] loop2: detected capacity change from 0 to 1024
[  899.225331][T12197] EXT4-fs: Ignoring removed mblk_io_submit option
[  899.411582][T12185] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  899.763432][T12197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  900.270382][ T8802] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 1)
[  900.321403][ T8802] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  900.340738][T12192] kvm: kvm [12190]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  900.434956][ T8802] EXT4-fs (loop2): This should not happen!! Data will be lost
[  900.434956][ T8802] 
[  900.484056][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  902.166485][ T5820] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  902.400762][T12220] loop6: detected capacity change from 0 to 256
[  903.238868][T12220] exfat: Deprecated parameter 'utf8'
[  903.288314][ T5820] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  903.377217][T12220] exfat: Deprecated parameter 'namecase'
[  903.444504][ T5820] usb 3-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  903.460372][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0
[  903.467601][ T5820] usb 3-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  903.477129][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.505219][T12220] exfat: Deprecated parameter 'namecase'
[  903.511484][T12220] exfat: Deprecated parameter 'utf8'
[  903.576496][ T5820] usb 3-1: config 0 descriptor??
[  903.586688][T12222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  903.768676][T12220] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  904.708111][ T7733] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  904.761727][T12242] loop2: detected capacity change from 0 to 1024
[  904.829641][T12242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  904.880447][T12248] loop5: detected capacity change from 0 to 1024
[  904.902841][T12248] EXT4-fs: Ignoring removed mblk_io_submit option
[  904.962035][T12248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  905.154866][ T3444] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1)
[  905.202450][ T3444] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  905.221529][ T7733] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  905.242078][ T3444] EXT4-fs (loop5): This should not happen!! Data will be lost
[  905.242078][ T3444] 
[  905.273920][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  905.285924][ T5820] usbhid 3-1:0.0: can't add hid device: -71
[  905.291998][ T5820] usbhid: probe of 3-1:0.0 failed with error -71
[  905.349812][ T5820] usb 3-1: USB disconnect, device number 30
[  905.935996][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  906.056708][T12254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  906.265645][T12260] kvm: kvm [12259]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  906.332127][T12260] kvm: kvm [12259]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  906.398025][T12260] kvm: kvm [12259]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  906.916199][ T5820] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  907.202656][ T5820] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  907.426099][ T5820] usb 7-1: config 0 has no interface number 0
[  907.432803][ T5820] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  907.483472][ T5820] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  907.540153][ T5820] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  907.559697][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.600349][ T5820] usb 7-1: Product: syz
[  907.604637][ T5820] usb 7-1: Manufacturer: syz
[  907.640610][ T5820] usb 7-1: SerialNumber: syz
[  907.696721][ T5820] usb 7-1: config 0 descriptor??
[  907.712955][T12265] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  907.727974][ T5820] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  907.779743][ T5820] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  909.425313][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.462037][T12282] loop4: detected capacity change from 0 to 1024
[  909.464351][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.473947][T12282] EXT4-fs: Ignoring removed mblk_io_submit option
[  909.529261][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.548305][T12282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  909.590177][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.696453][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.729843][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.968476][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.989346][T10205] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm kworker/u4:16: lblock 0 mapped to illegal pblock 0 (length 1)
[  910.008574][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  910.042485][ T5820] usb 7-1: USB disconnect, device number 2
[  910.075243][ T5820] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  910.117771][T10205] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  910.146564][ T5820] cyberjack 7-1:0.69: device disconnected
[  910.155895][T10205] EXT4-fs (loop4): This should not happen!! Data will be lost
[  910.155895][T10205] 
[  910.212921][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  912.514437][T12301] loop2: detected capacity change from 0 to 256
[  912.603160][T12301] exfat: Deprecated parameter 'utf8'
[  912.654194][T12301] exfat: Deprecated parameter 'namecase'
[  912.733119][T12301] exfat: Deprecated parameter 'namecase'
[  912.785097][T12301] exfat: Deprecated parameter 'utf8'
[  912.815053][T12301] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  913.087443][T11457] Bluetooth: hci4: unexpected subevent 0x0e length: 32 > 15
[  913.405953][T12305] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  914.938576][T12319] loop5: detected capacity change from 0 to 1024
[  914.955232][T12319] EXT4-fs: Ignoring removed mblk_io_submit option
[  915.357526][T12319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  915.567104][   T59] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1)
[  915.603363][   T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  915.645876][   T59] EXT4-fs (loop5): This should not happen!! Data will be lost
[  915.645876][   T59] 
[  915.687706][ T7103] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  916.801979][ T5819] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  917.077843][ T5819] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[  917.108881][ T5819] usb 6-1: config 0 has no interface number 0
[  917.165270][ T5819] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  917.294421][ T5819] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  917.451948][ T5819] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  917.604352][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.707861][ T5819] usb 6-1: Product: syz
[  917.864770][ T5819] usb 6-1: Manufacturer: syz
[  917.954524][ T5819] usb 6-1: SerialNumber: syz
[  917.965617][ T5819] usb 6-1: config 0 descriptor??
[  917.979197][T12341] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  918.000963][ T5819] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  918.024779][ T5819] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  918.206093][T12349] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  918.478540][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  919.256435][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  919.277364][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.756271][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.852121][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  920.946793][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  920.991428][T12341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  921.017631][T12341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  921.067661][ T5819] usb 6-1: USB disconnect, device number 21
[  921.076652][T12368] loop4: detected capacity change from 0 to 1024
[  921.084085][T12368] EXT4-fs: Ignoring removed mblk_io_submit option
[  921.110527][ T5819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  921.167003][T12368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  921.168729][ T5819] cyberjack 6-1:0.69: device disconnected
[  922.264482][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  925.736243][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  927.511746][ T5819] usb 7-1: device descriptor read/64, error -71
[  927.916081][ T5819] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  928.156062][ T5819] usb 7-1: device descriptor read/64, error -71
[  928.274227][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'.
[  928.306152][ T5819] usb usb7-port1: attempt power cycle
[  929.191649][T12406] loop4: detected capacity change from 0 to 64
[  929.322386][T12408] loop6: detected capacity change from 0 to 1024
[  929.329963][T12408] EXT4-fs: Ignoring removed mblk_io_submit option
[  929.495101][T12408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  929.619523][T12408] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 3: comm syz.6.1735: lblock 3 mapped to illegal pblock 3 (length 3)
[  929.700882][T12408] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  929.735861][T12408] EXT4-fs (loop6): This should not happen!! Data will be lost
[  929.735861][T12408] 
[  929.757439][ T6750] hfs: node 4:3 still has 1 user(s)!
[  929.898345][ T9889] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:15: lblock 8 mapped to illegal pblock 8 (length 8)
[  929.982319][ T9889] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  930.001148][ T9889] EXT4-fs (loop6): This should not happen!! Data will be lost
[  930.001148][ T9889] 
[  930.118523][T11612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  930.188390][T12394] loop5: detected capacity change from 0 to 65536
[  930.262614][T12394] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  930.328110][T12394] XFS (loop5): Ending clean mount
[  930.347366][T12414] loop4: detected capacity change from 0 to 40427
[  930.358730][T12414] F2FS-fs (loop4): LFS is not compatible with checkpoint=disable
[  930.395378][T12394] XFS (loop5): Quotacheck needed: Please wait.
[  930.606117][T12394] XFS (loop5): Quotacheck: Done.
[  930.698325][T12394] overlayfs: missing 'workdir'
[  930.786140][T12416] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  930.884193][ T7103] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  930.918597][T12434] binder: 12433:12434 ioctl c0306201 0 returned -14
[  931.610345][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  931.632480][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  932.200575][T12446] loop4: detected capacity change from 0 to 1024
[  932.247292][T12446] EXT4-fs: Ignoring removed mblk_io_submit option
[  932.307333][T12446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  932.345545][T12446] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 3: comm syz.4.1746: lblock 3 mapped to illegal pblock 3 (length 3)
[  932.362708][T12446] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  932.375391][T12446] EXT4-fs (loop4): This should not happen!! Data will be lost
[  932.375391][T12446] 
[  932.437282][ T8802] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8)
[  932.501771][ T8802] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  932.535061][ T8802] EXT4-fs (loop4): This should not happen!! Data will be lost
[  932.535061][ T8802] 
[  932.586027][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  933.385983][T12455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  933.894630][T12469] syz.5.1753 uses obsolete (PF_INET,SOCK_PACKET)
[  934.124619][T12476] fuse: Bad value for 'fd'
[  935.741405][T12467] loop6: detected capacity change from 0 to 65536
[  935.829614][T12467] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  936.001201][T12467] XFS (loop6): Ending clean mount
[  936.011622][T12486] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  937.020988][T12467] XFS (loop6): Quotacheck needed: Please wait.
[  939.519223][T12467] XFS (loop6): Quotacheck: Done.
[  939.638849][T12513] fuse: Bad value for 'fd'
[  939.719569][T11612] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  942.065845][ T7731] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  942.326559][T12528] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  943.247909][ T7731] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  943.265799][ T7731] usb 5-1: config 0 has no interface number 0
[  943.276075][ T7731] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  943.288466][T12543] fuse: Bad value for 'fd'
[  943.335812][ T7731] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  943.335971][ T5819] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  943.373722][ T7731] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  943.394287][ T7731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.414417][ T7731] usb 5-1: Product: syz
[  943.419211][ T7731] usb 5-1: Manufacturer: syz
[  943.423865][ T7731] usb 5-1: SerialNumber: syz
[  943.438547][ T7731] usb 5-1: config 0 descriptor??
[  943.466487][T12524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  943.477987][ T7731] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  943.526366][ T7731] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  943.717722][ T5819] usb 6-1: device descriptor read/64, error -71
[  943.727515][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.777399][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  943.854976][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  943.955647][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.096400][ T5819] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  944.130095][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.556326][ T5819] usb 6-1: device descriptor read/64, error -71
[  944.626341][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.666422][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  944.686226][ T5819] usb usb6-port1: attempt power cycle
[  944.709174][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  944.747607][T10652] usb 5-1: USB disconnect, device number 26
[  944.855629][T10652] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  944.895008][T10652] cyberjack 5-1:0.69: device disconnected
[  945.136914][ T5819] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  945.186620][ T5819] usb 6-1: device descriptor read/8, error -71
[  945.299801][T12541] loop6: detected capacity change from 0 to 65536
[  945.395949][T12541] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  945.455869][ T5819] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  945.472985][T12541] XFS (loop6): Ending clean mount
[  945.489024][ T5819] usb 6-1: device descriptor read/8, error -71
[  945.509046][T12541] XFS (loop6): Quotacheck needed: Please wait.
[  945.621137][ T5819] usb usb6-port1: unable to enumerate USB device
[  945.666247][T12541] XFS (loop6): Quotacheck: Done.
[  945.768348][T12541] overlayfs: missing 'lowerdir'
[  945.892464][T11612] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  946.263484][T12567] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  946.438744][T12575] syz_tun: entered allmulticast mode
[  946.463354][T12575] syz_tun: left allmulticast mode
[  946.727049][T12576] kvm: kvm [12573]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  946.780209][T12576] kvm: kvm [12573]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  946.802137][T12576] kvm: kvm [12573]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  946.944001][T12580] loop5: detected capacity change from 0 to 256
[  947.527993][T12580] FAT-fs (loop5): Directory bread(block 64) failed
[  947.684110][T12580] FAT-fs (loop5): Directory bread(block 65) failed
[  947.732763][T12580] FAT-fs (loop5): Directory bread(block 66) failed
[  947.769695][T12580] FAT-fs (loop5): Directory bread(block 67) failed
[  947.808936][T12580] FAT-fs (loop5): Directory bread(block 68) failed
[  947.815578][T12580] FAT-fs (loop5): Directory bread(block 69) failed
[  947.855411][T12580] FAT-fs (loop5): Directory bread(block 70) failed
[  947.866853][T12580] FAT-fs (loop5): Directory bread(block 71) failed
[  947.873581][T12580] FAT-fs (loop5): Directory bread(block 72) failed
[  947.880623][T12580] FAT-fs (loop5): Directory bread(block 73) failed
[  948.490105][T12592] loop4: detected capacity change from 0 to 32768
[  948.515177][T12592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  949.051127][ T5782] Bluetooth: hci2: command 0x0406 tx timeout
[  949.416648][T12600] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  950.797841][T12590] loop6: detected capacity change from 0 to 65536
[  950.913418][T12590] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  951.021127][T12615] kvm: kvm [12614]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  951.041015][T12590] XFS (loop6): Ending clean mount
[  951.056233][ T6750] ocfs2: Unmounting device (7,4) on (node local)
[  951.067761][T12590] XFS (loop6): Quotacheck needed: Please wait.
[  951.198930][T12615] kvm: kvm [12614]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  951.260883][T12590] XFS (loop6): Quotacheck: Done.
[  951.411805][T11612] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  951.760373][ T5819] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  951.797243][ T7731] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  951.956042][ T7731] usb 6-1: device descriptor read/64, error -71
[  951.962978][ T5819] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  951.971347][ T5819] usb 5-1: config 0 has no interface number 0
[  951.977824][ T5819] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  951.988356][ T5819] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  952.004410][ T5819] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  952.013973][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.022623][ T5819] usb 5-1: Product: syz
[  952.027282][ T5819] usb 5-1: Manufacturer: syz
[  952.031937][ T5819] usb 5-1: SerialNumber: syz
[  952.039784][ T5819] usb 5-1: config 0 descriptor??
[  952.045647][T12636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  952.061324][ T5819] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  952.100389][ T5819] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  952.235272][T12642] fuse: Bad value for 'fd'
[  952.236924][ T7731] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  952.299229][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  952.312464][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  952.326992][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  952.338126][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  952.356372][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  952.373090][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  952.386321][T12636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  952.397275][T12636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  952.419608][ T5767] usb 5-1: USB disconnect, device number 27
[  952.436829][ T7731] usb 6-1: device descriptor read/64, error -71
[  952.461521][ T5767] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  952.491377][ T5767] cyberjack 5-1:0.69: device disconnected
[  952.560064][ T7731] usb usb6-port1: attempt power cycle
[  953.016479][ T7731] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  953.077674][ T7731] usb 6-1: device descriptor read/8, error -71
[  953.367306][ T7731] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  953.513461][ T7731] usb 6-1: device descriptor read/8, error -71
[  953.702834][ T7731] usb usb6-port1: unable to enumerate USB device
[  954.182953][T12662] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  955.487461][T12679] binder: BINDER_SET_CONTEXT_MGR already set
[  955.525205][T12679] binder: 12676:12679 ioctl 4018620d 200000001000 returned -16
[  956.125825][    T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  956.426893][    T8] usb 7-1: Using ep0 maxpacket: 32
[  956.488552][    T8] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  956.655386][    T8] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[  956.778736][T12690] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  956.812466][    T8] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  956.829838][    T8] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  956.839274][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.855879][    T8] usb 7-1: Product: syz
[  956.875875][    T8] usb 7-1: Manufacturer: syz
[  956.985342][    T8] usb 7-1: SerialNumber: syz
[  957.006905][    T8] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  957.018500][    T8] imon 7-1:155.0: unable to initialize intf0, err -19
[  957.025432][    T8] imon:imon_probe: failed to initialize context!
[  957.037588][T12696] fuse: Bad value for 'fd'
[  957.042784][    T8] imon 7-1:155.0: unable to register, err -19
[  957.229688][T12704] loop4: detected capacity change from 0 to 2048
[  957.342235][T12704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  957.425851][    T8] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  957.945923][T12710] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  958.452517][    T8] usb 6-1: device descriptor read/64, error -71
[  958.725793][    T8] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  958.905782][    T8] usb 6-1: device descriptor read/64, error -71
[  959.036364][    T8] usb usb6-port1: attempt power cycle
[  959.306899][T12720] loop4: detected capacity change from 0 to 65536
[  959.335092][T12720] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  959.372702][T12720] XFS (loop4): Ending clean mount
[  959.389600][T12720] XFS (loop4): Quotacheck needed: Please wait.
[  959.455959][    T8] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  959.486528][T12720] XFS (loop4): Quotacheck: Done.
[  959.508652][    T8] usb 6-1: device descriptor read/8, error -71
[  959.545108][T12720] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  959.564796][T12720] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  959.627738][ T6750] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  959.710644][ T7731] usb 7-1: USB disconnect, device number 6
[  959.786157][    T8] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  959.826052][    T8] usb 6-1: device descriptor read/8, error -71
[  959.947262][    T8] usb usb6-port1: unable to enumerate USB device
[  962.327104][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  963.119323][T12757] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  963.560638][T12762] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1845'.
[  964.136010][ T5767] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  964.700869][ T5767] usb 6-1: device descriptor read/64, error -71
[  965.165990][ T5767] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  965.469286][T12760] loop6: detected capacity change from 0 to 65536
[  965.498043][T12760] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  965.527236][ T5767] usb 6-1: device descriptor read/64, error -71
[  965.847189][ T5767] usb usb6-port1: attempt power cycle
[  966.205271][T12760] XFS (loop6): Ending clean mount
[  966.242334][T12760] XFS (loop6): Quotacheck needed: Please wait.
[  966.514756][T12797] loop4: detected capacity change from 0 to 256
[  966.522287][T12760] XFS (loop6): Quotacheck: Done.
[  966.563280][T12797] exfat: Deprecated parameter 'utf8'
[  966.577572][T12797] exfat: Deprecated parameter 'utf8'
[  966.645840][ T5767] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  966.698896][ T5767] usb 6-1: device descriptor read/8, error -71
[  966.771856][T12797] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  966.979904][T11612] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  967.044159][ T5767] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  967.355380][ T5767] usb 6-1: device descriptor read/8, error -71
[  967.517492][ T5767] usb usb6-port1: unable to enumerate USB device
[  970.176065][ T7731] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  970.585960][ T7731] usb 5-1: Using ep0 maxpacket: 32
[  970.648129][ T7731] usb 5-1: config 0 has no interfaces?
[  970.770721][ T7731] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  970.963737][ T7731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  971.105932][ T7731] usb 5-1: Product: syz
[  971.125858][ T7731] usb 5-1: Manufacturer: syz
[  971.145480][ T7731] usb 5-1: SerialNumber: syz
[  971.170805][ T7731] usb 5-1: config 0 descriptor??
[  972.431449][T12820] loop5: detected capacity change from 0 to 65536
[  972.554267][T12820] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  972.643123][T12820] XFS (loop5): Ending clean mount
[  972.675539][T12820] XFS (loop5): Quotacheck needed: Please wait.
[  972.770341][T12820] XFS (loop5): Quotacheck: Done.
[  972.978723][ T5767] usb 5-1: USB disconnect, device number 28
[  973.519226][ T7103] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  980.051175][    T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  980.248933][    T8] usb 7-1: Using ep0 maxpacket: 16
[  980.259609][    T8] usb 7-1: unable to get BOS descriptor or descriptor too short
[  980.268830][    T8] usb 7-1: config 3 has an invalid interface number: 67 but max is 0
[  980.277306][    T8] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  980.293157][    T8] usb 7-1: config 3 has no interface number 0
[  980.299478][    T8] usb 7-1: config 3 interface 67 has no altsetting 0
[  980.309363][    T8] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=f4.60
[  980.318630][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.326911][    T8] usb 7-1: Product: syz
[  980.331198][    T8] usb 7-1: Manufacturer: syz
[  980.335941][    T8] usb 7-1: SerialNumber: syz
[  980.681626][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.880356][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.906996][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.930982][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.945391][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.960201][T12926] loop5: detected capacity change from 0 to 512
[  980.977046][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.999331][T12903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.019694][T12903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.034197][T12926] EXT4-fs error (device loop5): ext4_ext_check_inode:530: inode #4: comm syz.5.1893: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  981.056808][    T8] usb 7-1: bad CDC descriptors
[  981.062984][    T8] usb 7-1: unsupported MDLM descriptors
[  981.074853][    T8] usb 7-1: USB disconnect, device number 7
[  981.100375][T12926] EXT4-fs error (device loop5): ext4_quota_enable:7147: comm syz.5.1893: Bad quota inode: 4, type: 1
[  981.122818][T12926] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  981.140861][T12926] EXT4-fs (loop5): mount failed
[  982.506002][ T5820] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  983.816100][ T5820] usb 5-1: Using ep0 maxpacket: 32
[  983.832430][ T5820] usb 5-1: config 0 has no interfaces?
[  983.870401][ T5820] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  983.907105][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  983.915470][ T5820] usb 5-1: Product: syz
[  983.928698][ T5820] usb 5-1: Manufacturer: syz
[  983.934540][ T5820] usb 5-1: SerialNumber: syz
[  984.025562][ T5820] usb 5-1: config 0 descriptor??
[  984.736280][ T7731] usb 5-1: USB disconnect, device number 29
[  984.888460][T12968] loop6: detected capacity change from 0 to 256
[  984.906502][T12968] exfat: Deprecated parameter 'utf8'
[  984.911979][T12968] exfat: Deprecated parameter 'namecase'
[  985.049279][T12968] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  985.399287][T12974] loop5: detected capacity change from 0 to 32768
[  985.874055][T12974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1909 (12974)
[  985.889419][ T7731] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  986.236503][T12980] fuse: Unknown parameter 'group_i00000000000000000000'
[  986.305371][T12974] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  986.315878][T12974] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  986.324663][T12974] BTRFS info (device loop5): setting nodatasum
[  986.331085][T12974] BTRFS info (device loop5): force zlib compression, level 3
[  986.338699][T12974] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  986.348676][T12974] BTRFS info (device loop5): use lzo compression, level 0
[  986.355930][T12974] BTRFS info (device loop5): turning on flush-on-commit
[  986.362932][T12974] BTRFS info (device loop5): enabling auto defrag
[  986.369518][T12974] BTRFS info (device loop5): max_inline at 4096
[  986.375909][T12974] BTRFS info (device loop5): using free space tree
[  986.806769][T12974] BTRFS info (device loop5): enabling ssd optimizations
[  986.814989][T12974] BTRFS info (device loop5): auto enabling async discard
[  988.395823][ T7731] usb 5-1: Using ep0 maxpacket: 16
[  988.401993][ T7731] usb 5-1: device descriptor read/all, error -71
[  988.456590][ T5819] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  988.714284][ T5819] usb 7-1: Using ep0 maxpacket: 32
[  988.778121][ T5819] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[  988.795754][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  988.806788][ T5819] usb 7-1: config 0 has no interface number 0
[  988.815822][ T5819] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  988.825651][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[  988.834251][ T5819] usb 7-1: Product: syz
[  988.933973][ T5819] usb 7-1: Manufacturer: syz
[  988.939152][ T5819] usb 7-1: SerialNumber: syz
[  988.947103][ T5819] usb 7-1: config 0 descriptor??
[  988.994412][ T7103] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  990.028635][ T9762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (9762)
[  990.166176][T13031] fuse: Unknown parameter 'group_id00000000000000000000'
[  991.079936][T13044] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1925'.
[  992.089651][T11603] usb 7-1: USB disconnect, device number 8
[  993.118725][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  993.125230][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  993.836326][T13062] fuse: Unknown parameter 'group_id00000000000000000000'
[  994.795575][T13077] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1936'.
[  996.125803][ T5819] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  996.135863][ T5820] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  996.462674][T13086] fuse: Unknown parameter 'group_id00000000000000000000'
[  996.571875][ T5820] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  996.602535][ T5819] usb 6-1: Using ep0 maxpacket: 16
[  996.622717][ T5820] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  996.632238][ T5819] usb 6-1: unable to get BOS descriptor or descriptor too short
[  996.646227][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.659079][ T5819] usb 6-1: config 3 has an invalid interface number: 67 but max is 0
[  996.674860][ T5819] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  996.686772][ T5820] usb 7-1: config 0 descriptor??
[  996.724487][ T5820] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  996.733351][ T5819] usb 6-1: config 3 has no interface number 0
[  996.745826][ T5819] usb 6-1: config 3 interface 67 has no altsetting 0
[  996.766128][ T5819] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=f4.60
[  996.795641][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.823743][ T5819] usb 6-1: Product: syz
[  996.833163][ T5819] usb 6-1: Manufacturer: syz
[  996.839983][ T5819] usb 6-1: SerialNumber: syz
[  997.099734][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.115471][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.135497][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.160205][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.190855][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.204001][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.227916][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  997.246983][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  997.277934][ T5819] usb 6-1: bad CDC descriptors
[  997.300161][ T5819] usb 6-1: unsupported MDLM descriptors
[  997.310471][ T5819] usb 6-1: USB disconnect, device number 38
[  998.167239][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  998.403689][T13111] loop4: detected capacity change from 0 to 512
[  998.433927][T13111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  998.482709][T13111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  998.603698][ T6750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  998.673302][T13118] fuse: Bad value for 'user_id'
[  998.960266][T13120] binder: 13117:13120 ioctl 4018620d 0 returned -22
[  999.769782][T11603] usb 7-1: USB disconnect, device number 9
[ 1000.057030][T13133] loop6: detected capacity change from 0 to 16
[ 1000.131538][T13133] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1000.373514][T11457] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 1000.384275][T11457] CPU: 1 PID: 11457 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1000.391989][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1000.402094][T11457] Workqueue: hci2 hci_rx_work
[ 1000.406966][T11457] Call Trace:
[ 1000.410291][T11457]  <TASK>
[ 1000.413266][T11457]  dump_stack_lvl+0x18c/0x250
[ 1000.418010][T11457]  ? show_regs_print_info+0x20/0x20
[ 1000.423265][T11457]  ? load_image+0x420/0x420
[ 1000.427840][T11457]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1000.433059][T11457]  ? sysfs_warn_dup+0xa0/0xa0
[ 1000.437792][T11457]  ? do_raw_spin_unlock+0x121/0x230
[ 1000.443081][T11457]  kobject_add_internal+0x61c/0xcc0
[ 1000.448356][T11457]  kobject_add+0x164/0x240
[ 1000.452830][T11457]  ? __rwlock_init+0x150/0x150
[ 1000.457656][T11457]  ? kobject_init+0x1e0/0x1e0
[ 1000.462386][T11457]  ? _raw_spin_unlock+0x28/0x40
[ 1000.467386][T11457]  ? get_device_parent+0x366/0x390
[ 1000.472592][T11457]  device_add+0x408/0xc50
[ 1000.476985][T11457]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1000.482073][T11457]  le_conn_complete_evt+0xf5d/0x1540
[ 1000.487495][T11457]  ? hci_event_packet+0x4cb/0x1270
[ 1000.492700][T11457]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1000.499005][T11457]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1000.504699][T11457]  ? skb_pull_data+0xfb/0x200
[ 1000.509544][T11457]  hci_le_enh_conn_complete_evt+0x189/0x460
[ 1000.515496][T11457]  ? hci_le_remote_conn_param_req_evt+0xce0/0xce0
[ 1000.521970][T11457]  ? hci_remote_host_features_evt+0x150/0x150
[ 1000.528096][T11457]  hci_event_packet+0x7ba/0x1270
[ 1000.533108][T11457]  ? bis_list+0x290/0x290
[ 1000.537503][T11457]  ? lockdep_hardirqs_on+0x98/0x150
[ 1000.542769][T11457]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1000.548024][T11457]  hci_rx_work+0x43a/0xd60
[ 1000.552505][T11457]  ? process_scheduled_works+0x96f/0x15d0
[ 1000.558326][T11457]  process_scheduled_works+0xa5d/0x15d0
[ 1000.563957][T11457]  ? worker_attach_to_pool+0x380/0x380
[ 1000.569483][T11457]  ? assign_work+0x3d2/0x5d0
[ 1000.574134][T11457]  worker_thread+0xa55/0xfc0
[ 1000.578789][T11457]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1000.584742][T11457]  ? _raw_spin_unlock+0x40/0x40
[ 1000.589653][T11457]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1000.595660][T11457]  kthread+0x2fa/0x390
[ 1000.599782][T11457]  ? pr_cont_work+0x560/0x560
[ 1000.604516][T11457]  ? kthread_blkcg+0xd0/0xd0
[ 1000.609165][T11457]  ret_from_fork+0x48/0x80
[ 1000.613672][T11457]  ? kthread_blkcg+0xd0/0xd0
[ 1000.618311][T11457]  ret_from_fork_asm+0x11/0x20
[ 1000.623177][T11457]  </TASK>
[ 1000.633748][T11457] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1000.649329][T11457] Bluetooth: hci2: failed to register connection device
[ 1000.888133][T13139] fuse: Bad value for 'user_id'
[ 1002.038202][T13159] loop6: detected capacity change from 0 to 32768
[ 1002.073870][T13159] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[ 1002.125941][ T5767] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1002.334311][ T5767] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1002.494498][ T5767] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1002.605431][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.808321][ T5767] usb 5-1: config 0 descriptor??
[ 1003.009619][ T5767] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1003.228068][ T9762] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[ 1003.326987][T13173] fuse: Bad value for 'user_id'
[ 1004.274441][T13180] loop6: detected capacity change from 0 to 32768
[ 1004.286250][T13180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1974 (13180)
[ 1004.316970][T13180] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1004.329314][T13180] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[ 1004.338123][T13180] BTRFS info (device loop6): force clearing of disk cache
[ 1004.345302][T13180] BTRFS info (device loop6): enabling auto defrag
[ 1004.351910][T13180] BTRFS info (device loop6): max_inline at 0
[ 1004.358073][T13180] BTRFS info (device loop6): enabling disk space caching
[ 1004.365151][T13180] BTRFS info (device loop6): disk space caching is enabled
[ 1004.454584][T13180] BTRFS info (device loop6): enabling ssd optimizations
[ 1004.468325][T13180] BTRFS info (device loop6): rebuilding free space tree
[ 1004.498474][T13180] BTRFS info (device loop6): disabling free space tree
[ 1004.505541][T13180] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1004.515875][T13180] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1006.235534][T11612] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1006.284098][T11603] usb 5-1: USB disconnect, device number 32
[ 1008.530144][T13220] netlink: 'syz.5.1983': attribute type 4 has an invalid length.
[ 1008.736679][ T5767] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1009.437709][ T5767] usb 5-1: config 0 has no interfaces?
[ 1009.444159][ T5767] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1009.525712][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.591792][ T5767] usb 5-1: config 0 descriptor??
[ 1009.932816][T13232] kvm: kvm [13230]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1009.961632][T13232] kvm: kvm [13230]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1010.121316][ T5767] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1010.160920][ T5820] usb 5-1: USB disconnect, device number 33
[ 1010.954282][T13242] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[ 1011.015812][ T5767] usb 6-1: Using ep0 maxpacket: 8
[ 1011.040721][ T5767] usb 6-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[ 1011.084786][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.105798][ T5767] usb 6-1: Product: syz
[ 1011.110046][ T5767] usb 6-1: Manufacturer: syz
[ 1011.147852][ T5767] usb 6-1: SerialNumber: syz
[ 1011.178763][ T5767] usb 6-1: config 0 descriptor??
[ 1011.202495][ T5767] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[ 1011.455140][ T5767] pwc: send_video_command error -71
[ 1011.955934][ T5767] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1011.963974][ T5767] Philips webcam: probe of 6-1:0.0 failed with error -71
[ 1012.007222][ T5767] usb 6-1: USB disconnect, device number 39
[ 1013.457975][T13262] loop4: detected capacity change from 0 to 32768
[ 1013.473773][T13262] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[ 1013.539466][ T9762] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1015.032572][T13266] kvm: kvm [13263]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1015.327605][T13282] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2003'.
[ 1016.858913][T13297] loop6: detected capacity change from 0 to 2048
[ 1016.970990][T13300] loop5: detected capacity change from 0 to 32768
[ 1017.026785][T13300] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1017.037137][T13300] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1017.045945][T13300] BTRFS info (device loop5): setting nodatasum
[ 1017.052176][T13300] BTRFS info (device loop5): force zlib compression, level 3
[ 1017.059703][T13300] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1017.068988][T13300] BTRFS info (device loop5): use lzo compression, level 0
[ 1017.076312][T13300] BTRFS info (device loop5): turning on flush-on-commit
[ 1017.083286][T13300] BTRFS info (device loop5): enabling auto defrag
[ 1017.089880][T13300] BTRFS info (device loop5): max_inline at 4096
[ 1017.096196][T13300] BTRFS info (device loop5): using free space tree
[ 1017.108932][T13297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1017.204585][T13300] BTRFS info (device loop5): enabling ssd optimizations
[ 1017.212330][T13300] BTRFS info (device loop5): auto enabling async discard
[ 1018.441666][T10652] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1018.588932][ T7103] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1019.335745][T10652] usb 5-1: Using ep0 maxpacket: 32
[ 1019.366855][T10652] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1019.396117][T10652] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1019.445773][T10652] usb 5-1: config 0 has no interface number 0
[ 1019.451981][T10652] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.515810][T10652] usb 5-1: config 0 interface 89 has no altsetting 0
[ 1019.538661][T10652] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1019.565731][T10652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=17
[ 1019.573928][T10652] usb 5-1: Product: syz
[ 1019.605735][T10652] usb 5-1: Manufacturer: syz
[ 1019.610420][T10652] usb 5-1: SerialNumber: syz
[ 1019.669199][T10652] usb 5-1: config 0 descriptor??
[ 1020.253786][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2020'.
[ 1020.420320][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'.
[ 1021.375838][T13364] loop5: detected capacity change from 0 to 32768
[ 1021.538910][T13364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2022 (13364)
[ 1021.665012][T13364] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1021.675434][T13364] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1021.684241][T13364] BTRFS info (device loop5): use zlib compression, level 3
[ 1021.691616][T13364] BTRFS info (device loop5): turning on sync discard
[ 1021.698396][T13364] BTRFS info (device loop5): using free space tree
[ 1021.763005][ T7731] usb 5-1: USB disconnect, device number 34
[ 1021.781253][T13381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2023'.
[ 1021.794165][T13364] BTRFS info (device loop5): enabling ssd optimizations
[ 1022.294410][   T27] audit: type=1800 audit(1022.534:13): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2022" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1022.841810][ T7103] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1023.342989][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'.
[ 1024.364698][T13411] loop5: detected capacity change from 0 to 256
[ 1026.775350][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1026.887945][T13381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1028.842745][T13381] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.874880][T13381] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.892414][T13381] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1028.915830][T13381] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1030.117460][T13448] loop6: detected capacity change from 0 to 64
[ 1030.924577][T11612] hfs: node 4:3 still has 1 user(s)!
[ 1031.055112][T13461] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2048'.
[ 1031.615544][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'.
[ 1031.979048][T13469] loop6: detected capacity change from 0 to 128
[ 1032.130585][T13469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1032.314475][T13469] BUG: unable to handle page fault for address: ffffffffffffffec
[ 1032.322281][T13469] #PF: supervisor read access in kernel mode
[ 1032.328303][T13469] #PF: error_code(0x0000) - not-present page
[ 1032.334335][T13469] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 
[ 1032.340389][T13469] Oops: 0000 [#1] PREEMPT SMP KASAN
[ 1032.345809][T13469] CPU: 1 PID: 13469 Comm: syz.6.2051 Not tainted syzkaller #0
[ 1032.353314][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1032.363411][T13469] RIP: 0010:ext4_free_ext_path+0x45/0x110
[ 1032.369243][T13469] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89
[ 1032.388938][T13469] RSP: 0018:ffffc900053976f8 EFLAGS: 00010246
[ 1032.395065][T13469] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[ 1032.403094][T13469] RDX: ffffc90011776000 RSI: 000000000000b194 RDI: ffffffffffffffec
[ 1032.411115][T13469] RBP: ffffc90005397810 R08: ffff888059c4c81f R09: 1ffff1100b389903
[ 1032.419137][T13469] R10: dffffc0000000000 R11: ffffed100b389904 R12: ffff888059c4c8b0
[ 1032.427177][T13469] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[ 1032.435219][T13469] FS:  00007f195172d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1032.444207][T13469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1032.450847][T13469] CR2: ffffffffffffffec CR3: 00000000686f6000 CR4: 00000000003506e0
[ 1032.458913][T13469] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff
[ 1032.467021][T13469] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1032.475042][T13469] Call Trace:
[ 1032.478363][T13469]  <TASK>
[ 1032.481336][T13469]  finish_range+0x234/0x340
[ 1032.485926][T13469]  ? update_tind_extent_range+0x3f0/0x3f0
[ 1032.491775][T13469]  ? update_dind_extent_range+0x1bb/0x1d0
[ 1032.497563][T13469]  ext4_ext_migrate+0xc59/0x1080
[ 1032.502571][T13469]  ? mb_regenerate_buddy+0x510/0x510
[ 1032.507904][T13469]  ? down_read_killable+0x340/0x340
[ 1032.513126][T13469]  ? sb_start_write+0x110/0x1c0
[ 1032.518012][T13469]  ? mnt_want_write_file+0x16a/0x200
[ 1032.523353][T13469]  ext4_ioctl+0x1ee3/0x3b80
[ 1032.527875][T13469]  ? ext4_fileattr_set+0x16d0/0x16d0
[ 1032.533186][T13469]  ? mark_lock+0x94/0x320
[ 1032.537542][T13469]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1032.543558][T13469]  ? do_vfs_ioctl+0x1573/0x1cc0
[ 1032.548435][T13469]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[ 1032.554120][T13469]  ? tomoyo_path_number_perm+0x217/0x620
[ 1032.559814][T13469]  ? __lock_acquire+0x7d40/0x7d40
[ 1032.564855][T13469]  ? slab_free_freelist_hook+0x130/0x1a0
[ 1032.570534][T13469]  ? tomoyo_path_number_perm+0x500/0x620
[ 1032.576182][T13469]  ? __kmem_cache_free+0xba/0x1e0
[ 1032.581251][T13469]  ? tomoyo_path_number_perm+0x5b4/0x620
[ 1032.586899][T13469]  ? tomoyo_path_number_perm+0x217/0x620
[ 1032.592551][T13469]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1032.598067][T13469]  ? __fget_files+0x28/0x4b0
[ 1032.602686][T13469]  ? __fget_files+0x28/0x4b0
[ 1032.607303][T13469]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1032.612297][T13469]  ? security_file_ioctl+0x80/0xa0
[ 1032.617457][T13469]  ? ext4_fileattr_set+0x16d0/0x16d0
[ 1032.622836][T13469]  __se_sys_ioctl+0xfd/0x170
[ 1032.627513][T13469]  do_syscall_64+0x55/0xb0
[ 1032.631973][T13469]  ? clear_bhb_loop+0x40/0x90
[ 1032.636660][T13469]  ? clear_bhb_loop+0x40/0x90
[ 1032.641349][T13469]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1032.647290][T13469] RIP: 0033:0x7f195079ce59
[ 1032.652425][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1032.672089][T13469] RSP: 002b:00007f195172d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1032.680557][T13469] RAX: ffffffffffffffda RBX: 00007f1950a15fa0 RCX: 00007f195079ce59
[ 1032.688577][T13469] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004
[ 1032.696580][T13469] RBP: 00007f1950832d6f R08: 0000000000000000 R09: 0000000000000000
[ 1032.704596][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1032.712579][T13469] R13: 00007f1950a16038 R14: 00007f1950a15fa0 R15: 00007ffc43af0cc8
[ 1032.720591][T13469]  </TASK>
[ 1032.723647][T13469] Modules linked in:
[ 1032.727572][T13469] CR2: ffffffffffffffec
[ 1032.731742][T13469] ---[ end trace 0000000000000000 ]---
[ 1032.737203][T13469] RIP: 0010:ext4_free_ext_path+0x45/0x110
[ 1032.742979][T13469] Code: 85 db 0f 84 b0 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 a9 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 48 8d 43 28 48 89
[ 1032.762606][T13469] RSP: 0018:ffffc900053976f8 EFLAGS: 00010246
[ 1032.768692][T13469] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[ 1032.776684][T13469] RDX: ffffc90011776000 RSI: 000000000000b194 RDI: ffffffffffffffec
[ 1032.784676][T13469] RBP: ffffc90005397810 R08: ffff888059c4c81f R09: 1ffff1100b389903
[ 1032.792680][T13469] R10: dffffc0000000000 R11: ffffed100b389904 R12: ffff888059c4c8b0
[ 1032.800688][T13469] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[ 1032.808707][T13469] FS:  00007f195172d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1032.817691][T13469] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1032.824332][T13469] CR2: ffffffffffffffec CR3: 00000000686f6000 CR4: 00000000003506e0
[ 1032.832361][T13469] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff
[ 1032.840386][T13469] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1032.848506][T13469] Kernel panic - not syncing: Fatal exception
[ 1032.855239][T13469] Kernel Offset: disabled
[ 1032.859588][T13469] Rebooting in 86400 seconds..