last executing test programs:

10m13.588519315s ago: executing program 2 (id=277):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat$null(r0, 0x0, 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x130, 0x0, 0xe4a, {0x1, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xae1, 0x10, r3, r4, 0xc000, '\x00', 0x4, 0xffff, 0x1, 0xfffffffffffffff7, {0x4, 0x3}, {0x1001, 0xc}, {0x1ffffff, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x10400005}}, 0x50)

10m13.414276189s ago: executing program 2 (id=280):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000300)={r1, 0x0, 0x2000, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1)

10m13.250721563s ago: executing program 2 (id=283):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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")

10m12.98518257s ago: executing program 2 (id=285):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0xfb, 0x2b4, &(0x7f00000008c0)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x10000, &(0x7f00000002c0)={[], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.\x00', &(0x7f0000006a40)='vfat\x00', 0x1004840, 0x0)

10m12.626795019s ago: executing program 2 (id=289):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mount$tmpfs(0x0, 0x0, 0x0, 0x2e40ab, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodf'])
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065"], 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r2, 0x0)

10m12.070974932s ago: executing program 2 (id=295):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

10m11.687314351s ago: executing program 32 (id=295):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

4m37.738244803s ago: executing program 3 (id=2884):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540), 0xa7c, r0}, 0x38)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="cf0400000000000000", @ANYRES32=r4, @ANYBLOB="0600130084e000000a0006000802110000010000060010008005000006001200010000009600ac"], 0xd8}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

4m37.478638319s ago: executing program 3 (id=2886):
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}], [{@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@fowner_gt}, {@pcr={'pcr', 0x3d, 0x9}}, {@audit}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4m36.177376411s ago: executing program 3 (id=2888):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145000000000001d430000000000007a0a00fe00581c1f61148d0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

4m35.906330808s ago: executing program 3 (id=2890):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nomblk_io_submit}, {@errors_remount}, {@nodelalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x1, 0x3d0, &(0x7f00000023c0)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000e00)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}])

4m34.891148302s ago: executing program 3 (id=2896):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0))
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000f80)=""/4087, 0xff7)

4m34.472976063s ago: executing program 3 (id=2899):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xfe00, 0x70000000, 0x71, 0x10, 0x19}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

4m33.957329635s ago: executing program 33 (id=2899):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xfe00, 0x70000000, 0x71, 0x10, 0x19}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

3m55.930976733s ago: executing program 1 (id=3046):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x2b)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
open(0x0, 0x44000, 0x25)
write(r2, &(0x7f0000000180)='1', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000180)={{0x0, 0x1}, 0xb4b12236923c9975, 0x17, 0x91, {0x0, 0x1}, 0x3, 0x800})
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r4 = dup(r2)
read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_STATX(r4, &(0x7f0000000380)={0x130, 0x0, r5, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x4ffffffd, {0x3, 0x6}, {0x4, 0x2}, {0x5, 0xf}, {0x1, 0x3}, 0x3, 0x7fff, 0xc68}}}, 0x130)

3m55.578685132s ago: executing program 1 (id=3049):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x800000000000006e, 0xfffffffffffffffe, 0x5, 0x1, 0x3, 0x100000002, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x37ffff, 0x8, 0x3, 0x1, 0x0, 0x8000], 0x8080000, 0x105280})
r3 = eventfd2(0x2, 0x80800)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x6, 0x1, 0x0, r3, 0xa})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m54.944273497s ago: executing program 1 (id=3054):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000900)={0x20, 0xe, 0x3, "2b1308"}, 0x0, 0x0})

3m51.852505772s ago: executing program 1 (id=3065):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145000000000001d430000000000007a0a00fe00581c1f61148d0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m51.11614316s ago: executing program 1 (id=3067):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33)

3m50.567302904s ago: executing program 1 (id=3071):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x181, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x3, 0x0, {[0x100000000, 0x2, 0xfffffffffffffffb, 0x10, 0xfea, 0x4, 0x5, 0x3]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m35.430435733s ago: executing program 34 (id=3071):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x181, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000280)={0x3, 0x0, {[0x100000000, 0x2, 0xfffffffffffffffb, 0x10, 0xfea, 0x4, 0x5, 0x3]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

28.418842647s ago: executing program 4 (id=3832):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x5, 0x200000, 0x0, 0xffffffffffffffff, 0xa1055ec7591a96da})

28.170921003s ago: executing program 4 (id=3833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='100\x00', 0x4)

27.924985539s ago: executing program 4 (id=3835):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x18c}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

26.506635994s ago: executing program 4 (id=3839):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

22.501668121s ago: executing program 6 (id=3854):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0x0)
msgsnd(0x0, &(0x7f0000001d00)={0x2}, 0x8, 0x800)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
dup3(r1, r2, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000fa", 0x10, 0x8800, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})

22.162456379s ago: executing program 6 (id=3855):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

21.592757763s ago: executing program 4 (id=3857):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010a00000000000000000400000008000c"], 0x1c}}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)

21.32584332s ago: executing program 5 (id=3860):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x86, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0)
r1 = msgget$private(0x0, 0x84)
msgsnd(r1, &(0x7f0000002580)={0x2, "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"}, 0x401, 0x0)
msgrcv(r1, &(0x7f00000000c0)={0x0, ""/226}, 0xea, 0x3, 0x1c165beb7100355b)
msgctl$IPC_SET(r1, 0x1, 0x0)

20.522915089s ago: executing program 4 (id=3866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

20.299193815s ago: executing program 5 (id=3868):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xe8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x18c}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18.976179497s ago: executing program 5 (id=3874):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x40000001, 0x1, 0x0, 0x4, 0x4, 0x200000, 0x4}]})

18.794192642s ago: executing program 6 (id=3875):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800010a00000000000000000400000008000c"], 0x1c}}, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)

18.583088047s ago: executing program 5 (id=3878):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\f'], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18.253424695s ago: executing program 5 (id=3881):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
read(r0, &(0x7f0000000340), 0x1000)

18.094177388s ago: executing program 5 (id=3883):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17.749167767s ago: executing program 6 (id=3885):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x4)
pipe(0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa5a917104c39f", 0xdf}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}, {&(0x7f0000000800)="1c98baccf3c4dda10bf3823360bf673a13af18c90ee53a5b0ab6833eee1edc56059d6fdcb3227e7e06079dc9725423d66f47694787ec855a7fa2310330b220642ee8afcbd20fd692957d850174c2a1e64e225bad95c1c5ca477757bb1d8b4785dd0cba2804aaeecb9bcd3802d2fde502", 0x70}, {&(0x7f0000000700)="6697624319e115b3b12c54b477254af397bb03fafb8c88497d1145c9550ad7b9912c051975bc71b94e90b4e9accbe555a59252423d4161e89355c8a75e399c0d6b5c11f86f24804ab9eda8d14555fc108fc57f2700b3215e7c43711b96c27b1ced0ded8f08e3c7d692ea44e3509d6261f85c18d9f59c298c2d8dd8bc3fb9f9ee99fd7b80b6928ff6b4dd29a7c11d0d4a1287a37598786b36553db625a7aea0191048c660ce979607b84f", 0xaa}], 0x4, 0x0, 0xffffffffffffff5c}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e", 0xb}], 0x1}}], 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

17.542324992s ago: executing program 6 (id=3886):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r1, 0x1000}, 0xc)

17.278708008s ago: executing program 6 (id=3887):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x188}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

16.995489815s ago: executing program 0 (id=3888):
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0x1, 0x0, 0x0, 0xe2a, 0x3, 0x0, 0xfffff000}, {0x80000001, 0x8, 0x4, 0x2, 0x81, 0xdde, 0x8}, {0x40000000, 0x4, 0x6, 0x0, 0x3, 0x6, 0x5}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x80000100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x8080000, 0x3c5200})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x112000})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

16.82704909s ago: executing program 0 (id=3889):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000102, 0x0, 0x2}]})

16.614922455s ago: executing program 0 (id=3890):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='100\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)

16.507638637s ago: executing program 0 (id=3891):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0)
read(r0, &(0x7f0000000340), 0x1000)

16.361097461s ago: executing program 0 (id=3892):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x100000000000c1a})

16.183093235s ago: executing program 0 (id=3893):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000040)=0x20094b, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@fragment={0x0, 0x0, 0x69, 0x1, 0x0, 0x9, 0x65}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x6}]}}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

4.023877342s ago: executing program 35 (id=3866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

2.023496101s ago: executing program 36 (id=3883):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x2, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.000528356s ago: executing program 37 (id=3887):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb9, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d3258a363255060368ec5a32aef678716d0726d1bf1afc281ded28772b6451a524de9d4492a581988c3ceebeb38b1e3461a7b0bc19bfe568814131d256a4f317cc6079c0914224ce5cc48e232441425860c42e37109cbb87bc0338c10e8"}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x207}], {0x14}}, 0x188}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x8000)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 38 (id=3893):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000040)=0x20094b, 0x4)
syz_emit_ethernet(0x76, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@fragment={0x0, 0x0, 0x69, 0x1, 0x0, 0x9, 0x65}, @srh={0xc, 0x0, 0x4, 0x0, 0x9, 0x20, 0x6}]}}}}}}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

kernel console output (not intermixed with test programs):

unted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  432.840448][T13400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  432.898551][T13415] loop4: detected capacity change from 0 to 512
[  432.978706][T13415] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2710: iget: bad i_size value: 38620345925642
[  433.028460][T13415] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2710: couldn't read orphan inode 15 (err -117)
[  433.059438][T12466] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.093832][T13415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.217662][T13412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2710: bg 0: block 5: invalid block bitmap
[  433.293647][ T5086] Bluetooth: hci1: command tx timeout
[  433.310976][T13415] EXT4-fs (loop4): shut down requested (0)
[  433.401762][T12651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.600726][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.832077][ T5811] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  434.038346][ T5811] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  434.056750][ T5811] usb 4-1: config 0 has no interface number 1
[  434.073850][ T5811] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  434.103204][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.141570][ T5811] usb 4-1: config 0 descriptor??
[  434.214399][T13441] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  434.377076][ T5811] qcserial 4-1:0.2: Qualcomm USB modem converter detected
[  434.644029][ T5811] usb 4-1: USB disconnect, device number 12
[  434.669916][ T5811] qcserial 4-1:0.2: device disconnected
[  434.718410][T13455] loop0: detected capacity change from 0 to 512
[  434.781698][T13455] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.2725: iget: bad i_size value: 38620345925642
[  434.860077][T13455] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2725: couldn't read orphan inode 15 (err -117)
[  434.923700][T13455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.027713][T13454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.2725: bg 0: block 5: invalid block bitmap
[  435.072896][T13455] EXT4-fs (loop0): shut down requested (0)
[  435.252854][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.372377][ T5776] Bluetooth: hci1: command tx timeout
[  435.409448][T13471] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  435.437129][T13471] udc dummy_udc.0: failed to start g1: -19
[  435.472545][T13471] UDC core: g1: couldn't find an available UDC or it's busy
[  436.202567][T13489] loop1: detected capacity change from 0 to 2048
[  436.236308][T13489] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  436.283507][T13489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  436.356583][T13489] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  436.411005][T13495] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  436.445942][T13495] udc dummy_udc.0: failed to start g1: -19
[  436.467408][T13495] UDC core: g1: couldn't find an available UDC or it's busy
[  437.139902][T13514] kvm: pic: non byte write
[  437.164717][T13514] kvm: pic: non byte write
[  437.175253][T13514] kvm: pic: non byte write
[  437.202456][T13514] kvm: pic: non byte write
[  437.222386][T13514] kvm: pic: non byte write
[  437.257889][T13514] kvm: pic: non byte write
[  437.268052][T13514] kvm: pic: non byte write
[  437.300016][T13514] kvm: pic: non byte write
[  437.309966][T13514] kvm: pic: non byte write
[  437.333494][T13514] kvm: pic: non byte write
[  437.468763][T13525] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  437.497827][T13525] udc dummy_udc.0: failed to start g1: -19
[  437.520560][T13525] UDC core: g1: couldn't find an available UDC or it's busy
[  438.520024][T13552] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  438.541030][T13552] udc dummy_udc.0: failed to start g1: -19
[  438.563140][T13552] UDC core: g1: couldn't find an available UDC or it's busy
[  438.665177][T13555] kvm: pic: level sensitive irq not supported
[  438.665269][T13555] kvm: pic: single mode not supported
[  439.061237][T13571] loop0: detected capacity change from 0 to 512
[  439.112979][T13571] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  439.163989][T13571] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2772: bad orphan inode 131083
[  439.199416][T13571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  439.349306][T13571] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.2772: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=124 fake=0
[  439.447511][T13582] EXT4-fs error (device loop0): ext4_check_all_de:666: inode #12: block 7: comm syz.0.2772: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=124 fake=0
[  439.547606][T13586] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  439.565036][T13586] udc dummy_udc.0: failed to start g1: -19
[  439.582636][T13586] UDC core: g1: couldn't find an available UDC or it's busy
[  439.643884][T13589] loop1: detected capacity change from 0 to 736
[  439.659729][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  440.188608][T13599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  440.336352][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  440.342836][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  443.490521][T13621] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  443.570636][T13621] udc dummy_udc.0: failed to start g1: -19
[  443.605127][T13621] UDC core: g1: couldn't find an available UDC or it's busy
[  443.697028][T13625] loop4: detected capacity change from 0 to 512
[  443.732273][T13625] ext4: Unknown parameter 'subj_role'
[  445.933336][T13641] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  445.941781][T13641] udc dummy_udc.0: failed to start g1: -19
[  445.972865][T13641] UDC core: g1: couldn't find an available UDC or it's busy
[  446.212946][T13649] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  446.460422][T13660] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  446.470361][T13660] udc dummy_udc.0: failed to start g1: -19
[  446.477156][T13660] UDC core: g1: couldn't find an available UDC or it's busy
[  447.029814][T13677] loop1: detected capacity change from 0 to 512
[  447.050569][T13677] ext4: Unknown parameter 'permit_directio'
[  447.466603][T13683] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  447.573265][T13688] UDC core: g1: couldn't find an available UDC or it's busy
[  447.585225][ T5810] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  447.774113][ T5810] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  447.796033][ T5810] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  447.832791][T13696] UDC core: g1: couldn't find an available UDC or it's busy
[  447.842327][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.872564][ T5810] usb 1-1: config 0 descriptor??
[  448.523609][T13716] UDC core: g1: couldn't find an available UDC or it's busy
[  448.639524][T13718] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  448.903406][T13724] UDC core: g1: couldn't find an available UDC or it's busy
[  449.464424][T13738] UDC core: g1: couldn't find an available UDC or it's busy
[  449.719505][T13744] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  450.036432][T13747] loop4: detected capacity change from 0 to 2048
[  450.109088][T13747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  450.157472][T13747] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  450.317187][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.404597][ T5810] usb 1-1: USB disconnect, device number 10
[  450.614674][T13758] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  450.657170][T13758] udc dummy_udc.0: failed to start g1: -19
[  450.687609][T13758] UDC core: g1: couldn't find an available UDC or it's busy
[  450.791185][T13761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  450.952103][T13765] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  450.978446][T13765] udc dummy_udc.0: failed to start g1: -19
[  450.987801][T13765] UDC core: g1: couldn't find an available UDC or it's busy
[  451.021396][T13768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  451.527512][T13784] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  451.546287][T13784] udc dummy_udc.0: failed to start g1: -19
[  451.566961][T13784] UDC core: g1: couldn't find an available UDC or it's busy
[  451.688691][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'.
[  452.028468][T13795] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  452.051526][T13795] udc dummy_udc.0: failed to start g1: -19
[  452.072555][T13795] UDC core: g1: couldn't find an available UDC or it's busy
[  452.174988][T13800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer.
[  452.576873][T13813] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  452.602804][T13813] udc dummy_udc.0: failed to start g1: -19
[  452.619594][T13813] UDC core: g1: couldn't find an available UDC or it's busy
[  452.939548][T13825] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  452.952397][T13825] udc dummy_udc.0: failed to start g1: -19
[  452.963093][T13825] UDC core: g1: couldn't find an available UDC or it's busy
[  453.657297][T13851] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  453.684482][T13851] udc dummy_udc.0: failed to start g1: -19
[  453.702312][T13851] UDC core: g1: couldn't find an available UDC or it's busy
[  453.835907][T13857] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  453.848287][T13857] udc dummy_udc.0: failed to start g1: -19
[  453.872626][T13857] UDC core: g1: couldn't find an available UDC or it's busy
[  454.063448][T13859] udc dummy_udc.0: soft-connect without a gadget driver
[  454.103022][T13859] udc dummy_udc.0: soft-connect without a gadget driver
[  455.517874][T13869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  455.987733][T13879] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  456.019140][T13879] udc dummy_udc.0: failed to start g1: -19
[  456.041540][T13879] UDC core: g1: couldn't find an available UDC or it's busy
[  456.118774][T13888] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  456.146126][T13888] udc dummy_udc.0: failed to start g1: -19
[  456.160756][T13888] UDC core: g1: couldn't find an available UDC or it's busy
[  456.617075][T13897] loop3: detected capacity change from 0 to 512
[  456.633615][T13897] ext4: Unknown parameter 'subj_role'
[  457.902007][ T5811] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  458.125143][ T5811] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  458.173466][ T5811] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  458.218226][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  458.260515][ T5811] usb 5-1: SerialNumber: syz
[  458.314163][T13908] loop3: detected capacity change from 0 to 512
[  458.321658][T13908] EXT4-fs: Ignoring removed nomblk_io_submit option
[  458.402200][T13912] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  458.411230][T13908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  458.427925][T13910] input: syz1 as /devices/virtual/input/input9
[  458.435577][T13912] udc dummy_udc.0: failed to start g1: -19
[  458.456488][T13912] UDC core: g1: couldn't find an available UDC or it's busy
[  458.661283][T13908] loop3: detected capacity change from 512 to 0
[  458.687776][T13916] syz.3.2890: attempt to access beyond end of device
[  458.687776][T13916] loop3: rw=12288, sector=40, nr_sectors = 8 limit=0
[  458.729364][ T5811] cdc_ether: probe of 5-1:1.0 failed with error -71
[  458.769443][ T5811] usb 5-1: USB disconnect, device number 5
[  458.779276][T13916] EXT4-fs error (device loop3): ext4_get_inode_loc:4635: inode #18: block 5: comm syz.3.2890: unable to read itable block
[  458.795937][T13918] loop1: detected capacity change from 0 to 1024
[  458.827899][T13916] syz.3.2890: attempt to access beyond end of device
[  458.827899][T13916] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0
[  458.872170][T13916] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  458.911611][T13916] EXT4-fs (loop3): I/O error while writing superblock
[  458.938679][T13916] EXT4-fs (loop3): Remounting filesystem read-only
[  459.121077][T12466] syz-executor: attempt to access beyond end of device
[  459.121077][T12466] loop3: rw=12288, sector=48, nr_sectors = 8 limit=0
[  459.152951][T12466] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  459.246948][T12689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.259918][T12689] syz.3.2455: attempt to access beyond end of device
[  459.259918][T12689] loop3: rw=145409, sector=0, nr_sectors = 8 limit=0
[  459.273378][T12689] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[  459.281724][T12689] EXT4-fs (loop3): I/O error while writing superblock
[  459.664488][T13935] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  459.671679][T13935] udc dummy_udc.0: failed to start g1: -19
[  459.692872][T13935] UDC core: g1: couldn't find an available UDC or it's busy
[  459.787111][ T3491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.988201][ T3491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.059500][ T3491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.674283][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  460.687660][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  460.700990][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  460.710085][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  460.718189][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  460.726021][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  460.876283][ T3491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.993690][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'.
[  461.150875][T13946] loop1: detected capacity change from 0 to 1024
[  461.330999][T13951] loop4: detected capacity change from 0 to 512
[  461.374481][T13951] EXT4-fs: inline encryption not supported
[  461.449962][T13951] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  461.557907][T13951] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2907: corrupted in-inode xattr: e_value size too large
[  461.677481][T13951] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2907: couldn't read orphan inode 15 (err -117)
[  461.738830][T13951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.039093][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.220764][T13943] chnl_net:caif_netlink_parms(): no params data found
[  462.241200][T13972] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  462.258000][T13972] udc dummy_udc.0: failed to start g1: -19
[  462.279234][T13972] UDC core: g1: couldn't find an available UDC or it's busy
[  462.323606][ T5811] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  462.512500][ T5811] usb 2-1: Using ep0 maxpacket: 32
[  462.524144][ T5811] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.536765][T13979] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2913'.
[  462.546268][ T5811] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.560076][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  462.570110][ T5811] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  462.580695][ T5811] usb 2-1: Product: syz
[  462.600719][ T5811] usb 2-1: Manufacturer: syz
[  462.655562][ T5811] hub 2-1:4.0: USB hub found
[  462.813913][ T5086] Bluetooth: hci3: command tx timeout
[  462.896951][ T5811] hub 2-1:4.0: 2 ports detected
[  463.051116][T13943] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.070135][T13943] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.117907][T13943] bridge_slave_0: entered allmulticast mode
[  463.144969][T13943] bridge_slave_0: entered promiscuous mode
[  463.237172][T13943] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.262079][T13943] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.269465][T13943] bridge_slave_1: entered allmulticast mode
[  463.290767][T13943] bridge_slave_1: entered promiscuous mode
[  464.892413][ T5086] Bluetooth: hci3: command tx timeout
[  465.574995][T13943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.644428][T13943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.973683][T13943] team0: Port device team_slave_0 added
[  466.040672][T14020] loop4: detected capacity change from 0 to 512
[  466.054724][T14020] EXT4-fs: inline encryption not supported
[  466.060747][ T3491] hsr_slave_0: left promiscuous mode
[  466.082957][ T3491] hsr_slave_1: left promiscuous mode
[  466.105491][T14020] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  466.141069][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  466.150378][T14020] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.2918: corrupted in-inode xattr: e_value size too large
[  466.166162][T14020] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2918: couldn't read orphan inode 15 (err -117)
[  466.178425][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  466.191170][T14020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.218974][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  466.248609][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.294769][ T3491] bridge_slave_1: left allmulticast mode
[  466.308986][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.314555][ T3491] bridge_slave_1: left promiscuous mode
[  466.343583][T13900] hub 2-1:4.0: activate --> -90
[  466.361249][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.429011][ T3491] bridge_slave_0: left allmulticast mode
[  466.454995][ T3491] bridge_slave_0: left promiscuous mode
[  466.479974][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.640169][ T3491] veth1_macvtap: left promiscuous mode
[  466.658639][ T3491] veth0_macvtap: left promiscuous mode
[  466.672430][ T3491] veth1_vlan: left promiscuous mode
[  466.677887][ T3491] veth0_vlan: left promiscuous mode
[  466.753883][ T5810] usb 2-1: USB disconnect, device number 5
[  466.972067][ T5086] Bluetooth: hci3: command tx timeout
[  467.180839][T14038] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  467.196023][T14038] udc dummy_udc.0: failed to start g1: -19
[  467.211691][T14038] UDC core: g1: couldn't find an available UDC or it's busy
[  467.469179][T14042] binder: 14041:14042 ioctl c0306201 0 returned -14
[  468.467863][ T3491] team0 (unregistering): Port device team_slave_1 removed
[  468.612406][ T3491] team0 (unregistering): Port device team_slave_0 removed
[  468.760223][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.781283][T14056] loop4: detected capacity change from 0 to 512
[  468.841797][T14056] EXT4-fs (loop4): 1 truncate cleaned up
[  468.858573][T14056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  468.964682][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.979194][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.052825][ T5086] Bluetooth: hci3: command tx timeout
[  469.083716][T14062] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  469.090952][T14062] udc dummy_udc.0: failed to start g1: -19
[  469.098090][T14062] UDC core: g1: couldn't find an available UDC or it's busy
[  469.507306][T14067] loop4: detected capacity change from 0 to 4096
[  469.744955][T14067] EXT4-fs: Ignoring removed orlov option
[  469.787312][T14067] EXT4-fs (loop4): Test dummy encryption mode enabled
[  469.826508][T14067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.928414][ T3491] bond0 (unregistering): Released all slaves
[  469.989129][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.108885][T13943] team0: Port device team_slave_1 added
[  470.193734][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'.
[  470.249348][T13943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.268453][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.295500][T13943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.383894][T13943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.391030][T13943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.480663][T13943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.641328][T13943] hsr_slave_0: entered promiscuous mode
[  470.680288][T13943] hsr_slave_1: entered promiscuous mode
[  470.714359][T13943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  470.742412][T13943] Cannot create hsr debugfs directory
[  471.468536][T13943] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  471.527964][T13943] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  471.563212][T13943] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  471.607921][T13943] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  471.708370][T14102] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  471.723891][T14104] loop0: detected capacity change from 0 to 8
[  471.732509][T14102] udc dummy_udc.0: failed to start g1: -19
[  471.739089][T14102] UDC core: g1: couldn't find an available UDC or it's busy
[  471.763198][T14104] unable to read fragment index table
[  471.909256][ T5767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  471.931533][T13943] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.030694][T13943] 8021q: adding VLAN 0 to HW filter on device team0
[  472.083695][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.090935][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.136988][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.144225][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.050134][T13943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.095869][T13943] veth0_vlan: entered promiscuous mode
[  474.149238][T13943] veth1_vlan: entered promiscuous mode
[  474.286346][T13943] veth0_macvtap: entered promiscuous mode
[  474.336024][T13943] veth1_macvtap: entered promiscuous mode
[  474.407171][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.445078][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.482083][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.521913][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.531798][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.582542][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.623958][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.641927][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.661557][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.672874][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.691948][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.711180][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.724020][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.750629][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.764130][T13943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.847002][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.874778][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.896539][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.916294][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.936659][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.951359][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.970943][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.986924][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.002990][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.021389][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.038823][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.054358][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.070679][T13943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  475.090900][T13943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  475.104846][T13943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.141694][T13943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.154260][T13943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.172647][T13943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.181415][T13943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.553146][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.561035][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.773674][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.808996][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  476.288882][T14171] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  476.305777][T14171] udc dummy_udc.0: failed to start g1: -19
[  476.320719][T14171] UDC core: g1: couldn't find an available UDC or it's busy
[  477.364411][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'.
[  477.511300][T14191] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2946'.
[  477.983138][T14205] netlink: 'syz.5.2951': attribute type 2 has an invalid length.
[  478.014462][T14205] netlink: 'syz.5.2951': attribute type 1 has an invalid length.
[  479.302817][T14241] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2958'.
[  479.361308][T14243] loop1: detected capacity change from 0 to 512
[  479.385377][T14243] EXT4-fs: inline encryption not supported
[  479.412098][T14243] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  479.502264][T14243] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.2959: corrupted in-inode xattr: e_value size too large
[  479.533480][T14243] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2959: couldn't read orphan inode 15 (err -117)
[  479.577057][T14243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  479.844394][T12651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.097806][T14267] clocksource: Switched to clocksource acpi_pm
[  480.123111][T14267] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  480.172876][T14267] clocksource: Switched to clocksource tsc
[  480.977793][   T27] audit: type=1800 audit(1785234032.132:43): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2969" name="serialnumber" dev="configfs" ino=63854 res=0 errno=0
[  482.940019][T14295] loop5: detected capacity change from 0 to 512
[  482.954028][T14295] EXT4-fs: inline encryption not supported
[  482.992137][T14295] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  483.070580][T14295] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.2972: corrupted in-inode xattr: e_value size too large
[  483.094635][T14295] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.2972: couldn't read orphan inode 15 (err -117)
[  483.117823][T14295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.375024][ T5776] Bluetooth: hci2: command 0x0406 tx timeout
[  483.483125][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.505323][T14333] loop4: detected capacity change from 0 to 1024
[  484.523575][T14333] EXT4-fs: Ignoring removed orlov option
[  484.552513][T14333] ext4: Unknown parameter 'rootcontext'
[  486.408801][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'.
[  486.430896][T14363] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  486.457815][T14363] udc dummy_udc.0: failed to start g1: -19
[  486.478928][T14363] UDC core: g1: couldn't find an available UDC or it's busy
[  486.487292][T14368] fuse: Bad value for 'fd'
[  486.800850][T14383] xt_TPROXY: Can be used only with -p tcp or -p udp
[  487.755803][T14406] loop5: detected capacity change from 0 to 512
[  487.850613][T14406] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  487.894968][T14406] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  488.002549][T14406] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  488.045716][T14408] loop4: detected capacity change from 0 to 8192
[  488.073702][T14406] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  488.081925][T14406] System zones: 
[  488.102543][T14408] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  488.129562][T14408] UDF-fs: Scanning with blocksize 512 failed
[  488.142187][T14406] 0-2, 18-18, 34-34
[  488.156759][T14418] loop1: detected capacity change from 0 to 1024
[  488.167592][T14418] EXT4-fs: Ignoring removed nomblk_io_submit option
[  488.183350][T14408] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  488.196979][T14418] ext4: Unknown parameter 'measure'
[  488.202512][T14406] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.2996: bad orphan inode 15
[  488.207365][T14408] UDF-fs: Scanning with blocksize 1024 failed
[  488.256454][T14406] ext4_test_bit(bit=14, block=18) = 1
[  488.266939][T14418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3000'.
[  488.295592][T14406] is_bad_inode(inode)=0
[  488.303881][T14408] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  488.305939][T14406] NEXT_ORPHAN(inode)=2264924160
[  488.324527][T14408] UDF-fs: Scanning with blocksize 2048 failed
[  488.363087][T14406] max_ino=32
[  488.366401][T14406] i_nlink=0
[  488.377101][T14408] UDF-fs: error (device loop4): udf_read_inode: (ino 784) failed !bh
[  488.400347][T14406] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2996: corrupted inode contents
[  488.422659][T14408] UDF-fs: Scanning with blocksize 4096 failed
[  488.479715][T14406] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #15: comm syz.5.2996: mark_inode_dirty error
[  488.483624][T14406] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2996: corrupted inode contents
[  488.484219][T14406] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.2996: mark_inode_dirty error
[  488.484744][T14406] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.2996: mark inode dirty (error -117)
[  488.485518][T14406] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  488.491621][T14406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.621842][T14428] loop1: detected capacity change from 0 to 1024
[  488.796624][T14406] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2996: bg 0: block 80: padding at end of block bitmap is not set
[  489.034229][T14418] loop1: detected capacity change from 0 to 4096
[  489.040208][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.090329][T14418] ext4: Unknown parameter 'noacl'
[  489.636624][T14454] xt_hashlimit: max too large, truncated to 1048576
[  489.662420][T14454] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  491.546305][T14507] loop5: detected capacity change from 0 to 1024
[  491.555481][T14507] EXT4-fs: Ignoring removed nomblk_io_submit option
[  491.596146][T14507] ext4: Unknown parameter 'measure'
[  491.675106][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3018'.
[  491.913111][T14512] Error parsing options; rc = [-22]
[  495.779255][T14586] loop1: detected capacity change from 0 to 1024
[  495.829421][T14586] EXT4-fs: Ignoring removed nomblk_io_submit option
[  495.882117][T14586] ext4: Unknown parameter 'measure'
[  495.932731][T14586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3030'.
[  497.505835][T14627] loop0: detected capacity change from 0 to 1024
[  497.653003][T14627] EXT4-fs: Ignoring removed nomblk_io_submit option
[  497.659693][T14627] ext4: Unknown parameter 'measure'
[  497.706003][T14627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3042'.
[  498.232999][ T5811] smpboot: CPU 1 is now offline
[  498.974711][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3053'.
[  499.822284][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  499.939418][T14674] loop0: detected capacity change from 0 to 512
[  499.960466][T14678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3057'.
[  500.084692][ T5811] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  500.109061][T14678] netlink: 'syz.4.3057': attribute type 1 has an invalid length.
[  500.127591][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.164664][T14678] netlink: 'syz.4.3057': attribute type 2 has an invalid length.
[  500.194225][T14674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.228124][ T5811] usb 2-1: config 0 descriptor??
[  500.239896][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3057'.
[  500.296391][T14674] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  500.373466][T14674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.645874][T14674] loop0: detected capacity change from 0 to 512
[  500.724471][T14674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  500.866037][T14674] EXT4-fs (loop0): 1 truncate cleaned up
[  500.886421][T14688] loop4: detected capacity change from 0 to 256
[  500.895046][T14674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  500.947398][T14688] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  501.294665][T14674] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #2: block 13: comm syz.0.3056: lblock 0 mapped to illegal pblock 13 (length 1)
[  501.417615][T14674] EXT4-fs (loop0): Remounting filesystem read-only
[  501.537001][ T5811] usb 2-1: Cannot set autoneg
[  501.565980][ T5811] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  501.651230][T14701] tc_dump_action: action bad kind
[  501.657396][ T5811] usb 2-1: USB disconnect, device number 6
[  501.736452][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.802450][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  501.809016][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  504.282372][ T5810] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  504.855356][ T5810] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  504.894713][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.961143][ T5810] usb 1-1: config 0 descriptor??
[  505.502910][T14761] loop4: detected capacity change from 0 to 1024
[  505.540943][T14761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  505.613433][T14761] ext4: Unknown parameter 'measure'
[  505.682903][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3079'.
[  506.054394][T14768] loop4: detected capacity change from 0 to 1024
[  506.151144][ T5810] usb 1-1: Cannot set autoneg
[  506.167951][ T5810] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32
[  506.260859][ T5810] usb 1-1: USB disconnect, device number 11
[  506.348583][T14761] loop4: detected capacity change from 0 to 4096
[  506.406852][T14761] ext4: Unknown parameter 'noacl'
[  507.497384][T14795] loop4: detected capacity change from 0 to 1024
[  507.608072][T14795] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  507.797066][T14799] loop0: detected capacity change from 0 to 4096
[  507.835840][T14795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  507.901848][T14795] System zones: 0-1, 3-12
[  507.962930][T14799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  507.977115][T14795] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.897152][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.273275][T14822] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3089'.
[  509.282939][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3090'.
[  509.292304][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.849191][T14854] loop5: detected capacity change from 0 to 1024
[  510.992567][T14854] EXT4-fs: Ignoring removed nomblk_io_submit option
[  511.067963][T14854] ext4: Unknown parameter 'measure'
[  511.255161][T14860] loop0: detected capacity change from 0 to 4096
[  511.320288][T14854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3099'.
[  511.368223][T14860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.698929][T14867] loop5: detected capacity change from 0 to 1024
[  512.496307][T14854] loop5: detected capacity change from 0 to 4096
[  512.510459][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3101'.
[  512.595606][T14854] ext4: Unknown parameter 'noacl'
[  513.256009][T14886] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  513.629994][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.331544][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3110'.
[  514.564931][T14912] loop5: detected capacity change from 0 to 1024
[  514.658144][T14912] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  514.814760][T14912] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  514.909572][T14912] System zones: 0-1, 3-12
[  514.996233][T14912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.192419][ T5831] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  515.386591][ T5831] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  515.419209][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.469168][ T5831] usb 5-1: config 0 descriptor??
[  515.707923][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.768087][T14932] loop0: detected capacity change from 0 to 1024
[  515.811812][T14932] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  516.013314][T14932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  516.042316][T14932] System zones: 0-1, 3-12
[  516.050968][T14932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.306028][T14938] loop5: detected capacity change from 0 to 512
[  516.394669][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.471494][T14938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.543606][ T5831] usb 5-1: Cannot set autoneg
[  516.548471][ T5831] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32
[  516.629178][T14938] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  516.662514][ T5831] usb 5-1: USB disconnect, device number 6
[  516.724309][T14938] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.913015][T14938] loop5: detected capacity change from 0 to 512
[  516.971086][T14944] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  516.999468][T14938] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  517.182920][T14938] EXT4-fs (loop5): 1 truncate cleaned up
[  517.268919][T14938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.649104][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3119'.
[  517.952952][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.862920][T14973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.875436][T14973] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.883575][T14973] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.891445][T14973] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  519.900537][T14973] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  519.911032][T14973] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  519.931455][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  519.943055][ T5810] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  519.976846][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  519.985721][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  519.997096][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  520.010415][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  520.033819][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  520.203961][ T5810] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  520.242442][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.281509][ T5810] usb 1-1: config 0 descriptor??
[  520.352755][ T3448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.606430][ T3448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.840971][ T3448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.908549][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3129'.
[  521.011584][ T3448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.186608][T14984] loop4: detected capacity change from 0 to 512
[  521.317945][T14984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.342292][ T5810] usb 1-1: Cannot set autoneg
[  521.347160][ T5810] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32
[  521.420554][T14984] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.453627][ T5810] usb 1-1: USB disconnect, device number 12
[  521.532898][T14984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.748032][T14984] loop4: detected capacity change from 0 to 512
[  521.839823][T14972] chnl_net:caif_netlink_parms(): no params data found
[  521.855073][T14984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  521.973087][T14984] EXT4-fs (loop4): 1 truncate cleaned up
[  522.044034][T14984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.122257][ T5086] Bluetooth: hci0: command tx timeout
[  522.153522][T14997] loop5: detected capacity change from 0 to 16
[  522.223010][T14997] erofs: (device loop5): mounted with root inode @ nid 36.
[  522.489784][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.898423][T14972] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.935642][T14972] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.968672][T14972] bridge_slave_0: entered allmulticast mode
[  523.015069][T14972] bridge_slave_0: entered promiscuous mode
[  523.174957][T15019] loop5: detected capacity change from 0 to 512
[  523.197024][T14972] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.228924][T14972] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.290013][T14972] bridge_slave_1: entered allmulticast mode
[  523.330520][T15019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.350716][T14972] bridge_slave_1: entered promiscuous mode
[  523.614617][T14972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.647399][T15019] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  523.795905][T15030] loop0: detected capacity change from 0 to 2048
[  523.853037][T15030] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  523.914177][T14972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.930436][T15019] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  523.949480][T15030] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  523.985736][T15030] UDF-fs: Scanning with blocksize 512 failed
[  524.025837][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'.
[  524.056546][T15030] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  524.157707][T15030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  524.184159][ T5086] Bluetooth: hci0: command tx timeout
[  524.293441][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.378055][   T27] audit: type=1800 audit(1785234075.512:44): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3136" name="bus" dev="loop0" ino=851 res=0 errno=0
[  524.398442][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.494119][T14972] team0: Port device team_slave_0 added
[  524.618894][T14972] team0: Port device team_slave_1 added
[  524.821399][T15041] loop0: detected capacity change from 0 to 512
[  524.902388][T15044] Mass Storage Function, version: 2009/09/11
[  524.940239][T15044] LUN: removable file: (no medium)
[  524.951086][T15041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.053433][T15041] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  525.118691][T15041] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.194539][T14972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  525.262761][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.288688][    C0] vkms_vblank_simulate: vblank timer overrun
[  525.481276][T14972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  525.636029][T14972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  525.684961][T14972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  525.812861][T14972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.189622][T14972] hsr_slave_0: entered promiscuous mode
[  526.242846][T14972] hsr_slave_1: entered promiscuous mode
[  526.252433][T14973] Bluetooth: hci0: command tx timeout
[  526.312338][T14972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  526.352307][T14972] Cannot create hsr debugfs directory
[  526.770073][ T3448] hsr_slave_0: left promiscuous mode
[  526.877327][ T3448] hsr_slave_1: left promiscuous mode
[  526.982189][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.989667][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.073075][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.112221][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.143724][ T3448] bridge_slave_1: left allmulticast mode
[  527.180250][ T3448] bridge_slave_1: left promiscuous mode
[  527.231140][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.272761][ T3448] bridge_slave_0: left allmulticast mode
[  527.308274][ T3448] bridge_slave_0: left promiscuous mode
[  527.338318][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.478403][ T3448] veth1_macvtap: left promiscuous mode
[  527.499808][ T3448] veth0_macvtap: left promiscuous mode
[  527.519963][ T3448] veth1_vlan: left promiscuous mode
[  527.544413][ T3448] veth0_vlan: left promiscuous mode
[  528.326939][T15096] loop5: detected capacity change from 0 to 512
[  528.343843][T14973] Bluetooth: hci0: command tx timeout
[  528.475666][T15096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.710810][T15096] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  528.930167][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.146883][T15107] loop4: detected capacity change from 0 to 512
[  529.315635][T15107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.393501][T15107] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  529.598765][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.878514][T15116] loop4: detected capacity change from 0 to 1024
[  529.944850][T15116] EXT4-fs: Ignoring removed nomblk_io_submit option
[  529.951506][T15116] ext4: Unknown parameter 'measure'
[  530.052097][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3160'.
[  530.281386][T15119] loop4: detected capacity change from 0 to 1024
[  530.416743][ T5767] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  531.867166][ T3448] team0 (unregistering): Port device team_slave_1 removed
[  532.179379][ T3448] team0 (unregistering): Port device team_slave_0 removed
[  532.397447][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.631049][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.875707][T15146] binder: BINDER_SET_CONTEXT_MGR already set
[  532.934593][T15146] binder: 15145:15146 ioctl 4018620d 200000004a80 returned -16
[  534.088329][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  534.284600][ T3448] bond0 (unregistering): Released all slaves
[  534.292179][ T5831] usb 6-1: Using ep0 maxpacket: 32
[  534.313313][ T5831] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.342207][ T5831] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.393785][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  534.432436][ T5831] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  534.461303][ T5831] usb 6-1: Product: syz
[  534.472322][ T5831] usb 6-1: Manufacturer: syz
[  534.503498][ T5831] hub 6-1:4.0: USB hub found
[  534.722423][ T5831] hub 6-1:4.0: 2 ports detected
[  535.585226][ T5831] usb 6-1: USB disconnect, device number 2
[  535.731003][T14972] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  535.789315][T14972] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  535.835869][T14972] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  535.881464][T14972] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  536.308506][T14972] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.429456][T14972] 8021q: adding VLAN 0 to HW filter on device team0
[  536.508899][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.516143][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.666356][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.673622][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.838587][T15182] binder: BINDER_SET_CONTEXT_MGR already set
[  536.857377][T14972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  536.901219][T15182] binder: 15181:15182 ioctl 4018620d 200000004a80 returned -16
[  537.689347][T15193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3181'.
[  538.388381][T14972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  538.817451][T15212] loop0: detected capacity change from 0 to 512
[  538.922487][T15212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.009489][T15212] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.098952][T15212] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.296281][T15212] loop0: detected capacity change from 0 to 512
[  539.347432][T15212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  539.436434][T15212] EXT4-fs (loop0): 1 truncate cleaned up
[  539.483474][T15212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.745042][T15231] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  539.864283][T14972] veth0_vlan: entered promiscuous mode
[  539.908873][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.995943][T14972] veth1_vlan: entered promiscuous mode
[  540.031762][ T5831] smpboot: CPU 1 is now offline
[  540.231216][T14972] veth0_macvtap: entered promiscuous mode
[  540.317388][T14972] veth1_macvtap: entered promiscuous mode
[  540.343276][T15243] binder: BINDER_SET_CONTEXT_MGR already set
[  540.349338][T15243] binder: 15242:15243 ioctl 4018620d 200000004a80 returned -16
[  540.437704][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  540.677651][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.956194][T15250] loop4: detected capacity change from 0 to 1024
[  541.002249][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.028563][T15250] EXT4-fs: Ignoring removed nomblk_io_submit option
[  541.081757][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.100305][T15250] ext4: Unknown parameter 'measure'
[  541.146663][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.165643][T15250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3191'.
[  541.209523][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.256941][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.314492][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.329579][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.346435][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.357536][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.375719][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.402798][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.430971][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.444690][T15257] loop4: detected capacity change from 0 to 1024
[  541.469410][T14972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.501260][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3190'.
[  541.595798][ T5767] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  541.746291][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.806014][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.861384][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.919179][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.950646][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.986910][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.037457][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.037475][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.037488][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.037498][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.037512][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.037522][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.037536][T14972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.037546][T14972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.062926][T14972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.104989][T14972] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.105060][T14972] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.105082][T14972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.105104][T14972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.258231][T15267] loop5: detected capacity change from 0 to 512
[  542.384669][T15267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.384797][T15267] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  542.389039][T15267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.450023][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.450048][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.476802][T15267] loop5: detected capacity change from 0 to 512
[  542.519506][T15267] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  542.549379][T15267] EXT4-fs (loop5): 1 truncate cleaned up
[  542.550307][T15267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  542.595457][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.595475][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.886469][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.497908][T15287] loop6: detected capacity change from 0 to 1024
[  543.681476][T15287] EXT4-fs: Ignoring removed nomblk_io_submit option
[  543.681502][T15287] ext4: Unknown parameter 'measure'
[  543.945485][T15291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3200'.
[  543.963284][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3201'.
[  544.206062][T15294] loop6: detected capacity change from 0 to 1024
[  545.088972][T15309] loop6: detected capacity change from 0 to 512
[  545.179373][T15309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.259201][T15309] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.336492][T15309] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.486635][T15309] loop6: detected capacity change from 0 to 512
[  545.594032][T15309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  545.713531][T15309] EXT4-fs (loop6): 1 truncate cleaned up
[  545.763288][T15309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  546.213687][T14972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.656781][T15336] loop4: detected capacity change from 0 to 512
[  546.698543][T15336] EXT4-fs: inline encryption not supported
[  546.776084][T15336] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  546.846938][T15336] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.3211: corrupted in-inode xattr: e_value size too large
[  546.847316][T15336] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.3211: couldn't read orphan inode 15 (err -117)
[  546.848529][T15336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.028694][T15346] loop6: detected capacity change from 0 to 1024
[  547.090055][T15346] EXT4-fs: Ignoring removed nomblk_io_submit option
[  547.090081][T15346] ext4: Unknown parameter 'measure'
[  547.110405][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.131280][T15346] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3213'.
[  547.340350][T15350] loop6: detected capacity change from 0 to 1024
[  548.086737][T15365] loop5: detected capacity change from 0 to 512
[  548.258537][T15365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.389480][T15365] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.482647][T15365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.678459][T15365] loop5: detected capacity change from 0 to 512
[  548.737549][T15365] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  548.839460][T15365] EXT4-fs (loop5): 1 truncate cleaned up
[  548.878302][T15365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  549.201476][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.596280][T15393] loop5: detected capacity change from 0 to 512
[  549.674034][T15393] EXT4-fs: inline encryption not supported
[  549.732195][T15393] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  549.770549][T15399] loop0: detected capacity change from 0 to 1024
[  549.825665][T15393] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.3222: corrupted in-inode xattr: e_value size too large
[  549.870501][T15399] EXT4-fs: Ignoring removed nomblk_io_submit option
[  549.870527][T15399] ext4: Unknown parameter 'measure'
[  549.904020][T15399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3225'.
[  549.961162][T15393] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.3222: couldn't read orphan inode 15 (err -117)
[  549.965392][T15393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  550.053083][T15393] EXT4-fs error (device loop5): ext4_check_dx_root:2266: inode #2: comm syz.5.3222: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  550.084762][T15408] loop0: detected capacity change from 0 to 1024
[  550.128278][ T6618] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  550.285954][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.086791][T15428] Mass Storage Function, version: 2009/09/11
[  551.123163][T15426] loop6: detected capacity change from 0 to 512
[  551.139437][T15428] LUN: removable file: (no medium)
[  551.246373][T15426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  551.362182][T15426] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.485689][T15426] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  551.627710][T15443] loop5: detected capacity change from 0 to 512
[  551.686761][T15426] loop6: detected capacity change from 0 to 512
[  551.752498][T15443] EXT4-fs: inline encryption not supported
[  551.790820][T15426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  551.802244][T15443] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  551.851229][T15446] loop0: detected capacity change from 0 to 1024
[  551.901430][T15443] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.3236: corrupted in-inode xattr: e_value size too large
[  551.958847][T15426] EXT4-fs (loop6): 1 truncate cleaned up
[  551.983218][T15446] hfsplus: uid requires an argument
[  551.988464][T15446] hfsplus: unable to parse mount options
[  552.015740][T15426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  552.072580][T15443] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.3236: couldn't read orphan inode 15 (err -117)
[  552.355830][T15443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  556.243172][T14972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.257436][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.526551][T15488] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  557.675059][    T9] smpboot: CPU 1 is now offline
[  557.722771][T15493] loop6: detected capacity change from 0 to 256
[  557.817711][T15493] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  558.149428][T15499] loop4: detected capacity change from 0 to 1024
[  558.228066][T15499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  558.460131][T15499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  558.501020][T15499] System zones: 0-1, 3-12
[  558.543090][T15499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.969128][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.644363][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'.
[  560.109634][T15538] syzkaller0: create flow: hash 2563248383 index 1
[  560.315001][T15537] loop4: detected capacity change from 0 to 8192
[  560.582976][ T3491] syzkaller0: tun_net_xmit 76
[  560.624990][ T3491] syzkaller0: tun_net_xmit 48
[  560.630223][ T5831] syzkaller0: tun_net_xmit 76
[  560.691443][T15532] syzkaller0: delete flow: hash 2563248383 index 1
[  561.423075][T15546] loop4: detected capacity change from 0 to 1024
[  561.458895][T15546] EXT4-fs: Ignoring removed nomblk_io_submit option
[  561.494413][T15546] ext4: Unknown parameter 'measure'
[  561.573674][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3262'.
[  561.830288][T15553] loop0: detected capacity change from 0 to 512
[  561.837323][T15551] loop4: detected capacity change from 0 to 1024
[  561.854583][T15553] EXT4-fs: Ignoring removed bh option
[  561.927350][T15553] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  562.006578][T15553] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  562.059798][T15553] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3263: Corrupt directory, running e2fsck is recommended
[  562.116032][T15553] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  562.138821][T15553] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.3263: corrupted in-inode xattr: e_name out of bounds
[  562.183261][T15553] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3263: couldn't read orphan inode 15 (err -117)
[  562.223762][T15553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.305048][T15553] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  562.347758][T15553] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  562.369032][T15553] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3263: Corrupt directory, running e2fsck is recommended
[  562.409805][T15555] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  562.459732][T15555] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it
[  562.487378][T15555] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3263: Corrupt directory, running e2fsck is recommended
[  562.590244][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.783461][T15557] loop0: detected capacity change from 0 to 512
[  562.808091][T15557] EXT4-fs: Ignoring removed i_version option
[  562.839168][T15557] EXT4-fs: Ignoring removed bh option
[  562.895118][T15557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.938475][T15557] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  563.090351][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.227763][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  563.234498][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  566.092685][T15569] bridge0: port 3(syz_tun) entered blocking state
[  566.099300][T15569] bridge0: port 3(syz_tun) entered disabled state
[  566.172591][T15569] syz_tun: entered allmulticast mode
[  566.208804][T15569] syz_tun: entered promiscuous mode
[  566.242693][T15569] bridge0: port 3(syz_tun) entered blocking state
[  566.249259][T15569] bridge0: port 3(syz_tun) entered forwarding state
[  566.374557][T15574] loop4: detected capacity change from 0 to 1024
[  566.453114][T15574] EXT4-fs (loop4): orphan cleanup on readonly fs
[  566.628251][T15574] EXT4-fs (loop4): 1 truncate cleaned up
[  566.677392][T15574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  567.191643][T15591] input: syz0 as /devices/virtual/input/input11
[  567.624285][T15598] loop5: detected capacity change from 0 to 1024
[  567.651793][T15596] loop0: detected capacity change from 0 to 1024
[  567.717508][T15596] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  567.875684][T15596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  568.049137][T15596] System zones: 0-1, 3-12
[  568.090683][T15596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.485445][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.069354][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.115506][T15638] syzkaller0: create flow: hash 2563248383 index 1
[  570.427722][T15640] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  570.474935][T15641] tmpfs: Unknown parameter 'usrquota_block_limit'
[  570.543278][ T5831] smpboot: CPU 1 is now offline
[  570.575095][ T3491] syzkaller0: tun_net_xmit 76
[  570.583667][T15641] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  570.621384][ T3491] syzkaller0: tun_net_xmit 48
[  570.626522][ T5831] syzkaller0: tun_net_xmit 76
[  570.646161][T15641] udc dummy_udc.0: failed to start g1: -19
[  570.702968][T15641] UDC core: g1: couldn't find an available UDC or it's busy
[  570.999405][T15649] capability: warning: `syz.0.3284' uses 32-bit capabilities (legacy support in use)
[  571.102228][    T9] syzkaller0: tun_net_xmit 76
[  571.153186][T15631] syzkaller0: delete flow: hash 2563248383 index 1
[  571.251581][T15655] loop5: detected capacity change from 0 to 2048
[  571.498904][T15655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.699444][T15655] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  571.802843][T15655] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  571.844484][T15655] EXT4-fs (loop5): This should not happen!! Data will be lost
[  571.844484][T15655] 
[  571.894595][T15655] EXT4-fs (loop5): Total free blocks count 0
[  571.922152][T15655] EXT4-fs (loop5): Free/Dirty block details
[  571.954794][T15655] EXT4-fs (loop5): free_blocks=2415919104
[  571.993320][T15655] EXT4-fs (loop5): dirty_blocks=16
[  572.074439][T15655] EXT4-fs (loop5): Block reservation details
[  572.080514][T15655] EXT4-fs (loop5): i_reserved_data_blocks=1
[  572.228296][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.430650][T15678] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  572.502946][    T9] smpboot: CPU 1 is now offline
[  573.764694][T15694] loop6: detected capacity change from 0 to 1024
[  573.904053][T15694] hfsplus: unknown catalog record type 0
[  574.086834][   T11] hfsplus: b-tree write err: -5, ino 25
[  574.105022][   T11] hfsplus: b-tree write err: -5, ino 4
[  574.110586][   T11] hfsplus: b-tree write err: -5, ino 2
[  576.881640][T15705] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  576.989552][ T5810] smpboot: CPU 1 is now offline
[  578.658475][ T5810] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  578.863560][ T5810] usb 6-1: Using ep0 maxpacket: 16
[  578.873325][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.902357][ T5810] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  578.941417][ T5810] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  578.971207][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.998160][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  579.022068][ T5810] usb 6-1: Product: syz
[  579.028523][ T5810] usb 6-1: Manufacturer: syz
[  579.058438][ T5810] usb 6-1: SerialNumber: syz
[  579.085228][ T5810] usb 6-1: config 0 descriptor??
[  579.162453][    T9] usb 1-1: device descriptor read/64, error -71
[  579.328258][T15734] loop5: detected capacity change from 0 to 512
[  579.452277][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  579.475491][T15734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.542534][T15734] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  579.652663][    T9] usb 1-1: device descriptor read/64, error -71
[  579.681660][ T5810] usb 6-1: USB disconnect, device number 3
[  579.787683][    T9] usb usb1-port1: attempt power cycle
[  580.200342][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.222565][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  580.312470][    T9] usb 1-1: device descriptor read/8, error -71
[  580.597376][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  580.645116][    T9] usb 1-1: device descriptor read/8, error -71
[  580.753000][T15747] loop5: detected capacity change from 0 to 1024
[  580.789309][    T9] usb usb1-port1: unable to enumerate USB device
[  580.798393][T15747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  580.901596][T15747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  580.947153][T15747] System zones: 0-1, 3-12
[  580.967806][T15747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  581.319192][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.487415][T15754] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3315'.
[  583.966992][T15780] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3324'.
[  584.026014][T15783] binder: 15781:15783 ioctl 4018620d 0 returned -22
[  584.242154][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  584.827837][    T9] usb 1-1: device descriptor read/64, error -71
[  585.115515][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  585.342037][    T9] usb 1-1: device descriptor read/64, error -71
[  585.492713][    T9] usb usb1-port1: attempt power cycle
[  585.869975][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3336'.
[  585.962501][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  586.022981][    T9] usb 1-1: device descriptor read/8, error -71
[  586.205110][T15826] binder: 15825:15826 ioctl 4018620d 0 returned -22
[  586.342063][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  586.422687][    T9] usb 1-1: device descriptor read/8, error -71
[  586.497749][T15829] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  586.572710][    T9] usb usb1-port1: unable to enumerate USB device
[  586.620218][ T5810] smpboot: CPU 1 is now offline
[  587.145397][T15840] loop0: detected capacity change from 0 to 1024
[  587.183796][T15840] EXT4-fs: Ignoring removed nomblk_io_submit option
[  587.247940][T15840] ext4: Unknown parameter 'measure'
[  587.308971][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3342'.
[  587.518016][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  587.714096][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  587.740664][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  587.797907][    T9] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  587.838229][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.882669][    T9] usb 5-1: config 0 descriptor??
[  587.996509][T15851] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3345'.
[  588.316286][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x0
[  588.360777][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x0
[  588.395871][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x0
[  588.420365][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x0
[  588.468859][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x0
[  588.507215][    T9] cherry 0003:046A:0027.0002: unknown main item tag 0x5
[  588.546706][    T9] cherry 0003:046A:0027.0002: item fetching failed at offset 34/40
[  588.589925][    T9] cherry: probe of 0003:046A:0027.0002 failed with error -22
[  588.618016][T15858] binder: 15857:15858 ioctl 4018620d 0 returned -22
[  588.645824][    T9] usb 5-1: USB disconnect, device number 7
[  588.844045][T15860] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  588.943492][T15269] smpboot: CPU 1 is now offline
[  590.679190][T15880] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3354'.
[  591.161527][T15886] binder: BINDER_SET_CONTEXT_MGR already set
[  591.203171][T15886] binder: 15885:15886 ioctl 4018620d 200000004a80 returned -16
[  591.902417][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3363'.
[  593.255489][T15914] binder: BINDER_SET_CONTEXT_MGR already set
[  593.297500][T15914] binder: 15913:15914 ioctl 4018620d 200000004a80 returned -16
[  594.042389][T15929] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3372'.
[  595.712530][ T5810] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  595.914325][ T5810] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  595.971015][ T5810] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  596.141676][ T5810] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[  596.215897][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.285262][ T5810] usb 6-1: Product: syz
[  596.322045][ T5810] usb 6-1: Manufacturer: syz
[  596.345389][ T5810] usb 6-1: SerialNumber: syz
[  596.389901][T15942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  596.425502][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3382'.
[  596.446890][T15942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  596.526666][ T5810] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  596.600661][ T5810] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  596.702975][ T5810] usbserial_generic 6-1:1.0: generic converter detected
[  596.771125][ T5810] usb 6-1: generic converter now attached to ttyUSB0
[  597.232298][T13900] usb 6-1: USB disconnect, device number 4
[  597.277309][T13900] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  597.355287][T13900] usbserial_generic 6-1:1.0: device disconnected
[  598.845156][T16018] kvm: pic: level sensitive irq not supported
[  599.193157][T16023] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3392'.
[  599.244851][T16022] configfs-gadget.g1 gadget.0: afunc_bind:1242 Error!
[  599.251862][T16022] udc dummy_udc.0: failed to start g1: -19
[  599.351848][T16022] UDC core: g1: couldn't find an available UDC or it's busy
[  601.994443][T16066] loop6: detected capacity change from 0 to 256
[  602.006795][T16062] loop4: detected capacity change from 0 to 1024
[  602.041124][T16062] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  602.200848][T16062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  602.200939][T16062] System zones: 0-1, 3-12
[  602.213055][T16062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  602.485810][T13294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.021382][T16078] kvm: pic: level sensitive irq not supported
[  603.729911][T16094] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3415'.
[  604.112411][T16096] loop6: detected capacity change from 0 to 1024
[  604.168538][T16096] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  604.306685][T16096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  604.351013][T16096] System zones: 0-1, 3-12
[  604.387867][T16096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  604.681692][T16103] loop5: detected capacity change from 0 to 512
[  604.775483][T14972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.813846][T16103] EXT4-fs (loop5): inodes count not valid: 40 vs 32
[  607.340645][T16116] kvm: pic: level sensitive irq not supported
[  607.634554][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3424'.
[  609.000575][T16107] netlink: 'syz.6.3418': attribute type 16 has an invalid length.
[  609.009859][T16107] netlink: 'syz.6.3418': attribute type 17 has an invalid length.
[  609.067601][T16107] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  609.167297][T16124] bridge0: port 3(wlan1) entered blocking state
[  609.191627][T16124] bridge0: port 3(wlan1) entered disabled state
[  609.224175][T16124] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  609.277076][T16124] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  610.343183][T16149] kvm: pic: level sensitive irq not supported
[  614.942712][T15269] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  615.206745][T15269] usb 5-1: Using ep0 maxpacket: 32
[  615.244522][T15269] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  615.285605][T15269] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  615.359383][T15269] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  615.403614][T15269] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  615.448772][T15269] usb 5-1: Product: syz
[  615.482313][T15269] usb 5-1: Manufacturer: syz
[  616.659597][T16222] kvm: pic: level sensitive irq not supported
[  616.659665][T16222] kvm: pic: single mode not supported
[  616.666106][T16222] kvm: pic: level sensitive irq not supported
[  617.744009][T15269] usb 5-1: USB disconnect, device number 8
[  618.465432][T16254] loop6: detected capacity change from 0 to 1024
[  618.702666][ T1101] hfsplus: b-tree write err: -5, ino 25
[  618.708434][ T1101] hfsplus: b-tree write err: -5, ino 4
[  618.762815][ T1101] hfsplus: b-tree write err: -5, ino 2
[  618.800759][ T1101] hfsplus: b-tree write err: -5, ino 26
[  619.600754][T16267] loop6: detected capacity change from 0 to 512
[  619.624000][T16267] EXT4-fs (loop6): Test dummy encryption mode enabled
[  619.676919][T16267] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.3467: inode has both inline data and extents flags
[  619.725845][T16267] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.3467: couldn't read orphan inode 15 (err -117)
[  619.778312][T16267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.208441][T16267] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  621.299967][T14972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.009818][T16291] loop6: detected capacity change from 0 to 1024
[  624.386459][T16334] loop6: detected capacity change from 0 to 1024
[  624.667064][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  624.674786][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  628.037414][T16362] loop0: detected capacity change from 0 to 512
[  628.060459][T16362] EXT4-fs: Ignoring removed i_version option
[  628.123745][T16362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.272343][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.716735][T15269] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  628.912124][T15269] usb 1-1: Using ep0 maxpacket: 32
[  628.935839][T15269] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  628.965160][T15269] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  628.998189][T15269] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  629.029557][T15269] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  629.052960][T15269] usb 1-1: Product: syz
[  629.057170][T15269] usb 1-1: Manufacturer: syz
[  629.088826][T15269] hub 1-1:4.0: bad descriptor, ignoring hub
[  629.102181][T15269] hub: probe of 1-1:4.0 failed with error -5
[  629.129249][T15269] usbhid 1-1:4.0: couldn't find an input interrupt endpoint
[  631.082104][    T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  631.615418][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  631.650463][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  631.701792][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 56, changing to 4
[  631.781854][    T9] usb 7-1: string descriptor 0 read error: -22
[  631.831400][    T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40
[  631.866012][ T5811] usb 1-1: USB disconnect, device number 21
[  631.888884][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.069157][    T9] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  632.195161][    T9] usb 7-1: found format II with max.bitrate = 2, frame size=2
[  632.246135][    T9] usb 7-1: found format II with max.bitrate = 2, frame size=2
[  632.564377][    T9] usb 7-1: USB disconnect, device number 2
[  632.832957][T16405] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  633.155527][T16412] loop6: detected capacity change from 0 to 1024
[  633.471524][ T1079] syzkaller0: tun_net_xmit 76
[  633.487030][ T1079] syzkaller0: tun_net_xmit 48
[  633.497514][ T5958] syzkaller0: tun_net_xmit 76
[  634.310748][ T5810] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  634.534362][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  634.554241][ T5810] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  634.586699][ T5810] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  634.635372][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  634.671949][ T5810] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  634.702260][ T5810] usb 1-1: Product: syz
[  634.709572][ T5810] usb 1-1: Manufacturer: syz
[  634.760878][ T5810] hub 1-1:4.0: bad descriptor, ignoring hub
[  634.791024][ T5810] hub: probe of 1-1:4.0 failed with error -5
[  634.824615][ T5810] usbhid 1-1:4.0: couldn't find an input interrupt endpoint
[  635.172297][T16467] loop6: detected capacity change from 0 to 2048
[  635.221911][T16470] loop5: detected capacity change from 0 to 1024
[  635.254200][T16467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  637.433600][T15269] usb 1-1: USB disconnect, device number 22
[  639.676404][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  639.815581][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  639.869189][    T9] usb 6-1: Using ep0 maxpacket: 32
[  639.883299][T16539] loop0: detected capacity change from 0 to 512
[  639.902536][    T9] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  639.917321][    T9] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  639.934604][T16539] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  639.946141][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  639.959319][T16539] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  639.974977][    T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  639.998522][T16539] EXT4-fs (loop0): orphan cleanup on readonly fs
[  640.026368][ T5811] usb 5-1: Using ep0 maxpacket: 8
[  640.033223][T16539] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  640.050601][    T9] usb 6-1: Product: syz
[  640.054875][    T9] usb 6-1: Manufacturer: syz
[  640.086778][ T5811] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  640.105995][ T5811] usb 5-1: config 179 has no interface number 0
[  640.118325][    T9] hub 6-1:4.0: bad descriptor, ignoring hub
[  640.125787][T16539] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  640.138052][ T5811] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  640.156692][    T9] hub: probe of 6-1:4.0 failed with error -5
[  640.163793][T16539] EXT4-fs (loop0): 1 orphan inode deleted
[  640.172366][    T9] usbhid 6-1:4.0: couldn't find an input interrupt endpoint
[  640.182482][T16539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  640.195315][ T5811] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  640.211239][ T5811] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  640.248379][ T5811] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  640.359633][ T5811] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  640.376492][ T5811] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  640.387393][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.401072][T16530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  640.420742][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.071162][T15269] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13
[  641.573224][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  641.581631][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  641.591589][ T5810] usb 5-1: USB disconnect, device number 9
[  641.654658][ T5810] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  642.134062][T15269] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  642.351827][T15269] usb 1-1: Using ep0 maxpacket: 16
[  642.364726][T15269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  642.402428][T15269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  642.427818][T15269] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  642.457095][T15269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  642.465179][T15269] usb 1-1: SerialNumber: syz
[  642.515189][T15269] usb 1-1: 0:2 : does not exist
[  642.895052][    T9] usb 6-1: USB disconnect, device number 5
[  643.301696][T16577] loop0: detected capacity change from 0 to 4096
[  643.310377][T16577] EXT4-fs: Ignoring removed nomblk_io_submit option
[  643.367729][T16577] EXT4-fs (loop0): Test dummy encryption mode enabled
[  643.412502][T16577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  643.468684][T16577] EXT4-fs error (device loop0): __ext4_remount:6756: comm syz.0.3534: Abort forced by user
[  643.501590][T16577] EXT4-fs (loop0): Remounting filesystem read-only
[  643.509116][T16577] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  643.574510][T15269] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  643.642797][T15269] usb 1-1: USB disconnect, device number 23
[  644.277459][T12057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.868274][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'.
[  648.007924][T16655] loop0: detected capacity change from 0 to 1024
[  648.213681][T16660] loop6: detected capacity change from 0 to 1024
[  648.250387][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  648.262117][T16660] EXT4-fs: Ignoring removed orlov option
[  648.267963][T16660] ext4: Unknown parameter 'rootcontext'
[  648.617371][ T2115] syzkaller0: tun_net_xmit 76
[  648.622352][ T2115] syzkaller0: tun_net_xmit 48
[  648.646570][ T5800] syzkaller0: tun_net_xmit 76
[  648.678215][ T5958] syzkaller0: tun_net_xmit 76
[  648.776720][T16671] syzkaller0: entered promiscuous mode
[  648.782275][T16671] syzkaller0: entered allmulticast mode
[  649.590887][T16686] loop6: detected capacity change from 0 to 1024
[  655.836588][ T5810] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  656.044246][ T5810] usb 5-1: Using ep0 maxpacket: 32
[  656.063456][ T5810] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  656.102135][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  656.111727][ T5810] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  656.132175][ T5810] usb 5-1: Product: syz
[  656.136392][ T5810] usb 5-1: Manufacturer: syz
[  656.168472][ T5810] hub 5-1:4.0: bad descriptor, ignoring hub
[  656.174561][ T5810] hub: probe of 5-1:4.0 failed with error -5
[  656.195387][ T5810] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  656.775962][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3565'.
[  657.033769][T16727] loop0: detected capacity change from 0 to 128
[  657.056317][T16727] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  657.111939][T16727] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  657.222524][ T1079] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  657.268761][T16727] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  657.380049][ T5810] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  657.593799][ T5810] usb 7-1: Using ep0 maxpacket: 16
[  657.611888][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.634193][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.654944][ T5810] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  657.679308][ T5810] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  657.699508][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.723566][ T5810] usb 7-1: config 0 descriptor??
[  658.227066][ T5810] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description
[  658.275571][ T5810] microsoft 0003:045E:07DA.0003: parse failed
[  658.308510][ T5810] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[  658.490591][T15269] usb 7-1: USB disconnect, device number 3
[  658.943793][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3590'.
[  659.208383][ T5811] usb 5-1: USB disconnect, device number 10
[  659.629643][T16766] loop6: detected capacity change from 0 to 1024
[  659.741563][T16766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.340551][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3599'.
[  660.487134][T14972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.520072][T16784] input: syz0 as /devices/virtual/input/input14
[  662.112178][T16811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3611'.
[  663.870096][T16830] loop5: detected capacity change from 0 to 1024
[  664.075681][T16832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  664.116401][ T5800] wlan1: authenticate with 08:02:11:00:00:00
[  664.135580][ T5800] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  664.265625][   T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  664.425278][ T1101] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  664.553827][   T11] wlan1: authentication with 08:02:11:00:00:00 timed out
[  665.244288][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'.
[  665.644191][T16869] 9pnet: p9_errstr2errno: server reported unknown error 00000000000
[  665.912645][T16874] netlink: 'syz.6.3635': attribute type 3 has an invalid length.
[  666.424379][ T5811] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  666.651278][ T5811] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.651335][ T5811] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  666.653252][ T5811] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice= 0.40
[  666.653274][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.653289][ T5811] usb 7-1: Product: syz
[  666.653303][ T5811] usb 7-1: Manufacturer: syz
[  666.653315][ T5811] usb 7-1: SerialNumber: syz
[  666.944714][ T5811] snd_usb_toneport 7-1:1.2: Line 6 GuitarPort found
[  666.969800][ T5811] usb 7-1: selecting invalid altsetting 2
[  666.988118][ T5811] snd_usb_toneport 7-1:1.2: set_interface failed
[  667.008622][ T5811] snd_usb_toneport 7-1:1.2: Line 6 GuitarPort now disconnected
[  667.029071][ T5811] snd_usb_toneport: probe of 7-1:1.2 failed with error -22
[  667.063682][ T5811] usb 7-1: USB disconnect, device number 4
[  667.321786][T16899] loop5: detected capacity change from 0 to 4096
[  667.356553][T16899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  667.397620][T16899] ext4: Bad value for 'journal_ioprio'
[  667.407534][T16899] input: syz0 as /devices/virtual/input/input15
[  667.418721][T16899] input: failed to attach handler leds to device input15, error: -6
[  667.550004][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.776858][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3650'.
[  672.054156][T16966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3666'.
[  675.158669][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3682'.
[  676.786324][T17025] fuse: Bad value for 'fd'
[  677.892007][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3698'.
[  679.676606][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'.
[  679.707378][T17078] loop5: detected capacity change from 0 to 512
[  679.716100][T17074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'.
[  679.738685][T17078] EXT4-fs (loop5): Test dummy encryption mode enabled
[  679.778335][T17078] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.3710: inode has both inline data and extents flags
[  679.818058][T17078] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.3710: couldn't read orphan inode 15 (err -117)
[  679.854071][T17078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  680.027713][T13943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  681.675594][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3718'.
[  681.908396][T17111] xt_hashlimit: max too large, truncated to 1048576
[  681.944024][T17111] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  684.622298][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3735'.
[  687.548862][T15269] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  687.634551][ T5810] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  687.742725][T15269] usb 5-1: Using ep0 maxpacket: 32
[  687.751587][T15269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.771092][T15269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  687.793969][T15269] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  687.803704][T15269] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  687.821306][T15269] usb 5-1: Product: syz
[  687.830535][T15269] usb 5-1: Manufacturer: syz
[  687.849432][ T5810] usb 7-1: Using ep0 maxpacket: 8
[  687.864140][ T5810] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  687.888355][ T5810] usb 7-1: config 0 interface 0 has no altsetting 0
[  687.897451][T15269] hub 5-1:4.0: USB hub found
[  687.912458][ T5810] usb 7-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[  687.935025][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.947071][ T5810] usb 7-1: config 0 descriptor??
[  688.078736][T15269] hub 5-1:4.0: config failed, can't read hub descriptor (err -22)
[  688.410714][ T5810] hid (null): unknown global tag 0xd
[  688.420211][ T5810] hid (null): unknown global tag 0xd
[  688.432123][ T5810] hid (null): unknown global tag 0xe
[  688.441625][ T5810] logitech-djreceiver 0003:046D:C70E.0004: unknown global tag 0xd
[  688.450213][ T5810] logitech-djreceiver 0003:046D:C70E.0004: item 0 0 1 13 parsing failed
[  688.459746][ T5810] logitech-djreceiver 0003:046D:C70E.0004: logi_dj_probe: parse failed
[  688.470165][ T5810] logitech-djreceiver: probe of 0003:046D:C70E.0004 failed with error -22
[  688.551222][T17203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3754'.
[  688.636120][T15269] usb 7-1: USB disconnect, device number 5
[  689.823699][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  689.830275][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  690.649552][    T9] usb 5-1: USB disconnect, device number 11
[  691.697213][T15269] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  691.902563][T15269] usb 6-1: Using ep0 maxpacket: 32
[  691.913237][T15269] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.924663][T15269] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.946123][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3770'.
[  691.959431][T15269] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  691.970110][T15269] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  691.989486][T15269] usb 6-1: Product: syz
[  691.998834][T15269] usb 6-1: Manufacturer: syz
[  692.032149][T15269] hub 6-1:4.0: USB hub found
[  692.252392][T15269] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  694.017732][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3787'.
[  694.882653][    T9] usb 6-1: USB disconnect, device number 6
[  695.050605][T17311] loop5: detected capacity change from 0 to 256
[  696.498764][T17313] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.506690][T17313] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.796247][ T5811] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  697.010028][ T5811] usb 6-1: Using ep0 maxpacket: 32
[  697.024752][ T5811] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.058006][ T5811] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.088720][ T5811] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  697.127718][ T5811] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  697.168655][ T5811] usb 6-1: Product: syz
[  697.181485][ T5811] usb 6-1: Manufacturer: syz
[  697.228035][ T5811] hub 6-1:4.0: USB hub found
[  697.485429][ T5811] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  698.021152][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  698.152967][T17313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  699.407357][T17313] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.427659][T17313] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.447721][T17313] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.465152][T17313] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.807612][T17350] mac80211_hwsim hwsim19 wlan1 (unregistering): left allmulticast mode
[  699.851046][T17350] mac80211_hwsim hwsim19 wlan1 (unregistering): left promiscuous mode
[  699.886119][ T5811] usb 6-1: USB disconnect, device number 7
[  699.897768][T17350] bridge0: port 3(wlan1) entered disabled state
[  700.244472][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3805'.
[  701.160120][T17368] "syz.5.3811" (17368) uses obsolete ecb(arc4) skcipher
[  701.202385][T17368] trusted_key: syz.5.3811 sent an empty control message without MSG_MORE.
[  702.141599][T17334] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  702.473056][T17334] usb 7-1: Using ep0 maxpacket: 32
[  702.486049][T17334] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  702.517854][T17334] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  702.564768][T17334] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  702.590767][T17334] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  702.612161][T17334] usb 7-1: Product: syz
[  702.621127][T17334] usb 7-1: Manufacturer: syz
[  702.659793][T17334] hub 7-1:4.0: USB hub found
[  702.899266][T17334] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  705.060489][T17334] usb 7-1: USB disconnect, device number 6
[  712.185706][ T5810] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  712.383209][ T5810] usb 7-1: Using ep0 maxpacket: 32
[  712.424000][ T5810] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  712.456214][ T5810] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.504043][ T5810] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  712.536048][ T5810] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  712.564979][ T5810] usb 7-1: Product: syz
[  712.575789][ T5810] usb 7-1: Manufacturer: syz
[  712.601737][ T5810] hub 7-1:4.0: USB hub found
[  712.859628][T17532] syz_tun: left allmulticast mode
[  712.865167][T17532] syz_tun: left promiscuous mode
[  712.870421][T17532] bridge0: port 3(syz_tun) entered disabled state
[  712.892607][T17532] bridge_slave_0: left allmulticast mode
[  712.898859][T17532] bridge_slave_0: left promiscuous mode
[  712.904988][T17532] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.931780][T17532] bridge_slave_1: left allmulticast mode
[  712.937735][T17532] bridge_slave_1: left promiscuous mode
[  712.944142][T17532] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.958843][T17532] bond0: (slave bond_slave_0): Releasing backup interface
[  712.988502][T17532] bond0: (slave bond_slave_1): Releasing backup interface
[  713.033206][ T5810] hub 7-1:4.0: config failed, can't read hub descriptor (err -22)
[  713.068146][T17532] team0: Port device team_slave_0 removed
[  713.100265][T17532] team0: Port device team_slave_1 removed
[  713.116098][T17532] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  713.127363][T17532] batman_adv: batadv0: Removing interface: batadv_slave_0
[  713.137112][T17532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  713.145521][T17532] batman_adv: batadv0: Removing interface: batadv_slave_1
[  713.310935][T17536] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3863'.
[  714.741357][T17556] netlink: 'syz.0.3871': attribute type 4 has an invalid length.
[  715.048352][T17564] netlink: 'syz.0.3873': attribute type 4 has an invalid length.
[  715.313390][ T5831] usb 7-1: USB disconnect, device number 7
[  716.274849][T17334] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  716.488390][T17334] usb 6-1: Using ep0 maxpacket: 32
[  716.509253][T17334] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.555580][T17334] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.601464][T17334] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  716.630876][T17334] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  716.659600][T17334] usb 6-1: Product: syz
[  716.691938][T17334] usb 6-1: Manufacturer: syz
[  716.731683][T17334] hub 6-1:4.0: USB hub found
[  717.176252][T17334] hub 6-1:4.0: config failed, can't read hub descriptor (err -22)
[  730.471306][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  730.499782][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  730.513390][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  730.523958][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  730.532242][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  730.540168][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  730.967016][T17613] chnl_net:caif_netlink_parms(): no params data found
[  731.158963][T17613] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.166280][T17613] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.184535][T17613] bridge_slave_0: entered allmulticast mode
[  731.195165][T17613] bridge_slave_0: entered promiscuous mode
[  731.213587][T17613] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.231046][T17613] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.238383][T17613] bridge_slave_1: entered allmulticast mode
[  731.271052][T17613] bridge_slave_1: entered promiscuous mode
[  731.363951][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  731.406379][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  731.501629][T17613] team0: Port device team_slave_0 added
[  731.528689][T17613] team0: Port device team_slave_1 added
[  731.598953][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.615485][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.656796][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.682131][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.689236][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.728418][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.561304][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  732.572707][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  732.582262][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  732.593394][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  732.613089][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  732.620912][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  732.750245][T14973] Bluetooth: hci4: command tx timeout
[  733.588856][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  733.599617][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  733.609946][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  733.619984][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  733.628670][ T5086] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  733.638024][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  734.576433][T14973] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  734.598429][T14973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  734.608483][T14973] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  734.617147][T14973] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  734.626583][T14973] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  734.634301][T14973] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  734.801705][ T5086] Bluetooth: hci5: command tx timeout
[  734.972649][ T5086] Bluetooth: hci4: command tx timeout
[  735.838708][ T5086] Bluetooth: hci6: command tx timeout
[  736.855190][ T5086] Bluetooth: hci7: command tx timeout
[  737.025149][T14973] Bluetooth: hci5: command tx timeout
[  737.196384][ T5086] Bluetooth: hci4: command tx timeout
[  738.051402][ T5086] Bluetooth: hci6: command tx timeout
[  739.088282][ T5086] Bluetooth: hci7: command tx timeout
[  739.248662][ T5086] Bluetooth: hci5: command tx timeout
[  739.426481][ T5086] Bluetooth: hci4: command tx timeout
[  740.275122][ T5086] Bluetooth: hci6: command tx timeout
[  741.301391][ T5086] Bluetooth: hci7: command tx timeout
[  741.474605][ T5086] Bluetooth: hci5: command tx timeout
[  742.509726][ T5086] Bluetooth: hci6: command tx timeout
[  743.535829][T14973] Bluetooth: hci7: command tx timeout
[  755.503608][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  755.519846][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  795.083435][ T5086] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  795.094757][ T5086] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  795.106744][ T5086] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  795.115222][ T5086] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  795.123591][ T5086] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  795.131251][ T5086] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  797.405637][ T5086] Bluetooth: hci8: command tx timeout
[  797.706052][T14973] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  797.720548][T14973] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  797.729984][T14973] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  797.738766][T14973] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  797.746788][T14973] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  797.754896][T14973] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  798.302997][ T5086] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  798.316419][ T5086] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  798.325497][ T5086] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  798.336060][ T5086] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  798.356771][ T5086] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  798.364999][ T5086] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  799.620613][ T5086] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  799.637388][ T5086] Bluetooth: hci8: command tx timeout
[  799.645072][T17665] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  799.655741][T17665] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  799.666868][T17665] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  799.675393][T17665] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  799.683133][T17665] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  799.982475][T17665] Bluetooth: hci9: command tx timeout
[  800.570439][T17665] Bluetooth: hci10: command tx timeout
[  801.852964][T14973] Bluetooth: hci8: command tx timeout
[  801.858609][T17665] Bluetooth: hci11: command tx timeout
[  802.195142][T17665] Bluetooth: hci9: command tx timeout
[  802.793692][T17665] Bluetooth: hci10: command tx timeout
[  804.076932][ T5776] Bluetooth: hci8: command tx timeout
[  804.082635][T14973] Bluetooth: hci11: command tx timeout
[  804.418654][T17665] Bluetooth: hci9: command tx timeout
[  805.017462][T17665] Bluetooth: hci10: command tx timeout
[  806.300735][T17665] Bluetooth: hci11: command tx timeout
[  806.642457][T17665] Bluetooth: hci9: command tx timeout
[  807.251545][T17665] Bluetooth: hci10: command tx timeout
[  808.534850][T17665] Bluetooth: hci11: command tx timeout
[  821.186768][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  821.195548][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  859.690232][ T5776] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  859.703191][ T5776] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  859.712396][ T5776] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  859.728160][ T5776] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  859.736649][ T5776] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  859.744491][ T5776] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  861.723037][ T5776] Bluetooth: hci4: command 0x0406 tx timeout
[  861.977011][ T5776] Bluetooth: hci12: command tx timeout
[  863.146226][T14973] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  863.157342][T14973] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  863.168277][T14973] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  863.177051][T14973] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  863.188016][T14973] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  863.196000][T14973] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  863.307470][T17680] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  863.319466][T17680] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  863.329688][T17680] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  863.342062][T17680] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  863.350802][T17680] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  863.365395][T17680] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  864.201975][T14973] Bluetooth: hci12: command tx timeout
[  864.224220][T17683] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  864.243408][T17683] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  864.261521][T17683] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  864.270735][T17683] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  864.280987][T17683] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  864.289183][T17683] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  866.424132][T17687] Bluetooth: hci12: command tx timeout
[  867.199880][T17686] Bluetooth: hci6: command 0x0406 tx timeout
[  867.207710][T17687] Bluetooth: hci5: command 0x0406 tx timeout
[  867.213801][T17687] Bluetooth: hci7: command 0x0406 tx timeout
[  868.648022][T17689] Bluetooth: hci12: command tx timeout
[  875.918233][    C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 147s!
[  875.927847][    C0] Showing busy workqueues and worker pools:
[  875.933862][    C0] workqueue events: flags=0x0
[  875.938736][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=25/256 refcnt=26
[  875.938782][    C0]     pending: 9*ovs_dp_masks_rebalance, 2*psi_avgs_work, 7*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 2*psi_avgs_work, kfree_rcu_monitor, switchdev_deferred_process_work, 2*rht_deferred_worker
[  875.939147][    C0] workqueue events_long: flags=0x0
[  875.971645][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=13/256 refcnt=14
[  875.971693][    C0]     pending: 9*defense_work_handler, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup
[  875.971938][    C0] workqueue events_unbound: flags=0x2
[  875.997336][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=5
[  875.997377][    C0]     in-flight: 3448:toggle_allocation_gate, 3491:nsim_dev_trap_report_work, 1101:nsim_dev_trap_report_work, 11:linkwatch_event
[  875.997561][    C0] workqueue events_freezable: flags=0x4
[  876.023762][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.023814][    C0]     pending: update_balloon_stats_func
[  876.023909][    C0] workqueue events_power_efficient: flags=0x80
[  876.043535][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=8/256 refcnt=9
[  876.043583][    C0]     pending: fb_flashcursor, wg_ratelimiter_gc_entries, 2*neigh_managed_work, neigh_periodic_work, do_cache_clean, neigh_periodic_work, gc_worker
[  876.043924][    C0] workqueue mm_percpu_wq: flags=0x8
[  876.071939][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.071985][    C0]     pending: vmstat_update
[  876.072025][    C0] workqueue kblockd: flags=0x18
[  876.089297][    C0]   pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2
[  876.089340][    C0]     pending: blk_mq_requeue_work
[  876.089450][    C0] workqueue dm_bufio_cache: flags=0x8
[  876.107901][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.107962][    C0]     pending: work_fn
[  876.108097][    C0] workqueue ipv6_addrconf: flags=0xe000a
[  876.125631][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=13
[  876.125670][    C0]     in-flight: 1079:addrconf_verify_work
[  876.125769][    C0]     inactive: 9*addrconf_verify_work
[  876.125802][    C0] workqueue bat_events: flags=0xe000a
[  876.149802][    C0]   pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=10
[  876.149842][    C0]     in-flight: 2115:batadv_nc_worker
[  876.149990][    C0]     inactive: 4*batadv_nc_worker, 2*batadv_mcast_mla_update
[  876.150071][    C0] workqueue wg-crypt-wg0: flags=0x28
[  876.175665][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  876.175707][    C0]     pending: wg_packet_encrypt_worker, 2*wg_packet_tx_worker
[  876.175762][    C0] workqueue wg-crypt-wg1: flags=0x28
[  876.196398][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  876.196450][    C0]     pending: wg_packet_encrypt_worker, 2*wg_packet_tx_worker
[  876.196498][    C0] workqueue wg-crypt-wg2: flags=0x28
[  876.217122][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  876.217173][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker
[  876.217224][    C0] workqueue wg-crypt-wg0: flags=0x28
[  876.237709][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  876.237771][    C0]     pending: wg_packet_encrypt_worker, 2*wg_packet_tx_worker
[  876.237834][    C0] workqueue wg-crypt-wg1: flags=0x28
[  876.258563][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.258619][    C0]     pending: wg_packet_encrypt_worker
[  876.258659][    C0] workqueue wg-crypt-wg2: flags=0x28
[  876.277452][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.277509][    C0]     pending: wg_packet_encrypt_worker
[  876.277549][    C0] workqueue wg-kex-wg0: flags=0x24
[  876.296135][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.296191][    C0]     pending: wg_packet_handshake_receive_worker
[  876.296234][    C0] workqueue wg-crypt-wg0: flags=0x28
[  876.315757][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5
[  876.315800][    C0]     pending: wg_packet_encrypt_worker, 2*wg_packet_tx_worker, wg_packet_decrypt_worker
[  876.315869][    C0] workqueue wg-crypt-wg1: flags=0x28
[  876.338787][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3
[  876.338842][    C0]     pending: wg_packet_encrypt_worker, wg_packet_tx_worker
[  876.338888][    C0] workqueue wg-kex-wg2: flags=0x24
[  876.359181][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2
[  876.359245][    C0]     pending: wg_packet_handshake_receive_worker
[  876.359281][    C0] workqueue wg-crypt-wg2: flags=0x28
[  876.378841][    C0]   pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4
[  876.378893][    C0]     pending: wg_packet_tx_worker, wg_packet_encrypt_worker, wg_packet_tx_worker
[  876.378966][    C0] workqueue hci4: flags=0xa0012
[  876.400855][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4
[  876.400898][    C0]     in-flight: 17665:hci_cmd_sync_work
[  876.401023][    C0] workqueue hci5: flags=0xa0012
[  876.419521][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4
[  876.419563][    C0]     in-flight: 17685:hci_cmd_sync_work
[  876.419601][    C0] workqueue hci6: flags=0xa0012
[  876.438100][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4
[  876.438144][    C0]     in-flight: 5086:hci_cmd_sync_work
[  876.438182][    C0] workqueue hci7: flags=0xa0012
[  876.456581][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=4
[  876.456625][    C0]     in-flight: 14973:hci_cmd_sync_work
[  876.456667][    C0] workqueue hci13: flags=0xa0012
[  876.475267][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=5
[  876.475313][    C0]     in-flight: 5776:hci_rx_work
[  876.475422][    C0]     inactive: hci_cmd_work
[  876.475445][    C0] workqueue hci14: flags=0xa0012
[  876.498103][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=6
[  876.498153][    C0]     in-flight: 17680:hci_rx_work
[  876.498184][    C0]     inactive: hci_rx_work, hci_cmd_work
[  876.498229][    C0] workqueue hci15: flags=0xa0012
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  876.522161][    C0]   pwq 5: cpus=0-1 node=0 flags=0x4 nice=-20 active=1/1 refcnt=5
[  876.522212][    C0]     in-flight: 17683:hci_rx_work
[  876.522242][    C0]     inactive: hci_cmd_work
[  876.522272][    C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=9 idle: 2115 1101 34 76 12
[  876.522334][    C0] pool 5: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=11 idle: 17689 17688 17687 17686
[  876.522410][    C0] Showing backtraces of running workers in stalled CPU-bound worker pools: