last executing test programs:

4m49.520611382s ago: executing program 0 (id=536):
r0 = gettid()
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x1, 0x7fff, {<r2=>r0}, {}, 0x6, 0x7})
r3 = syz_open_procfs(r2, &(0x7f0000000080)='cmdline\x00')
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x2, 0x12)
read$FUSE(r3, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x5ecfb203)
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0)

4m45.372181591s ago: executing program 0 (id=542):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000010800)={0x0, 0x0, &(0x7f00000107c0)={&(0x7f0000003840)=@delchain={0x1584, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x9, 0x6}, {0xd, 0x2}}, [@f_tcindex={{0xc}, {0xbc, 0x2, [@TCA_TCINDEX_POLICE={0x4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x9}}, @TCA_TCINDEX_POLICE={0x94, 0x6, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x5, 0x9, 0x7, 0xfffff2cc, {0x6f, 0x2, 0x9, 0x8000, 0x8, 0x10}, {0x6, 0x0, 0x2a8c, 0x5, 0x1, 0x7}, 0x8, 0x4, 0xafe}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x6, 0x5, 0x7ff, {0x7, 0x0, 0x0, 0x3, 0x400, 0x1ff}, {0xbb, 0x1, 0x6, 0x8, 0x1, 0x116}, 0x9, 0x1, 0x3}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x4322}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x60a2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xe}}]}}, @f_rsvp={{0x9}, {0x148c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_RSVP_POLICE={0x47c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x95, 0x6, 0x1, 0x10, 0x9, {0x8, 0x1, 0x200, 0x7, 0x5, 0x5}, {0x7, 0x2, 0x101, 0x1, 0x4a, 0x4}, 0x7, 0xffff1380, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x5, 0x1, 0x1, 0x5e, 0x64, 0x7, 0xd, 0xf, 0xb7d, 0x81, 0x2, 0xfffffff7, 0x9, 0x6c, 0x2, 0x8, 0x4, 0x1, 0x8000, 0xdd, 0x7, 0x4, 0x4, 0x0, 0x8001, 0x2, 0x8, 0xff, 0x0, 0x3, 0x9, 0x81, 0x4, 0x7860fe36, 0x3, 0x5, 0x1, 0x200, 0x7fff, 0xfffffffa, 0x3, 0x9ea, 0x6, 0x6, 0x8, 0x10001, 0x1, 0x0, 0x5, 0x3, 0x3, 0x10001, 0x4, 0x6, 0x101, 0xc56a746b, 0x2, 0x8, 0x7fffffff, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x240b, 0x2, 0x44bd, 0x9, 0xfffffffb, 0x1, 0x3, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x4, 0x3, 0x1, 0x8, 0xfffffff9, 0x1, 0x10000, 0x1, 0x9, 0x40, 0xfffffff9, 0x5, 0x75e, 0xfffffff7, 0x518d, 0x0, 0x7, 0x6, 0x7, 0x1, 0x0, 0x81, 0x10, 0x5, 0x7, 0x0, 0x8000, 0x0, 0x4, 0x6, 0x2, 0xfffffff7, 0x6a, 0x4, 0x0, 0x3, 0x8, 0xfffffff7, 0x5, 0xd, 0x0, 0x5, 0x4, 0x6, 0xc3a, 0x80000001, 0x9, 0x4, 0x3, 0x80000001, 0x2, 0x44, 0x8, 0xfffffffa, 0x81, 0x1688, 0x4, 0x10, 0x4, 0x1, 0x10001, 0x8, 0x6, 0x10001, 0x2, 0x34, 0xfff, 0x22d, 0x8, 0xdd, 0x9, 0x1, 0x5, 0x3, 0x9, 0x5e7b8185, 0xe631, 0x0, 0x1, 0x3, 0x9, 0x7, 0xe, 0x6, 0xbe, 0x4, 0x1, 0x40, 0x1, 0x3, 0x5, 0x5, 0x5, 0x307, 0x4, 0x8, 0x13a, 0x8, 0x8001, 0xff, 0x34, 0x75, 0xc, 0x2, 0x9, 0xff, 0x0, 0x1, 0x3, 0x9, 0x0, 0x2, 0x8, 0x1, 0x0, 0x4, 0x4, 0x80, 0x3, 0x6, 0x7, 0x6, 0x2, 0x2, 0x3, 0x8, 0xff, 0x3, 0xaa11, 0x101, 0x3ff, 0x3, 0x7, 0x7, 0x6, 0x7, 0x9, 0x9, 0x7fff, 0x2, 0x513, 0x6, 0x1, 0x9, 0x2, 0x0, 0x3ff, 0x2, 0x3, 0x1, 0x6, 0x8, 0x1ff, 0x40, 0x7b21, 0x3c7, 0x800, 0x5, 0x77, 0x80, 0x9, 0x1, 0x7, 0x9, 0x1, 0x20471e25, 0x7, 0x1, 0x3, 0x2, 0x5, 0x1613e000, 0x6, 0x1, 0x9, 0x2, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0xffc, 0x6, [@m_csum={0x120, 0x15, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6234, 0x8, 0x20000000, 0x9, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x7, 0xffffffffffffffff, 0x6, 0x9}, 0x25}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x0, 0x5, 0xabb5, 0x100}, 0x6a}}]}, {0x9d, 0x6, "944c985fb4ce8e44a33a89a0ba583a586ec5b4cb1a6aa4e2631902b8e897570ae8c131b63967eea0810720c5a31d1f395dc4c39130f2af03c61903f8bdc5ccc1bfb0cef96bfa6226bfc047e4cc3fc5c45c1e03d2ee83b74e7aa398b70d953c4be416787d65a2fe92c8bffb6a2dd2c3b3bb9f8b6afc45546ef4deb0bfa792f08f08cd14bb4745f9698e86d1ea6016a2ceb43dacb8e9dcd753aa"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x58, 0x9, 0x0, 0x0, {{0xc}, {0x4}, {0x29, 0x6, "273f6967a4c06a6679942a1a780c508f0a7524ade68002c49403a1c6f9fcd0da269fec2e32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_pedit={0xe80, 0x2, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x3c9a, 0xe, 0x3, 0x0, 0x50}, 0x8, 0xa6, [{0x42, 0x6, 0x2, 0x0, 0x7, 0x40}, {0xffffffff, 0x1ff, 0x8, 0x1af25878, 0x0, 0x3}]}, [{0x5b, 0xf, 0x80000000, 0x8, 0x9, 0x3}, {0x7, 0x9, 0x4, 0x6, 0xd3e1cce, 0x4}, {0x2f8, 0x400, 0x9, 0x6, 0x1, 0x5}, {0xa2, 0x1f, 0x2, 0xa748, 0x0, 0xffffff6d}, {0x5, 0x6, 0x10001, 0x4, 0x7, 0x5}, {0x6, 0x2, 0xa, 0xb19}, {0x100, 0x6e9fc58, 0x1, 0xfffffff8, 0x6, 0x7fff}, {0xfffffff5, 0x1, 0x2, 0xd, 0xc8, 0x1}, {0x2, 0x3, 0x8, 0xe337, 0x0, 0x101}, {0x7105, 0x4, 0x7, 0x9fcc, 0x101, 0x7f}, {0xb3, 0x6, 0x7, 0xb6, 0xff, 0x10001}, {0x7, 0x1, 0x4, 0x0, 0x0, 0x9}, {0x5, 0x100, 0x1, 0x5, 0x5, 0x8}, {0x23, 0x7, 0xfffffffc, 0x1, 0x1, 0x1ff}, {0x40, 0x4, 0x6, 0x4, 0x8, 0xf}, {0x0, 0x3, 0x4, 0xb3d, 0x0, 0x5}, {0x9, 0x0, 0xb05f, 0x1, 0x4, 0x7}, {0x6, 0x8, 0xec, 0x6ac6, 0x1}, {0x9, 0x3000000, 0x7, 0xa, 0xe33, 0xf0}, {0x200, 0x0, 0xfab5, 0x2a3, 0x7, 0x10000}, {0xae01, 0x8, 0x0, 0x4, 0x7, 0x8}, {0x2, 0x3, 0xf, 0x5, 0xffff8000, 0x7}, {0x0, 0x4, 0x100, 0x925, 0xfffffffc, 0xb}, {0x81, 0xe397, 0x5, 0x1800, 0x1c0000, 0x800}, {0xb71, 0x0, 0x9, 0x9, 0xceab, 0x2}, {0x3, 0x3bb3, 0x1, 0x2800000, 0x1, 0x41}, {0x6, 0x7, 0x9, 0x3, 0x7e, 0x8000}, {0x4, 0x8, 0x8b4, 0x5, 0xe92, 0x80000000}, {0x446b, 0x8, 0x0, 0x1, 0x1, 0x2}, {0x4, 0x3, 0x8, 0x3, 0xa7, 0x4}, {0x2c, 0x9, 0x10, 0x8000, 0x7fffffff, 0x3}, {0x5, 0x50c, 0xe, 0xf, 0x7, 0x928}, {0x0, 0x34, 0xc, 0x800, 0x55, 0x9}, {0xd97, 0xc, 0x1, 0x7b99, 0x4, 0x3219}, {0x200, 0x5, 0x9, 0x800, 0x3, 0x6}, {0x6, 0x3, 0xf, 0x4, 0x0, 0xffff}, {0x6, 0xfffff2b9, 0x4, 0x2, 0x0, 0xfff}, {0x40, 0x8876, 0x4, 0x1, 0xfc80, 0x91}, {0x81, 0x0, 0x4, 0x6, 0x20000, 0x8}, {0xf7, 0x6, 0x3, 0x4aad, 0xffff465e, 0x4}, {0x7, 0x6, 0x2, 0x8, 0x9, 0x3}, {0x8, 0x1, 0x28, 0x1, 0x495c, 0x5}, {0xacb, 0x140, 0x4, 0x8001, 0x0, 0x401}, {0xea4, 0x0, 0x9441, 0xc0000, 0x8, 0x7}, {0x0, 0x800, 0x58, 0x6, 0x7}, {0x2, 0x8, 0xe, 0xa0, 0x10001, 0x1d4}, {0x2edc, 0x8, 0x400, 0x70c2afe8, 0x3, 0xe}, {0xffffffff, 0x7f, 0x4, 0x9, 0x2, 0x1}, {0x972, 0xb00, 0xb2a, 0x0, 0x6, 0x584bd55d}, {0x53c, 0x8, 0x2, 0x7ff, 0x9, 0x6}, {0xff, 0x3, 0x1ff, 0x10001, 0x0, 0x8000}, {0x47, 0x7, 0x33, 0x25, 0x7f, 0x7}, {0x9, 0x1, 0x0, 0x5, 0x6, 0x7fd}, {0xd96, 0x9, 0xbda9, 0xf, 0x2, 0x6}, {0x8, 0x19d, 0xfffffffe, 0x1, 0x8000, 0x8}, {0x3211, 0x1, 0x1, 0x6, 0x8}, {0x2, 0x0, 0x9, 0x0, 0x1, 0x5}, {0x9b98, 0x7fffffff, 0x4, 0x8, 0x65000000, 0x6}, {0x80000, 0x9, 0x7, 0x6, 0x7, 0x2}, {0x4, 0x5, 0x80, 0x5, 0x9, 0xfb01}, {0x9, 0x4, 0x8, 0xff5, 0x4d, 0x7}, {0x8, 0x0, 0xfffffffd, 0x2, 0x9, 0x3}, {0x80000001, 0x5, 0x2, 0x7, 0x10001, 0xa}, {0x7fff, 0x5, 0x2, 0xffff, 0x1, 0x6}, {0x4, 0x0, 0x1, 0x7, 0x0, 0x2}, {0x6, 0x424f, 0xb, 0xae0, 0xaa, 0xff}, {0x6, 0x101, 0x7, 0x3, 0x8, 0xfff}, {0x8001, 0x797, 0x3, 0x9, 0x3ff, 0x5}, {0xffff, 0x1ff, 0x156, 0x1, 0x3d000000, 0x6}, {0x6, 0x3, 0x6, 0x9, 0x800, 0x7fffffff}, {0x8, 0x3, 0x401, 0x1, 0x1165, 0x4}, {0x3, 0x3, 0xb, 0x10000, 0x7, 0x5}, {0x3, 0x3, 0x0, 0x0, 0x17bf, 0x9}, {0x3, 0x1c95, 0x9, 0x2, 0x7, 0x1}, {0x2, 0x4, 0x800, 0x8, 0x8, 0x8605}, {0xd, 0x2, 0x400, 0xd5, 0x7, 0x7c200000}, {0x0, 0x8, 0x6, 0x1, 0x100, 0x9}, {0x2, 0xfff, 0x7fff, 0x2, 0x2, 0x5}, {0x5, 0x1, 0x7f, 0x3, 0x3d0, 0x1}, {0x2, 0x0, 0xff, 0x9, 0x7, 0x506}, {0x0, 0xffffffff, 0x9, 0x2, 0xa8000000, 0x3}, {0x7, 0x4f7a, 0xfffffffd, 0x0, 0xd, 0x1}, {0x9, 0x9, 0x9, 0x9d, 0xffffff7f, 0xf121}, {0xe, 0x1, 0x0, 0x2, 0x7fffffff, 0x9}, {0x4, 0x6, 0xffff, 0x6, 0x1ff, 0x3}, {0x87f, 0xfffffffd, 0x1, 0x10000, 0x80000000, 0x9}, {0x1, 0xfffffff8, 0x2, 0x10, 0x80000000, 0x3}, {0x47668b5b, 0x9, 0x7, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x10001, 0x100, 0xc76, 0xffffcf79}, {0x5, 0x2, 0x7fffffff, 0x400, 0xa}, {0xfffffffd, 0x1, 0x3, 0x80000001, 0xa00, 0x1ff}, {0x5, 0xe, 0x8, 0x4, 0x3, 0xb}, {0xffffffff, 0x9, 0xdd5, 0x9, 0x8, 0x7de}, {0x1, 0x5, 0xf, 0x5, 0x7, 0x1}, {0x5, 0x6, 0xd9, 0x1, 0x4, 0x8a}, {0x2, 0xffffffff, 0x7, 0x1, 0x200, 0x5}, {0xfffffffc, 0x1, 0xa, 0x0, 0xfffffff1, 0x7ff}, {0x8001, 0x10, 0x3ff, 0xe4, 0xf, 0x9}, {0x8, 0x9, 0x7, 0x8, 0x4, 0x5}, {0x8, 0xf, 0x0, 0x7, 0x1, 0x6284}, {0x6, 0x81, 0x4, 0x80000001, 0x2, 0x8000}, {0x3, 0x5, 0xa, 0x0, 0x8, 0x3e10fb6f}, {0x4, 0x1, 0x6d, 0x9, 0x3, 0x6}, {0x8, 0x4, 0x8000, 0x3fc, 0x2, 0x8}, {0x83, 0x9c34, 0xfffffffd, 0x57b1, 0x6, 0x4}, {0x5, 0x9, 0x6, 0x36e, 0x1c8, 0xff}, {0x200, 0x2, 0xe00000, 0x9, 0x4, 0x8}, {0xff, 0x3, 0x5, 0x200, 0x6, 0xa5}, {0x5, 0x7, 0x40, 0x3, 0x2, 0x200}, {0xfffffffb, 0x9, 0xd, 0x7, 0x7, 0x2}, {0x2, 0x7, 0x4, 0x1e78, 0x1, 0x400}, {0x101, 0x7, 0xff, 0x1, 0x6, 0x4}, {0x6, 0x8, 0x2f, 0x8, 0xab3, 0x1ff}, {0x0, 0x8, 0x800, 0x9, 0x9, 0x1}, {0xf, 0x6b4, 0xfffffffd, 0x6, 0x4e95, 0x7ff}, {0x2, 0x7, 0x38ae, 0x0, 0x10000, 0x3a01}, {0x7, 0x4, 0xffff, 0x0, 0x3, 0x5}, {0x4, 0xf99, 0x80000000, 0x10000, 0xfffffff6, 0xb5c}, {0x100, 0x9, 0x9, 0xfff, 0x7, 0x200}, {0x1ff, 0x800, 0x4, 0x3ff, 0x1, 0x5}, {0x9, 0x81, 0x0, 0x1, 0x4b5, 0xffffff58}, {0x10000, 0x100, 0x5, 0xe3a, 0xffffffff, 0x6}, {0x7, 0x400, 0x7, 0xae, 0x5, 0x8000}, {0x1, 0x4, 0x7ff, 0x9, 0x3ff, 0x990000}, {0x22, 0x321, 0x9, 0x34, 0x3, 0x200}, {0x5, 0x10000, 0x0, 0x540, 0x4, 0x9}, {0x8, 0x1, 0x2, 0x3, 0x7, 0x9}, {0xa, 0x2, 0xffff, 0x2, 0x8, 0x80}], [{0x7, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x6a258c997b6550f}, {0x4}, {0x3}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}, {0x7}, {}, {0x5, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x2, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0xd3913c054123744d}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1584}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m45.003832039s ago: executing program 0 (id=543):
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x80000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)

4m42.89884545s ago: executing program 0 (id=546):
syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001cbc5ef080a1150119e550102030109022400010006700809044605024dbf0c000605"], 0x0)

4m39.223157069s ago: executing program 0 (id=552):
socket$nl_xfrm(0x10, 0x3, 0x6)
gettid()
request_key(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

4m37.051673511s ago: executing program 0 (id=554):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
timer_settime(0x0, 0x17bba86549425466, 0x0, &(0x7f0000000180))
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r3, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

4m21.894520746s ago: executing program 32 (id=554):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
timer_settime(0x0, 0x17bba86549425466, 0x0, &(0x7f0000000180))
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r3, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)

17.215109364s ago: executing program 2 (id=1081):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
unshare(0x22020400)
connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa)

16.953835761s ago: executing program 2 (id=1083):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x2, 0x45)

10.820340031s ago: executing program 2 (id=1091):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, ' \x11ly`Z\xa9\xd96\xc3+\xb5|\xaaC\x05\x12\xc5\xe2\x18n\xda\n\x95C\x11\a=\x8a^e\x9eN3\xa6\xa0\xcf!*\xbc\xe1#\xe2\xb2\xfcF\x83\xba\xb8\x02Z\x1e+\x81\x1f}\xf0H\xe7\xed\x0f\x12\xbf\xde\xcd.'}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000"}, 0xa7)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

10.607231274s ago: executing program 3 (id=1092):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x200800a, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x4dc)

8.47521773s ago: executing program 3 (id=1095):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x42000301)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
read$FUSE(r1, &(0x7f0000006100)={0x2020}, 0x2020)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)

8.097657132s ago: executing program 2 (id=1096):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0xdec, 0x4)
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000001c0))
getpgrp(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r5=>0x0})
sendto$packet(r3, &(0x7f0000000080)="330316148114140000007ef52f555f2a0c090000", 0x14, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x62, 0x6, @broadcast}, 0x14)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x6)

8.082180284s ago: executing program 3 (id=1097):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40012060, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x6064c6, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000000))
sync()
sync()
sync()
sync()
sync()
sync()

7.84546473s ago: executing program 4 (id=1098):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

7.725843686s ago: executing program 4 (id=1099):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r2)

7.237001078s ago: executing program 1 (id=1100):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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")
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

7.071246605s ago: executing program 4 (id=1101):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)

7.070071361s ago: executing program 2 (id=1102):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x9, 0x0, 0x0, 0x660})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000380)={0x28, 0x2, r3, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

7.02362829s ago: executing program 1 (id=1103):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

5.682371877s ago: executing program 1 (id=1104):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
getpgrp(0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x51, 0xc8}}}, 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = userfaultfd(0x80001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x70bd2a, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4008cd7}, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
timer_create(0x7, &(0x7f0000000140)={0x0, 0x5, 0x1, @tid=r1}, &(0x7f0000000200))
read(r4, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000424000/0x1000)=nil, 0x1000})

4.916195213s ago: executing program 4 (id=1105):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

3.727022064s ago: executing program 1 (id=1106):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, ' \x11ly`Z\xa9\xd96\xc3+\xb5|\xaaC\x05\x12\xc5\xe2\x18n\xda\n\x95C\x11\a=\x8a^e\x9eN3\xa6\xa0\xcf!*\xbc\xe1#\xe2\xb2\xfcF\x83\xba\xb8\x02Z\x1e+\x81\x1f}\xf0H\xe7\xed\x0f\x12\xbf\xde\xcd.'}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}, {0x20, '/!'}, {0x20, '*@\xb1'}, {0x20, 'cgroup.stat\x00'}, {}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000"}, 0xa7)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf0e3a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f92b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b17941c4c4fbfac18c8b74e5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c73405baf9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746063d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7b0e000f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c5169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f59d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d00bf58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a60000564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9de9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2c77c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f0000000000000006b050e9319fe88033f830a8490917a9c0572ebbc549000000000000000015a34abef947b5b9a950e780662de18873e55899c92db3ad00437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb00800000000000000ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c040000002b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

3.079910396s ago: executing program 3 (id=1107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100000004000000040000001f"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r0, &(0x7f00000002c0)="6f5ec95eddcf"}, 0x20)

2.922216665s ago: executing program 3 (id=1108):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2.650516732s ago: executing program 3 (id=1109):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$TIOCNOTTY(r0, 0x5422)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340))
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
read$dsp(r3, &(0x7f0000004340)=""/4096, 0x1000)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="15cd8bbd2e0b808095881f740fed82c945c38baded4548907add698398e51e801e4514d5c8f79a12c2"], 0x20}}, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x9, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x80], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r6, 0x5501)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

2.348191457s ago: executing program 2 (id=1110):
syz_usb_connect$uac2(0x0, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000010410e4942400001020301090291000301090008080b00020100201009040000000101200009240100080731000611240804050100010002000300020000000b2406020406000600f2000c2403060004080502"], 0x0)

2.166864009s ago: executing program 4 (id=1111):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
read$char_usb(r2, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r2)

1.55607502s ago: executing program 4 (id=1112):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0)

1.315561779s ago: executing program 1 (id=1113):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

0s ago: executing program 1 (id=1114):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9})
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

kernel console output (not intermixed with test programs):

 376.820674][ T7729] loop8: detected capacity change from 0 to 8
[  376.999624][ T5732] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  377.070919][ T7729] Dev loop8: unable to read RDB block 8
[  377.070965][ T7729]  loop8: unable to read partition table
[  377.071309][ T7729] loop8: partition table beyond EOD, truncated
[  377.071349][ T7729] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  377.184204][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.184239][ T5732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.184276][ T5732] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  377.184300][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.250695][ T5732] usb 5-1: config 0 descriptor??
[  377.404591][ T5623] Bluetooth: hci5: command tx timeout
[  377.549938][ T1573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.875342][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout
[  377.875466][ T4932] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  377.903556][ T5732] hid-led 0003:1D34:000A.0008: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0
[  377.938354][ T5732] hid-led 0003:1D34:000A.0008: Dream Cheeky Webmail Notifier initialized
[  378.131823][ T1250] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  378.292064][ T1250] usb 2-1: Using ep0 maxpacket: 16
[  378.294796][ T1250] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  378.294826][ T1250] usb 2-1: config 0 has no interface number 0
[  378.294873][ T1250] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.294901][ T1250] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.294942][ T1250] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  378.294966][ T1250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.384158][ T1250] usb 2-1: config 0 descriptor??
[  378.603823][ T1573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.854813][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  378.854922][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  379.041276][ T4932] Bluetooth: hci2: unexpected event for opcode 0x007f
[  379.081957][ T1250] uclogic 0003:28BD:0071.0009: pen parameters not found
[  379.081985][ T1250] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring
[  379.285906][    T9] usb 2-1: USB disconnect, device number 8
[  379.386782][ T1573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.481857][ T5623] Bluetooth: hci5: command tx timeout
[  379.960570][   T32] usb 5-1: USB disconnect, device number 14
[  382.298487][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.298759][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.299046][ T7656] bridge_slave_0: entered allmulticast mode
[  382.349816][ T7656] bridge_slave_0: entered promiscuous mode
[  382.456980][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.457565][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.457859][ T7656] bridge_slave_1: entered allmulticast mode
[  382.485402][ T7656] bridge_slave_1: entered promiscuous mode
[  383.033971][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  383.085567][ T5610] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  383.100244][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.123614][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  383.181737][    T9] usb 4-1: Using ep0 maxpacket: 32
[  383.192789][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  383.192877][    T9] usb 4-1: config 0 has no interface number 0
[  383.225193][    T9] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  383.225222][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.225243][    T9] usb 4-1: Product: syz
[  383.225256][    T9] usb 4-1: Manufacturer: syz
[  383.225271][    T9] usb 4-1: SerialNumber: syz
[  383.230186][ T7809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  383.274679][ T5610] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  383.274711][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.274732][ T5610] usb 2-1: Product: syz
[  383.274747][ T5610] usb 2-1: Manufacturer: syz
[  383.274762][ T5610] usb 2-1: SerialNumber: syz
[  383.366430][    T9] usb 4-1: config 0 descriptor??
[  383.515066][    T9] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  383.515106][    T9] usb 4-1: selecting invalid altsetting 1
[  383.515129][    T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  383.666988][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  383.679995][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  383.680199][    T9] usb 4-1: media controller created
[  383.704306][ T1573] bridge_slave_1: left allmulticast mode
[  383.704474][ T1573] bridge_slave_1: left promiscuous mode
[  383.835787][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  383.835859][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  383.870838][ T7816] capability: warning: `syz.2.634' uses 32-bit capabilities (legacy support in use)
[  383.909556][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.086323][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  384.933528][ T1573] bridge_slave_0: left allmulticast mode
[  384.933569][ T1573] bridge_slave_0: left promiscuous mode
[  384.964594][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.061498][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  385.074183][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  385.157600][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  385.157669][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  385.158929][ T5610] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  385.171856][    T9] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  385.172005][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  385.228753][ T5610] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  385.295465][    T9] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  385.324679][ T5610] usb 2-1: USB disconnect, device number 9
[  386.668917][    T9] usb 4-1: USB disconnect, device number 19
[  388.691965][ T5810] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  388.724230][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.786144][ T7853] input: syz0 as /devices/virtual/input/input7
[  388.842695][ T5810] usb 2-1: Using ep0 maxpacket: 16
[  388.861400][ T5810] usb 2-1: config index 0 descriptor too short (expected 37359, got 202)
[  388.861429][ T5810] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  388.861451][ T5810] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  388.861469][ T5810] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95
[  388.926218][ T5810] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  388.926254][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.926274][ T5810] usb 2-1: Product: syz
[  388.926287][ T5810] usb 2-1: Manufacturer: syz
[  388.926301][ T5810] usb 2-1: SerialNumber: syz
[  389.002497][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.027258][ T5810] usb 2-1: 0:2 : does not exist
[  389.160814][ T1573] bond0 (unregistering): Released all slaves
[  389.288720][ T5810] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  390.110991][ T7859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  391.714726][  T821] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  391.883103][  T821] usb 3-1: Using ep0 maxpacket: 8
[  391.890328][  T821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  391.890363][  T821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  391.890492][  T821] usb 3-1: config 0 interface 0 has no altsetting 0
[  391.991285][ T5810] usb 2-1: USB disconnect, device number 10
[  392.003314][  T821] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  392.003346][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.003384][  T821] usb 3-1: Product: syz
[  392.003399][  T821] usb 3-1: Manufacturer: syz
[  392.003414][  T821] usb 3-1: SerialNumber: syz
[  392.344244][ T7656] team0: Port device team_slave_0 added
[  392.558528][  T821] usb 3-1: config 0 descriptor??
[  392.664408][  T821] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  392.859882][  T821] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  392.860634][  T821] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  392.883006][  T821] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  393.074403][    T9] usb 3-1: USB disconnect, device number 10
[  393.646855][ T5810] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  393.694541][ T7656] team0: Port device team_slave_1 added
[  393.824467][ T7881] 9p: Bad value for 'rfdno'
[  393.830575][ T5810] usb 2-1: Using ep0 maxpacket: 16
[  393.848608][ T5810] usb 2-1: config 6 has an invalid interface number: 7 but max is 1
[  393.848638][ T5810] usb 2-1: config 6 has an invalid interface number: 104 but max is 1
[  393.848664][ T5810] usb 2-1: config 6 has no interface number 0
[  393.848675][ T5810] usb 2-1: config 6 has no interface number 1
[  393.848717][ T5810] usb 2-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  393.848747][ T5810] usb 2-1: config 6 interface 104 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  393.848764][ T5810] usb 2-1: config 6 interface 104 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64
[  393.848783][ T5810] usb 2-1: config 6 interface 7 has no altsetting 0
[  393.848795][ T5810] usb 2-1: config 6 interface 104 has no altsetting 0
[  393.880216][ T5810] usb 2-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  393.880317][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.880381][ T5810] usb 2-1: Product: syz
[  393.880410][ T5810] usb 2-1: Manufacturer: syz
[  393.880454][ T5810] usb 2-1: SerialNumber: syz
[  394.139372][ T7884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  395.698034][ T5810] ch341 2-1:6.7: ch341-uart converter detected
[  395.739477][ T5810] usb 2-1: failed to receive control message: -71
[  395.739542][ T5810] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  395.927299][ T5810] ch341 2-1:6.104: ch341-uart converter detected
[  395.964488][ T5810] usb 2-1: failed to receive control message: -71
[  395.964539][ T5810] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  396.026132][ T5810] usb 2-1: USB disconnect, device number 11
[  396.113550][ T5810] ch341 2-1:6.7: device disconnected
[  396.279758][ T5810] ch341 2-1:6.104: device disconnected
[  396.412105][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.412124][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.412155][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.547551][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.547570][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.547600][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.781955][   T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  396.935762][   T37] usb 5-1: Using ep0 maxpacket: 32
[  396.938392][   T37] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  396.949588][   T37] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  396.949648][   T37] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  396.949699][   T37] usb 5-1: Product: syz
[  396.949742][   T37] usb 5-1: Manufacturer: syz
[  396.949801][   T37] usb 5-1: SerialNumber: syz
[  397.026126][ T7656] hsr_slave_0: entered promiscuous mode
[  397.028712][ T7656] hsr_slave_1: entered promiscuous mode
[  397.030426][ T7656] debugfs: 'hsr0' already exists in 'hsr'
[  397.030449][ T7656] Cannot create hsr debugfs directory
[  397.070486][   T37] usb 5-1: config 0 descriptor??
[  397.081839][ T7897] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  397.374920][   T37] usb 5-1: USB disconnect, device number 15
[  397.491361][ T4932] Bluetooth: hci1: unexpected event for opcode 0x007f
[  397.594546][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  397.751894][    T9] usb 4-1: Using ep0 maxpacket: 8
[  397.754421][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  397.754458][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  397.754481][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  397.790732][    T9] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  397.790766][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.790788][    T9] usb 4-1: Product: syz
[  397.790803][    T9] usb 4-1: Manufacturer: syz
[  397.790818][    T9] usb 4-1: SerialNumber: syz
[  397.858484][    T9] usb 4-1: config 0 descriptor??
[  397.888482][    T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  398.072394][ T7926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  398.104287][    T9] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  398.104591][    T9] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  398.158993][    T9] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  398.191735][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout
[  398.197108][   T32] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  398.197129][   T32] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  398.297366][   T37] usb 4-1: USB disconnect, device number 20
[  398.828247][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1
[  400.387508][ T4932] Bluetooth: hci1: command 0x0c1a tx timeout
[  400.387746][   T32] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  400.387767][   T32] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  400.581718][ T5810] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  400.807239][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  400.807271][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.807306][ T5810] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  400.807327][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.911935][ T5810] usb 4-1: config 0 descriptor??
[  401.585062][ T5810] hid-led 0003:1D34:000A.000A: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0
[  401.652042][ T5610] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  401.679215][ T5810] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized
[  401.822498][ T5610] usb 5-1: Using ep0 maxpacket: 32
[  401.826697][ T5610] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  401.854453][ T5610] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  401.854486][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  401.854506][ T5610] usb 5-1: Product: syz
[  401.854520][ T5610] usb 5-1: Manufacturer: syz
[  401.854535][ T5610] usb 5-1: SerialNumber: syz
[  401.899849][ T5610] usb 5-1: config 0 descriptor??
[  401.901385][ T7959] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  402.165896][ T5751] usb 5-1: USB disconnect, device number 16
[  402.432039][ T4932] Bluetooth: hci2: command 0x0c1a tx timeout
[  402.433774][   T32] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  402.433798][   T32] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  402.695877][ T7656] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  402.698414][ T5610] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  402.871741][ T5610] usb 2-1: Using ep0 maxpacket: 32
[  402.878633][ T5610] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  402.878662][ T5610] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  402.878713][ T5610] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  402.952156][ T5610] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  402.952190][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.952210][ T5610] usb 2-1: Product: syz
[  402.952225][ T5610] usb 2-1: Manufacturer: syz
[  402.952239][ T5610] usb 2-1: SerialNumber: syz
[  403.005101][ T5610] cdc_ncm 2-1:1.0: skipping garbage
[  403.005121][ T5610] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  403.005155][ T5610] cdc_ncm 2-1:1.0: bind() failure
[  403.089285][ T7656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  403.165237][ T7656] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  403.212226][ T5810] usb 2-1: USB disconnect, device number 12
[  403.347688][ T7656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  403.357668][ T7656] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  403.406047][   T37] usb 4-1: USB disconnect, device number 21
[  403.477265][ T7656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  403.488300][ T7656] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  404.800082][ T4932] Bluetooth: hci4: command 0x0c1a tx timeout
[  404.904486][   T32] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  404.904516][   T32] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  405.475779][ T7656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  405.505863][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2
[  405.590834][ T7996] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  408.861826][ T5610] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  409.051713][ T5610] usb 5-1: Using ep0 maxpacket: 32
[  409.068087][ T5610] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  409.083853][ T5610] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  409.083886][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  409.083907][ T5610] usb 5-1: Product: syz
[  409.083922][ T5610] usb 5-1: Manufacturer: syz
[  409.083945][ T5610] usb 5-1: SerialNumber: syz
[  409.151053][ T5610] usb 5-1: config 0 descriptor??
[  409.162109][ T8008] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  409.392819][ T5610] usb 5-1: USB disconnect, device number 17
[  410.966718][ T8035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  414.322580][ T5810] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  414.473187][ T5810] usb 2-1: Using ep0 maxpacket: 32
[  414.475308][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  414.480901][ T5810] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  414.480936][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  414.480956][ T5810] usb 2-1: Product: syz
[  414.480966][ T5810] usb 2-1: Manufacturer: syz
[  414.480977][ T5810] usb 2-1: SerialNumber: syz
[  414.608324][ T5810] usb 2-1: config 0 descriptor??
[  414.609130][ T8055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  414.872315][ T5751] usb 2-1: USB disconnect, device number 13
[  417.049525][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.152761][ T4932] Bluetooth: hci5: command 0x0c1a tx timeout
[  417.159419][   T32] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  417.159447][   T32] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  417.349090][ T5810] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  417.463982][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3
[  417.517876][ T5810] usb 3-1: Using ep0 maxpacket: 32
[  418.149452][ T5810] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  418.163562][ T5810] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  418.163649][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  418.163712][ T5810] usb 3-1: Product: syz
[  418.163748][ T5810] usb 3-1: Manufacturer: syz
[  418.163790][ T5810] usb 3-1: SerialNumber: syz
[  418.225554][ T5810] usb 3-1: config 0 descriptor??
[  418.228402][ T8077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  418.436202][ T7656] 8021q: adding VLAN 0 to HW filter on device team0
[  418.550728][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.567187][ T7471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.603728][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.603944][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.818863][ T8083] comedi comedi3: 8255: I/O base address not correctly aligned
[  418.905532][ T8089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  421.300329][ T6006] usb 3-1: USB disconnect, device number 11
[  424.572659][ T1573] hsr_slave_0: left promiscuous mode
[  424.626804][ T1573] hsr_slave_1: left promiscuous mode
[  426.017081][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.017206][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.142109][   T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  426.168558][ T1573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.168587][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.288455][ T8149] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.727'.
[  426.317413][   T32] usb 2-1: Using ep0 maxpacket: 16
[  426.328250][   T32] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  426.328279][   T32] usb 2-1: config 0 has no interface number 0
[  426.328325][   T32] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.328344][   T32] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.328373][   T32] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  426.328389][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.396853][   T32] usb 2-1: config 0 descriptor??
[  427.051368][   T32] uclogic 0003:28BD:0071.000B: failed retrieving string descriptor #100: -71
[  427.051437][   T32] uclogic 0003:28BD:0071.000B: failed retrieving pen parameters: -71
[  427.051454][   T32] uclogic 0003:28BD:0071.000B: pen probing failed: -71
[  427.051471][   T32] uclogic 0003:28BD:0071.000B: failed probing parameters: -71
[  427.053786][   T32] uclogic 0003:28BD:0071.000B: probe with driver uclogic failed with error -71
[  427.209224][   T32] usb 2-1: USB disconnect, device number 14
[  427.293508][ T1573] veth1_macvtap: left promiscuous mode
[  427.293696][ T1573] veth0_macvtap: left promiscuous mode
[  427.293988][ T1573] veth1_vlan: left promiscuous mode
[  427.294236][ T1573] veth0_vlan: left promiscuous mode
[  429.895631][ T1573] team0 (unregistering): Port device team_slave_1 removed
[  429.944546][ T1573] team0 (unregistering): Port device team_slave_0 removed
[  429.976524][ T8164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  430.036405][ T8164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  430.039519][ T8164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  430.048343][ T8164] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  430.056939][ T8164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  430.456068][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4
[  430.758087][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  430.770451][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  430.813792][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  430.818075][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  430.850258][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.326894][ T8198] loop2: detected capacity change from 0 to 256
[  432.992774][ T4932] Bluetooth: hci3: command tx timeout
[  433.889887][ T8198] FAT-fs (loop2): Directory bread(block 64) failed
[  433.889924][ T8198] FAT-fs (loop2): Directory bread(block 65) failed
[  433.890032][ T8198] FAT-fs (loop2): Directory bread(block 66) failed
[  433.890056][ T8198] FAT-fs (loop2): Directory bread(block 67) failed
[  433.890155][ T8198] FAT-fs (loop2): Directory bread(block 68) failed
[  433.890176][ T8198] FAT-fs (loop2): Directory bread(block 69) failed
[  433.890275][ T8198] FAT-fs (loop2): Directory bread(block 70) failed
[  433.890298][ T8198] FAT-fs (loop2): Directory bread(block 71) failed
[  433.890403][ T8198] FAT-fs (loop2): Directory bread(block 72) failed
[  433.890426][ T8198] FAT-fs (loop2): Directory bread(block 73) failed
[  434.019042][ T8220] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.744'.
[  435.109030][ T4932] Bluetooth: hci3: command tx timeout
[  436.635127][ T8162] lo speed is unknown, defaulting to 1000
[  436.851311][ T8246] loop3: detected capacity change from 0 to 4096
[  436.976372][ T8246] EXT4-fs: inline encryption not supported
[  438.016572][ T8164] Bluetooth: hci3: command tx timeout
[  438.879978][ T8246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  438.880002][ T8246] EXT4-fs (loop3): Test dummy encryption mode enabled
[  439.527262][ T8246] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003]
[  439.527413][ T8246] System zones: 0-5
[  440.031926][ T4932] Bluetooth: hci3: command tx timeout
[  440.156113][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  440.171715][ T5751] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  440.278756][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  440.278870][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  440.346736][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  440.346773][ T5751] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  440.346792][ T5751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  440.346807][ T5751] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  440.349287][ T5751] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  440.349318][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.349343][ T5751] usb 5-1: Product: syz
[  440.349358][ T5751] usb 5-1: Manufacturer: syz
[  440.349373][ T5751] usb 5-1: SerialNumber: syz
[  440.434618][ T5751] usb 5-1: config 0 descriptor??
[  440.447993][ T5751] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  440.881715][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  441.133540][    T9] usb 3-1: Using ep0 maxpacket: 32
[  441.135798][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.135822][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.135899][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  441.135917][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.326962][    T9] usb 3-1: config 0 descriptor??
[  441.816262][ T5751] scsi host1: usb-storage 5-1:0.0
[  443.194175][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.213304][    T9] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  443.234564][ T5751] usb 5-1: USB disconnect, device number 18
[  443.249745][    T9] usb 3-1: USB disconnect, device number 12
[  443.913459][ T8318] fido_id[8318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  444.797298][ T5890] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  444.978446][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  444.988767][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  444.988796][ T5890] usb 5-1: config 0 has no interface number 0
[  444.988845][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.988872][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.988913][ T5890] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  444.988937][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.830949][ T5890] usb 5-1: config 0 descriptor??
[  447.031227][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'.
[  447.651715][ T5751] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  447.691877][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  447.763737][ T5890] uclogic 0003:28BD:0071.000D: failed retrieving string descriptor #100: -71
[  447.763803][ T5890] uclogic 0003:28BD:0071.000D: failed retrieving pen parameters: -71
[  447.763822][ T5890] uclogic 0003:28BD:0071.000D: pen probing failed: -71
[  447.763840][ T5890] uclogic 0003:28BD:0071.000D: failed probing parameters: -71
[  447.763953][ T5890] uclogic 0003:28BD:0071.000D: probe with driver uclogic failed with error -71
[  447.816852][ T5751] usb 4-1: Using ep0 maxpacket: 16
[  447.837470][ T5890] usb 5-1: USB disconnect, device number 19
[  447.856796][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.856841][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  447.860989][ T5751] usb 4-1: config 6 has an invalid interface number: 7 but max is 1
[  447.861017][ T5751] usb 4-1: config 6 has an invalid interface number: 104 but max is 1
[  447.861054][ T5751] usb 4-1: config 6 has no interface number 0
[  447.861071][ T5751] usb 4-1: config 6 has no interface number 1
[  447.861130][ T5751] usb 4-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  447.861158][ T5751] usb 4-1: config 6 interface 7 has no altsetting 0
[  447.861176][ T5751] usb 4-1: config 6 interface 104 has no altsetting 0
[  447.994687][ T5751] usb 4-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  447.994711][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.994725][ T5751] usb 4-1: Product: syz
[  447.994736][ T5751] usb 4-1: Manufacturer: syz
[  447.994747][ T5751] usb 4-1: SerialNumber: syz
[  448.001969][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  448.002003][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.002024][    T9] usb 2-1: Product: syz
[  448.002040][    T9] usb 2-1: Manufacturer: syz
[  448.002055][    T9] usb 2-1: SerialNumber: syz
[  448.430082][ T5751] ch341 4-1:6.7: ch341-uart converter detected
[  448.438211][ T5751] usb 4-1: failed to receive control message: -71
[  448.438266][ T5751] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  448.482572][    T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  448.590691][ T5751] ch341 4-1:6.104: ch341-uart converter detected
[  448.615248][    T9] usb 2-1: USB disconnect, device number 15
[  448.641400][ T5751] usb 4-1: failed to receive control message: -71
[  448.641470][ T5751] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  448.738363][ T8374] loop4: detected capacity change from 0 to 128
[  448.740670][ T5751] usb 4-1: USB disconnect, device number 22
[  448.899281][ T5751] ch341 4-1:6.7: device disconnected
[  448.920724][ T5751] ch341 4-1:6.104: device disconnected
[  449.271855][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  449.474117][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.474164][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  449.496806][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  449.496837][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.496858][    T9] usb 2-1: Product: syz
[  449.496873][    T9] usb 2-1: Manufacturer: syz
[  449.496887][    T9] usb 2-1: SerialNumber: syz
[  451.141480][    T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  451.265942][    T9] usb 2-1: USB disconnect, device number 16
[  451.489016][ T8403] loop4: detected capacity change from 0 to 256
[  451.629705][ T8407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  453.087594][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.091222][ T8162] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.111846][ T8162] bridge_slave_0: entered allmulticast mode
[  453.138326][ T8162] bridge_slave_0: entered promiscuous mode
[  453.165525][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.165846][ T8162] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.167331][ T8162] bridge_slave_1: entered allmulticast mode
[  453.170861][ T8162] bridge_slave_1: entered promiscuous mode
[  454.273380][ T8162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.302792][ T5890] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  454.477272][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  454.479754][ T5890] usb 3-1: config 6 has an invalid interface number: 7 but max is 1
[  454.479783][ T5890] usb 3-1: config 6 has an invalid interface number: 104 but max is 1
[  454.479812][ T5890] usb 3-1: config 6 has no interface number 0
[  454.479828][ T5890] usb 3-1: config 6 has no interface number 1
[  454.479893][ T5890] usb 3-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  454.479922][ T5890] usb 3-1: config 6 interface 7 has no altsetting 0
[  454.479940][ T5890] usb 3-1: config 6 interface 104 has no altsetting 0
[  454.566573][ T5890] usb 3-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  454.566618][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.566633][ T5890] usb 3-1: Product: syz
[  454.566643][ T5890] usb 3-1: Manufacturer: syz
[  454.566654][ T5890] usb 3-1: SerialNumber: syz
[  454.686723][ T8162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.024672][ T5890] ch341 3-1:6.7: ch341-uart converter detected
[  455.052392][ T5890] usb 3-1: failed to receive control message: -71
[  455.052456][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  455.249060][ T5890] ch341 3-1:6.104: ch341-uart converter detected
[  455.262471][ T5890] usb 3-1: failed to receive control message: -71
[  455.262530][ T5890] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  455.296364][ T5890] usb 3-1: USB disconnect, device number 13
[  455.335252][ T5890] ch341 3-1:6.7: device disconnected
[  455.470776][ T5890] ch341 3-1:6.104: device disconnected
[  455.666484][ T8427] tipc: Started in network mode
[  455.666520][ T8427] tipc: Node identity b6ced2b9bab7, cluster identity 4711
[  455.689307][ T8427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  455.698578][ T8431] loop1: detected capacity change from 0 to 2048
[  455.738432][ T8162] team0: Port device team_slave_0 added
[  456.038404][ T8162] team0: Port device team_slave_1 added
[  456.085518][ T8425] syzkaller0: MTU too low for tipc bearer
[  456.085539][ T8425] tipc: Disabling bearer <eth:syzkaller0>
[  456.275139][ T8429] syzkaller0: entered promiscuous mode
[  456.275168][ T8429] syzkaller0: entered allmulticast mode
[  456.602839][ T8431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.763892][ T5890] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  456.910392][   T38] kauditd_printk_skb: 117 callbacks suppressed
[  456.910408][   T38] audit: type=1800 audit(1779334751.567:129): pid=8431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.785" name="file1" dev="loop1" ino=15 res=0 errno=0
[  456.942527][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.942566][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  456.946167][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  456.946190][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.946204][ T5890] usb 3-1: Product: syz
[  456.946215][ T5890] usb 3-1: Manufacturer: syz
[  456.946226][ T5890] usb 3-1: SerialNumber: syz
[  457.155101][ T1573] bridge_slave_1: left allmulticast mode
[  457.155134][ T1573] bridge_slave_1: left promiscuous mode
[  457.155578][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.355251][ T5890] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  457.387325][ T5890] usb 3-1: USB disconnect, device number 14
[  457.448148][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.580299][ T1573] bridge_slave_0: left allmulticast mode
[  457.580328][ T1573] bridge_slave_0: left promiscuous mode
[  457.580526][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.751878][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  457.897401][ T5890] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  457.910029][    T9] usb 5-1: Using ep0 maxpacket: 16
[  457.917583][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  457.917610][    T9] usb 5-1: config 0 has no interfaces?
[  457.917643][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  457.917665][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.015170][    T9] usb 5-1: config 0 descriptor??
[  458.054547][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  458.054593][ T5890] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  458.345508][ T5890] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  458.345542][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.345564][ T5890] usb 3-1: Product: syz
[  458.345580][ T5890] usb 3-1: Manufacturer: syz
[  458.345600][ T5890] usb 3-1: SerialNumber: syz
[  459.411249][   T38] audit: type=1326 audit(1779334754.107:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.4.794" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc96384ce59 code=0x0
[  460.002922][ T8458] loop1: detected capacity change from 0 to 40427
[  460.053663][ T8458] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  460.053690][ T8458] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  460.090828][ T8458] F2FS-fs (loop1): invalid crc value
[  460.330615][ T8458] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  460.375223][ T8458] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  460.375844][ T8458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  460.574913][ T8457] syz.1.796: attempt to access beyond end of device
[  460.574913][ T8457] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  460.578084][ T8457] CPU: 1 UID: 0 PID: 8457 Comm: syz.1.796 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  460.578128][ T8457] Tainted: [L]=SOFTLOCKUP
[  460.578136][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  460.578158][ T8457] Call Trace:
[  460.578168][ T8457]  <TASK>
[  460.578184][ T8457]  dump_stack_lvl+0xe8/0x150
[  460.578227][ T8457]  f2fs_stop_checkpoint+0x3cd/0x590
[  460.578270][ T8457]  f2fs_write_end_io+0x1274/0x1740
[  460.578330][ T8457]  __submit_merged_bio+0x256/0x6a0
[  460.578360][ T8457]  __submit_merged_write_cond+0x3c9/0x4e0
[  460.578407][ T8457]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  460.578471][ T8457]  f2fs_write_data_pages+0x287e/0x34f0
[  460.578539][ T8457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  460.578631][ T8457]  ? do_raw_spin_lock+0x12b/0x2f0
[  460.578670][ T8457]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  460.578699][ T8457]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.578723][ T8457]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  460.578749][ T8457]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  460.578781][ T8457]  ? reacquire_held_locks+0x104/0x190
[  460.578811][ T8457]  ? rt_spin_lock+0x1e0/0x400
[  460.578851][ T8457]  ? rt_spin_unlock+0x14f/0x200
[  460.578888][ T8457]  ? rt_spin_unlock+0x160/0x200
[  460.578920][ T8457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  460.578948][ T8457]  do_writepages+0x32e/0x550
[  460.578983][ T8457]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  460.579018][ T8457]  ? rt_spin_unlock+0x14f/0x200
[  460.579072][ T8457]  filemap_fdatawrite+0x1ec/0x2f0
[  460.579107][ T8457]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  460.579164][ T8457]  ? __lock_acquire+0x6b5/0x2d10
[  460.579223][ T8457]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  460.579265][ T8457]  ? rt_spin_unlock+0x160/0x200
[  460.579307][ T8457]  f2fs_sync_dirty_inodes+0x30e/0x830
[  460.579339][ T8457]  f2fs_write_checkpoint+0x9df/0x26a0
[  460.579360][ T8457]  ? __lock_acquire+0x6b5/0x2d10
[  460.579401][ T8457]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  460.579461][ T8457]  kill_f2fs_super+0x314/0x730
[  460.579486][ T8457]  ? __pfx_kill_f2fs_super+0x10/0x10
[  460.579515][ T8457]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.579545][ T8457]  deactivate_locked_super+0xbc/0x130
[  460.579611][ T8457]  cleanup_mnt+0x437/0x4d0
[  460.579634][ T8457]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.579662][ T8457]  task_work_run+0x1d9/0x270
[  460.579694][ T8457]  ? __pfx_task_work_run+0x10/0x10
[  460.579738][ T8457]  exit_to_user_mode_loop+0xf3/0x4d0
[  460.579756][ T8457]  ? rcu_is_watching+0x15/0xb0
[  460.579778][ T8457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.579795][ T8457]  do_syscall_64+0x33e/0x560
[  460.579813][ T8457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.579830][ T8457]  ? clear_bhb_loop+0x40/0x90
[  460.579849][ T8457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.579865][ T8457] RIP: 0033:0x7f258254ce59
[  460.579889][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.579902][ T8457] RSP: 002b:00007f258079e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  460.579919][ T8457] RAX: 0000000000000000 RBX: 00007f25827c5fa0 RCX: 00007f258254ce59
[  460.579930][ T8457] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  460.579942][ T8457] RBP: 00007f25825e2d6f R08: 0000000000000000 R09: 0000000000000000
[  460.579952][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.579961][ T8457] R13: 00007f25827c6038 R14: 00007f25827c5fa0 R15: 00007ffd600d55c8
[  460.579986][ T8457]  </TASK>
[  460.579993][ T8457] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  460.580147][ T8457] CPU: 1 UID: 0 PID: 8457 Comm: syz.1.796 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  460.580169][ T8457] Tainted: [L]=SOFTLOCKUP
[  460.580174][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  460.580184][ T8457] Call Trace:
[  460.580189][ T8457]  <TASK>
[  460.580195][ T8457]  dump_stack_lvl+0xe8/0x150
[  460.580218][ T8457]  f2fs_stop_checkpoint+0x3cd/0x590
[  460.580249][ T8457]  f2fs_write_end_io+0x1274/0x1740
[  460.580292][ T8457]  __submit_merged_bio+0x256/0x6a0
[  460.580314][ T8457]  __submit_merged_write_cond+0x3c9/0x4e0
[  460.580354][ T8457]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  460.580399][ T8457]  f2fs_write_data_pages+0x287e/0x34f0
[  460.580445][ T8457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  460.580502][ T8457]  ? do_raw_spin_lock+0x12b/0x2f0
[  460.580535][ T8457]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  460.580556][ T8457]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.580574][ T8457]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  460.580597][ T8457]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  460.580622][ T8457]  ? reacquire_held_locks+0x104/0x190
[  460.580674][ T8457]  ? rt_spin_lock+0x1e0/0x400
[  460.580718][ T8457]  ? rt_spin_unlock+0x14f/0x200
[  460.580745][ T8457]  ? rt_spin_unlock+0x160/0x200
[  460.580773][ T8457]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  460.580794][ T8457]  do_writepages+0x32e/0x550
[  460.580819][ T8457]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  460.580845][ T8457]  ? rt_spin_unlock+0x14f/0x200
[  460.580876][ T8457]  filemap_fdatawrite+0x1ec/0x2f0
[  460.580909][ T8457]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  460.580932][ T8457]  ? __lock_acquire+0x6b5/0x2d10
[  460.580976][ T8457]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  460.581006][ T8457]  ? rt_spin_unlock+0x160/0x200
[  460.581032][ T8457]  f2fs_sync_dirty_inodes+0x30e/0x830
[  460.581063][ T8457]  f2fs_write_checkpoint+0x9df/0x26a0
[  460.581083][ T8457]  ? __lock_acquire+0x6b5/0x2d10
[  460.581124][ T8457]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  460.581215][ T8457]  kill_f2fs_super+0x314/0x730
[  460.581241][ T8457]  ? __pfx_kill_f2fs_super+0x10/0x10
[  460.581270][ T8457]  ? lockdep_hardirqs_on+0x7a/0x110
[  460.581307][ T8457]  deactivate_locked_super+0xbc/0x130
[  460.581334][ T8457]  cleanup_mnt+0x437/0x4d0
[  460.581350][ T8457]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.581371][ T8457]  task_work_run+0x1d9/0x270
[  460.581394][ T8457]  ? __pfx_task_work_run+0x10/0x10
[  460.581422][ T8457]  exit_to_user_mode_loop+0xf3/0x4d0
[  460.581439][ T8457]  ? rcu_is_watching+0x15/0xb0
[  460.581461][ T8457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.581479][ T8457]  do_syscall_64+0x33e/0x560
[  460.581497][ T8457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.581513][ T8457]  ? clear_bhb_loop+0x40/0x90
[  460.581562][ T8457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.581584][ T8457] RIP: 0033:0x7f258254ce59
[  460.581604][ T8457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.581621][ T8457] RSP: 002b:00007f258079e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  460.581642][ T8457] RAX: 0000000000000000 RBX: 00007f25827c5fa0 RCX: 00007f258254ce59
[  460.581657][ T8457] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  460.581672][ T8457] RBP: 00007f25825e2d6f R08: 0000000000000000 R09: 0000000000000000
[  460.581684][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.581696][ T8457] R13: 00007f25827c6038 R14: 00007f25827c5fa0 R15: 00007ffd600d55c8
[  460.581731][ T8457]  </TASK>
[  460.581795][ T8457] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  461.538956][ T5890] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  461.574700][ T5890] usb 3-1: USB disconnect, device number 15
[  462.047799][ T5732] loop1: lost filesystem error report for type 5 error -108
[  462.457534][ T1573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.460904][ T8473] loop2: detected capacity change from 0 to 512
[  462.575356][ T1573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.679387][ T1573] bond0 (unregistering): Released all slaves
[  462.740040][ T8467] lo speed is unknown, defaulting to 1000
[  462.910457][ T8473] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  463.196090][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.196138][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.196164][ T8162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.338260][ T8162] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.338277][ T8162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.338303][ T8162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.670438][ T8162] hsr_slave_0: entered promiscuous mode
[  463.695281][ T8162] hsr_slave_1: entered promiscuous mode
[  463.744103][ T8162] debugfs: 'hsr0' already exists in 'hsr'
[  463.744136][ T8162] Cannot create hsr debugfs directory
[  463.777533][ T8483] fuse: fd is not a fuse device
[  463.949756][ T8473] EXT4-fs (loop2): 1 truncate cleaned up
[  464.256105][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.725144][ T1573] hsr_slave_0: left promiscuous mode
[  464.916145][ T1573] hsr_slave_1: left promiscuous mode
[  464.917467][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.983228][ T1573] batman_adv: batadv0: Removing interface: batadv_slave_1
[  466.238172][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.720364][ T8508] input: syz0 as /devices/virtual/input/input8
[  468.557347][ T8516] program syz.2.808 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  468.660027][ T8518] usb usb7: usbfs: process 8518 (syz.2.809) did not claim interface 0 before use
[  469.022809][ T1573] team0 (unregistering): Port device team_slave_1 removed
[  469.082620][ T1573] team0 (unregistering): Port device team_slave_0 removed
[  469.415538][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5
[  469.857341][    T9] usb 5-1: USB disconnect, device number 20
[  471.776249][ T8545] program syz.4.818 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.081187][ T8548] usb usb7: usbfs: process 8548 (syz.4.819) did not claim interface 0 before use
[  472.387559][   T37] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  472.542319][   T37] usb 4-1: Using ep0 maxpacket: 8
[  472.545050][   T37] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  472.545110][   T37] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  472.545136][   T37] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  472.545162][   T37] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  472.545186][   T37] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  472.545212][   T37] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  472.545258][   T37] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  472.545283][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.854849][   T37] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  473.201392][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.214221][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.253720][   T37] usb 4-1: USB disconnect, device number 23
[  473.561999][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout
[  473.562329][ T5732] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  473.562350][ T5732] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  473.660872][ T8563] input: syz0 as /devices/virtual/input/input9
[  474.407489][ T8586] 9p: Bad value for 'rfdno'
[  474.827306][ T8592] program syz.4.828 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.962939][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6
[  475.209916][ T8600] usb usb7: usbfs: process 8600 (syz.2.830) did not claim interface 0 before use
[  476.011833][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  476.161757][    T9] usb 4-1: Using ep0 maxpacket: 8
[  476.164321][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  476.164397][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  476.164423][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  476.164450][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  476.164475][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  476.164500][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  476.164554][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  476.164579][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.359569][    T9] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22
[  478.117101][ T8634] program syz.2.838 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  478.251740][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.320883][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.346493][   T32] usb 4-1: USB disconnect, device number 24
[  480.358428][ T8675] loop3: detected capacity change from 0 to 128
[  481.443489][ T8675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  481.510604][ T8675] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  481.560560][ T8162] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  481.825017][ T8162] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  481.842902][ T8162] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  481.847463][ T5616] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  482.028501][ T8162] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  482.046958][ T8162] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  482.113261][ T8697] input: syz0 as /devices/virtual/input/input10
[  482.209356][ T8162] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  482.230779][ T8162] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  482.372332][ T8162] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  482.447867][ T8706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  484.222518][ T5732] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  484.374638][ T5732] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  484.374661][ T5732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  484.375777][ T5732] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  484.375798][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  484.375813][ T5732] usb 5-1: SerialNumber: syz
[  484.804945][ T5732] usb 5-1: 0:2 : does not exist
[  484.806600][ T8721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  487.909264][ T8735] loop8: detected capacity change from 0 to 8
[  488.052512][ T5732] usb 5-1: USB disconnect, device number 21
[  488.403718][ T8735] Dev loop8: unable to read RDB block 8
[  488.403753][ T8735]  loop8: unable to read partition table
[  488.403911][ T8735] loop8: partition table beyond EOD, truncated
[  488.403954][ T8735] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  488.752636][ T8162] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.839665][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.886565][ T8162] 8021q: adding VLAN 0 to HW filter on device team0
[  488.965674][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.979153][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.085231][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.085435][ T7471] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.340786][ T8752] program syz.2.870 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.917077][ T8164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  490.977820][ T8164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  490.980104][ T8164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  491.008342][ T8164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  491.035871][ T8164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  491.172384][ T8769] 9p: Bad value for 'wfdno'
[  491.260182][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  491.284479][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  491.285004][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  491.318241][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  491.320100][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  491.686086][ T8777] input: syz0 as /devices/virtual/input/input11
[  492.603966][ T8782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  494.099233][ T4932] Bluetooth: hci5: command tx timeout
[  494.225538][ T8790] loop2: detected capacity change from 0 to 16
[  494.451743][ T5732] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  494.451775][ T5732] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  494.847247][ T8790] erofs (device loop2): invalid ishare xattr prefix id 0
[  495.503177][   T67] tipc: Subscription rejected, illegal request
[  495.893694][ T8807] loop3: detected capacity change from 0 to 256
[  495.965790][ T8807] FAT-fs (loop3): Directory bread(block 64) failed
[  495.965830][ T8807] FAT-fs (loop3): Directory bread(block 65) failed
[  495.966030][ T8807] FAT-fs (loop3): Directory bread(block 66) failed
[  495.966055][ T8807] FAT-fs (loop3): Directory bread(block 67) failed
[  495.966160][ T8807] FAT-fs (loop3): Directory bread(block 68) failed
[  495.966185][ T8807] FAT-fs (loop3): Directory bread(block 69) failed
[  495.966281][ T8807] FAT-fs (loop3): Directory bread(block 70) failed
[  495.966306][ T8807] FAT-fs (loop3): Directory bread(block 71) failed
[  495.966403][ T8807] FAT-fs (loop3): Directory bread(block 72) failed
[  495.966428][ T8807] FAT-fs (loop3): Directory bread(block 73) failed
[  495.969380][ T8805] loop2: detected capacity change from 0 to 4096
[  496.126444][ T8805] EXT4-fs: Ignoring removed mblk_io_submit option
[  497.130547][ T8805] EXT4-fs (loop2): Test dummy encryption mode enabled
[  497.187773][ T8805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.336909][ T8805] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  497.717767][ T8763] lo speed is unknown, defaulting to 1000
[  498.493229][ T8819] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  499.453758][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.027351][   T32] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  500.177501][   T32] usb 5-1: Using ep0 maxpacket: 16
[  500.199459][   T32] usb 5-1: config 6 has an invalid interface number: 7 but max is 1
[  500.199568][   T32] usb 5-1: config 6 has an invalid interface number: 104 but max is 1
[  500.199618][   T32] usb 5-1: config 6 has no interface number 0
[  500.199664][   T32] usb 5-1: config 6 has no interface number 1
[  500.200121][   T32] usb 5-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  500.200374][   T32] usb 5-1: config 6 interface 7 has no altsetting 0
[  500.200422][   T32] usb 5-1: config 6 interface 104 has no altsetting 0
[  500.918505][   T32] usb 5-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  500.918541][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.918562][   T32] usb 5-1: Product: syz
[  500.918577][   T32] usb 5-1: Manufacturer: syz
[  500.918593][   T32] usb 5-1: SerialNumber: syz
[  501.157575][ T8845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  501.443481][   T32] ch341 5-1:6.7: ch341-uart converter detected
[  502.545810][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  502.545924][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  502.627368][   T32] usb 5-1: failed to receive control message: -71
[  502.627425][   T32] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  502.675696][   T32] ch341 5-1:6.104: ch341-uart converter detected
[  502.696178][   T32] usb 5-1: failed to receive control message: -71
[  502.696240][   T32] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  502.781455][   T32] usb 5-1: USB disconnect, device number 22
[  502.797904][   T32] ch341 5-1:6.7: device disconnected
[  502.816126][   T32] ch341 5-1:6.104: device disconnected
[  503.447451][ T8856] loop2: detected capacity change from 0 to 1024
[  503.464493][ T8856] =======================================================
[  503.464493][ T8856] WARNING: The mand mount option has been deprecated and
[  503.464493][ T8856]          and is ignored by this kernel. Remove the mand
[  503.464493][ T8856]          option from the mount to silence this warning.
[  503.464493][ T8856] =======================================================
[  505.950352][ T8856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  505.950527][ T8856] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  507.508161][ T8871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  508.029532][  T107] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  508.029571][  T107] EXT4-fs (loop2): This should not happen!! Data will be lost
[  508.029571][  T107] 
[  508.029588][  T107] EXT4-fs (loop2): Total free blocks count 0
[  508.029604][  T107] EXT4-fs (loop2): Free/Dirty block details
[  508.029643][  T107] EXT4-fs (loop2): free_blocks=0
[  508.029678][  T107] EXT4-fs (loop2): dirty_blocks=16
[  508.029693][  T107] EXT4-fs (loop2): Block reservation details
[  508.029707][  T107] EXT4-fs (loop2): i_reserved_data_blocks=1
[  508.215039][ T5627] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  508.220176][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  508.411710][   T32] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  508.544858][   T32] usb 4-1: device descriptor read/64, error -71
[  508.781705][   T32] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  508.914613][   T32] usb 4-1: device descriptor read/64, error -71
[  509.022223][   T32] usb usb4-port1: attempt power cycle
[  509.093320][ T5732] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  509.263369][ T5732] usb 3-1: Using ep0 maxpacket: 8
[  509.276923][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.276951][ T5732] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  509.281233][ T5732] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  509.281265][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.281288][ T5732] usb 3-1: Product: syz
[  509.281303][ T5732] usb 3-1: Manufacturer: syz
[  509.281319][ T5732] usb 3-1: SerialNumber: syz
[  509.361145][ T5732] usb 3-1: config 0 descriptor??
[  509.381693][   T32] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  509.423420][   T32] usb 4-1: device descriptor read/8, error -71
[  509.493604][ T8912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  509.891703][   T32] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  509.912540][   T32] usb 4-1: device descriptor read/8, error -71
[  510.024826][   T32] usb usb4-port1: unable to enumerate USB device
[  510.810567][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.810854][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.811077][ T8763] bridge_slave_0: entered allmulticast mode
[  510.822513][ T8763] bridge_slave_0: entered promiscuous mode
[  510.863249][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.863561][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.864052][ T8763] bridge_slave_1: entered allmulticast mode
[  510.896257][ T8763] bridge_slave_1: entered promiscuous mode
[  511.091218][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.110177][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.837509][ T8931] 9p: Bad value for 'rfdno'
[  512.259957][ T8763] team0: Port device team_slave_0 added
[  512.315189][ T8763] team0: Port device team_slave_1 added
[  512.489640][ T5810] usb 3-1: USB disconnect, device number 16
[  512.735876][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  512.735896][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.735926][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.779203][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.779224][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.779258][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  515.442132][   T32] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  515.571783][   T32] usb 5-1: device descriptor read/64, error -71
[  515.811756][   T32] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  515.941705][   T32] usb 5-1: device descriptor read/64, error -71
[  516.064166][   T32] usb usb5-port1: attempt power cycle
[  516.177868][ T8964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  516.206299][ T8763] hsr_slave_0: entered promiscuous mode
[  516.212263][ T8763] hsr_slave_1: entered promiscuous mode
[  516.228419][ T8763] debugfs: 'hsr0' already exists in 'hsr'
[  516.228450][ T8763] Cannot create hsr debugfs directory
[  516.471702][   T32] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  516.536117][   T32] usb 5-1: device descriptor read/8, error -71
[  516.771851][   T32] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  516.792656][   T32] usb 5-1: device descriptor read/8, error -71
[  516.902365][   T32] usb usb5-port1: unable to enumerate USB device
[  517.338135][ T8968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  518.086517][ T7471] bridge_slave_1: left allmulticast mode
[  518.086547][ T7471] bridge_slave_1: left promiscuous mode
[  518.134370][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.534346][ T7471] bridge_slave_0: left allmulticast mode
[  518.534388][ T7471] bridge_slave_0: left promiscuous mode
[  518.534581][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.670891][   T32] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  519.971795][   T32] usb 3-1: Using ep0 maxpacket: 8
[  520.412534][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.412566][   T32] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  520.417943][   T32] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  520.417976][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.417999][   T32] usb 3-1: Product: syz
[  520.418015][   T32] usb 3-1: Manufacturer: syz
[  520.418031][   T32] usb 3-1: SerialNumber: syz
[  520.481612][   T32] usb 3-1: config 0 descriptor??
[  521.573005][ T8993] 9p: Bad value for 'rfdno'
[  522.433309][   T10] usb 3-1: USB disconnect, device number 17
[  522.930550][ T9006] loop8: detected capacity change from 0 to 8
[  522.981802][ T9006] Dev loop8: unable to read RDB block 8
[  522.981852][ T9006]  loop8: unable to read partition table
[  522.982092][ T9006] loop8: partition table beyond EOD, truncated
[  522.982115][ T9006] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  523.204139][ T9017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  524.098152][ T9016] loop3: detected capacity change from 0 to 512
[  524.873211][ T9016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.161162][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.858140][ T9027] loop3: detected capacity change from 0 to 40427
[  526.885125][ T9027] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  526.885154][ T9027] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  527.000734][ T9027] F2FS-fs (loop3): invalid crc value
[  527.955161][ T9027] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  528.381469][ T9027] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  528.382016][ T9027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  528.480073][ T9029] f2fs_ckpt-7:3: attempt to access beyond end of device
[  528.480073][ T9029] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  528.527199][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: f2fs_ckpt-7:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  528.527238][ T9029] Tainted: [L]=SOFTLOCKUP
[  528.527246][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  528.527261][ T9029] Call Trace:
[  528.527269][ T9029]  <TASK>
[  528.527280][ T9029]  dump_stack_lvl+0xe8/0x150
[  528.527316][ T9029]  f2fs_stop_checkpoint+0x3cd/0x590
[  528.527361][ T9029]  f2fs_write_end_io+0x1274/0x1740
[  528.527421][ T9029]  __submit_merged_bio+0x256/0x6a0
[  528.527452][ T9029]  __submit_merged_write_cond+0x3c9/0x4e0
[  528.527509][ T9029]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  528.527569][ T9029]  f2fs_write_data_pages+0x287e/0x34f0
[  528.527594][ T9029]  ? unwind_next_frame+0xa6/0x2550
[  528.527624][ T9029]  ? lock_release+0x4b/0x3c0
[  528.527682][ T9029]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  528.527758][ T9029]  ? do_raw_spin_lock+0x12b/0x2f0
[  528.527794][ T9029]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  528.527821][ T9029]  ? lockdep_hardirqs_on+0x7a/0x110
[  528.527847][ T9029]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  528.527873][ T9029]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  528.527908][ T9029]  ? reacquire_held_locks+0x104/0x190
[  528.527937][ T9029]  ? rt_spin_lock+0x1e0/0x400
[  528.527976][ T9029]  ? rt_spin_unlock+0x14f/0x200
[  528.528014][ T9029]  ? rt_spin_unlock+0x160/0x200
[  528.528047][ T9029]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  528.528075][ T9029]  do_writepages+0x32e/0x550
[  528.528111][ T9029]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  528.528148][ T9029]  ? rt_spin_unlock+0x14f/0x200
[  528.528193][ T9029]  filemap_fdatawrite+0x1ec/0x2f0
[  528.528234][ T9029]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  528.528264][ T9029]  ? __lock_acquire+0x6b5/0x2d10
[  528.528328][ T9029]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  528.528371][ T9029]  ? rt_spin_unlock+0x160/0x200
[  528.528407][ T9029]  f2fs_sync_dirty_inodes+0x30e/0x830
[  528.528453][ T9029]  f2fs_write_checkpoint+0x9df/0x26a0
[  528.528576][ T9029]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  528.528646][ T9029]  ? rwbase_write_lock+0x568/0x730
[  528.528688][ T9029]  __write_checkpoint_sync+0x124/0x2b0
[  528.528726][ T9029]  ? __pfx___write_checkpoint_sync+0x10/0x10
[  528.528772][ T9029]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  528.528802][ T9029]  ? reacquire_held_locks+0x104/0x190
[  528.528832][ T9029]  ? rt_spin_lock+0x1e0/0x400
[  528.528870][ T9029]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  528.528913][ T9029]  __checkpoint_and_complete_reqs+0x53/0x2d0
[  528.528951][ T9029]  issue_checkpoint_thread+0xd6/0x280
[  528.528983][ T9029]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  528.529015][ T9029]  ? __pfx_autoremove_wake_function+0x10/0x10
[  528.529038][ T9029]  ? __kthread_parkme+0x7a/0x1f0
[  528.529063][ T9029]  kthread+0x389/0x470
[  528.529089][ T9029]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  528.529110][ T9029]  ? __pfx_kthread+0x10/0x10
[  528.529131][ T9029]  ret_from_fork+0x514/0xb70
[  528.529156][ T9029]  ? __pfx_ret_from_fork+0x10/0x10
[  528.529177][ T9029]  ? __switch_to+0xc79/0x1410
[  528.529199][ T9029]  ? __pfx_kthread+0x10/0x10
[  528.529220][ T9029]  ret_from_fork_asm+0x1a/0x30
[  528.529260][ T9029]  </TASK>
[  528.704449][ T9029] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  530.638042][ T9062] loop8: detected capacity change from 0 to 8
[  530.649566][ T9062] Dev loop8: unable to read RDB block 8
[  530.649757][ T9062]  loop8: unable to read partition table
[  530.650333][ T9062] loop8: partition table beyond EOD, truncated
[  530.650382][ T9062] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  530.687954][ T7471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  530.793797][ T7471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  530.869890][ T7471] bond0 (unregistering): Released all slaves
[  531.033233][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5
[  531.600010][ T9068] input: syz0 as /devices/virtual/input/input12
[  537.478735][ T5732] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  537.856093][ T5732] usb 3-1: device descriptor read/64, error -71
[  537.862987][ T7471] hsr_slave_0: left promiscuous mode
[  537.901912][ T7471] hsr_slave_1: left promiscuous mode
[  537.901927][ T5610] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  537.916305][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  538.032768][ T7471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.091705][ T5610] usb 4-1: Using ep0 maxpacket: 32
[  538.092711][ T5610] usb 4-1: no configurations
[  538.092724][ T5610] usb 4-1: can't read configurations, error -22
[  538.101851][ T5732] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  538.233164][ T5610] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  538.268620][ T5732] usb 3-1: device descriptor read/64, error -71
[  538.381902][ T5732] usb usb3-port1: attempt power cycle
[  538.721880][ T5732] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  538.742628][ T5732] usb 3-1: device descriptor read/8, error -71
[  538.982731][ T5732] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  539.002616][ T5732] usb 3-1: device descriptor read/8, error -71
[  539.113769][ T5732] usb usb3-port1: unable to enumerate USB device
[  539.536995][ T9127] loop4: detected capacity change from 0 to 40427
[  539.557182][ T9127] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  539.557211][ T9127] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  539.578175][ T9127] F2FS-fs (loop4): invalid crc value
[  539.702897][ T9127] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  539.726605][ T9127] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  539.726639][ T9127] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  540.195241][ T5628] syz-executor: attempt to access beyond end of device
[  540.195241][ T5628] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  540.201337][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  540.201465][ T5628] Tainted: [L]=SOFTLOCKUP
[  540.201487][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  540.201511][ T5628] Call Trace:
[  540.201520][ T5628]  <TASK>
[  540.201529][ T5628]  dump_stack_lvl+0xe8/0x150
[  540.201564][ T5628]  f2fs_stop_checkpoint+0x3cd/0x590
[  540.201607][ T5628]  f2fs_write_end_io+0x1274/0x1740
[  540.201658][ T5628]  __submit_merged_bio+0x256/0x6a0
[  540.201691][ T5628]  __submit_merged_write_cond+0x3c9/0x4e0
[  540.201738][ T5628]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  540.201800][ T5628]  f2fs_write_data_pages+0x287e/0x34f0
[  540.201867][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  540.201948][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  540.201978][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  540.202026][ T5628]  ? do_raw_spin_lock+0x12b/0x2f0
[  540.202061][ T5628]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  540.202088][ T5628]  ? lockdep_hardirqs_on+0x7a/0x110
[  540.202113][ T5628]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  540.202141][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  540.202171][ T5628]  do_writepages+0x32e/0x550
[  540.202206][ T5628]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  540.202240][ T5628]  ? rt_spin_unlock+0x14f/0x200
[  540.202283][ T5628]  filemap_fdatawrite+0x1ec/0x2f0
[  540.202319][ T5628]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  540.202349][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  540.202461][ T5628]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  540.202572][ T5628]  ? rt_spin_unlock+0x160/0x200
[  540.202651][ T5628]  f2fs_sync_dirty_inodes+0x30e/0x830
[  540.202791][ T5628]  f2fs_write_checkpoint+0x9df/0x26a0
[  540.202865][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  540.203033][ T5628]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  540.203252][ T5628]  kill_f2fs_super+0x314/0x730
[  540.203339][ T5628]  ? __pfx_kill_f2fs_super+0x10/0x10
[  540.203426][ T5628]  ? lockdep_hardirqs_on+0x7a/0x110
[  540.203513][ T5628]  deactivate_locked_super+0xbc/0x130
[  540.203612][ T5628]  cleanup_mnt+0x437/0x4d0
[  540.203672][ T5628]  ? _raw_spin_unlock_irq+0x23/0x50
[  540.203748][ T5628]  task_work_run+0x1d9/0x270
[  540.203833][ T5628]  ? __pfx_task_work_run+0x10/0x10
[  540.203899][ T5628]  ? rt_spin_unlock+0x14f/0x200
[  540.203991][ T5628]  ? shrink_dentry_list+0x659/0x670
[  540.204127][ T5628]  get_signal+0x11eb/0x1330
[  540.204219][ T5628]  ? path_umount+0x24f/0xb40
[  540.204301][ T5628]  ? mntput_no_expire+0x1c/0x1c0
[  540.204367][ T5628]  ? __pfx_mntput_no_expire_slowpath+0x10/0x10
[  540.204442][ T5628]  ? mntput_no_expire+0x1c/0x1c0
[  540.204529][ T5628]  arch_do_signal_or_restart+0xbc/0x840
[  540.204596][ T5628]  ? path_umount+0x24f/0xb40
[  540.204677][ T5628]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  540.204741][ T5628]  ? user_path_at+0xd4/0x160
[  540.204855][ T5628]  exit_to_user_mode_loop+0x8c/0x4d0
[  540.204912][ T5628]  ? rcu_is_watching+0x15/0xb0
[  540.205004][ T5628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.205068][ T5628]  do_syscall_64+0x33e/0x560
[  540.205138][ T5628]  ? trace_irq_disable+0x3b/0x140
[  540.205194][ T5628]  ? clear_bhb_loop+0x40/0x90
[  540.205277][ T5628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.205333][ T5628] RIP: 0033:0x7fc96384e097
[  540.205396][ T5628] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  540.205462][ T5628] RSP: 002b:00007ffe0e923308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  540.205548][ T5628] RAX: 0000000000000000 RBX: 00007fc9638e21ca RCX: 00007fc96384e097
[  540.205594][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0e9233c0
[  540.205630][ T5628] RBP: 00007ffe0e9233c0 R08: 00007ffe0e9243c0 R09: 00000000ffffffff
[  540.205678][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0e924450
[  540.205713][ T5628] R13: 00007fc9638e21ca R14: 0000000000083a01 R15: 00007ffe0e924490
[  540.205808][ T5628]  </TASK>
[  540.229152][ T5628] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  540.401713][ T5610] usb 4-1: Using ep0 maxpacket: 32
[  540.419142][ T5610] usb 4-1: config 6 has an invalid interface number: 7 but max is 1
[  540.419259][ T5610] usb 4-1: config 6 has an invalid interface number: 104 but max is 1
[  540.419315][ T5610] usb 4-1: config 6 has an invalid interface association descriptor of length 2, skipping
[  540.419371][ T5610] usb 4-1: config 6 has no interface number 0
[  540.419414][ T5610] usb 4-1: config 6 has no interface number 1
[  540.419576][ T5610] usb 4-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  540.419695][ T5610] usb 4-1: config 6 interface 7 has no altsetting 0
[  540.419748][ T5610] usb 4-1: config 6 interface 104 has no altsetting 0
[  540.601961][ T5610] usb 4-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  540.602047][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.602104][ T5610] usb 4-1: Product: syz
[  540.602145][ T5610] usb 4-1: Manufacturer: syz
[  540.602181][ T5610] usb 4-1: SerialNumber: syz
[  541.006626][ T5610] ch341 4-1:6.7: ch341-uart converter detected
[  541.579877][ T5610] usb 4-1: failed to receive control message: -71
[  541.579940][ T5610] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  541.753742][ T5610] ch341 4-1:6.104: ch341-uart converter detected
[  541.760452][ T5610] usb 4-1: failed to receive control message: -71
[  541.760512][ T5610] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  541.887405][ T5610] usb 4-1: USB disconnect, device number 30
[  541.996997][ T5610] ch341 4-1:6.7: device disconnected
[  542.030920][ T5610] ch341 4-1:6.104: device disconnected
[  544.746989][ T9161] loop3: detected capacity change from 0 to 40427
[  544.757539][ T9161] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  544.757566][ T9161] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  544.786447][ T9161] F2FS-fs (loop3): invalid crc value
[  545.025760][ T9161] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  545.092211][ T9161] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  545.092246][ T9161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  545.520797][ T5616] syz-executor: attempt to access beyond end of device
[  545.520797][ T5616] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  545.577764][ T5616] CPU: 0 UID: 0 PID: 5616 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  545.577800][ T5616] Tainted: [L]=SOFTLOCKUP
[  545.577807][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  545.577834][ T5616] Call Trace:
[  545.577843][ T5616]  <TASK>
[  545.577852][ T5616]  dump_stack_lvl+0xe8/0x150
[  545.577890][ T5616]  f2fs_stop_checkpoint+0x3cd/0x590
[  545.577931][ T5616]  f2fs_write_end_io+0x1274/0x1740
[  545.577981][ T5616]  __submit_merged_bio+0x256/0x6a0
[  545.578013][ T5616]  __submit_merged_write_cond+0x3c9/0x4e0
[  545.578060][ T5616]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  545.578123][ T5616]  f2fs_write_data_pages+0x287e/0x34f0
[  545.578188][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  545.578253][ T5616]  ? __lock_acquire+0x6b5/0x2d10
[  545.578282][ T5616]  ? __lock_acquire+0x6b5/0x2d10
[  545.578328][ T5616]  ? do_raw_spin_lock+0x12b/0x2f0
[  545.578373][ T5616]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  545.578399][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  545.578426][ T5616]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  545.578453][ T5616]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  545.578482][ T5616]  do_writepages+0x32e/0x550
[  545.578516][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  545.578550][ T5616]  ? rt_spin_unlock+0x14f/0x200
[  545.578595][ T5616]  filemap_fdatawrite+0x1ec/0x2f0
[  545.578637][ T5616]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  545.578669][ T5616]  ? __lock_acquire+0x6b5/0x2d10
[  545.578736][ T5616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  545.578779][ T5616]  ? rt_spin_unlock+0x160/0x200
[  545.578816][ T5616]  f2fs_sync_dirty_inodes+0x30e/0x830
[  545.578862][ T5616]  f2fs_write_checkpoint+0x9df/0x26a0
[  545.578890][ T5616]  ? __lock_acquire+0x6b5/0x2d10
[  545.578951][ T5616]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  545.579042][ T5616]  kill_f2fs_super+0x314/0x730
[  545.579078][ T5616]  ? __pfx_kill_f2fs_super+0x10/0x10
[  545.579127][ T5616]  ? lockdep_hardirqs_on+0x7a/0x110
[  545.579168][ T5616]  deactivate_locked_super+0xbc/0x130
[  545.579207][ T5616]  cleanup_mnt+0x437/0x4d0
[  545.579230][ T5616]  ? _raw_spin_unlock_irq+0x23/0x50
[  545.579260][ T5616]  task_work_run+0x1d9/0x270
[  545.579292][ T5616]  ? __pfx_task_work_run+0x10/0x10
[  545.579334][ T5616]  exit_to_user_mode_loop+0xf3/0x4d0
[  545.579366][ T5616]  ? rcu_is_watching+0x15/0xb0
[  545.579396][ T5616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.579423][ T5616]  do_syscall_64+0x33e/0x560
[  545.579449][ T5616]  ? trace_irq_disable+0x3b/0x140
[  545.579472][ T5616]  ? clear_bhb_loop+0x40/0x90
[  545.579501][ T5616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.579524][ T5616] RIP: 0033:0x7f8246a1e097
[  545.579547][ T5616] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  545.579566][ T5616] RSP: 002b:00007ffc23ea8348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  545.579591][ T5616] RAX: 0000000000000000 RBX: 00007f8246ab21ca RCX: 00007f8246a1e097
[  545.579607][ T5616] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc23ea8400
[  545.579622][ T5616] RBP: 00007ffc23ea8400 R08: 00007ffc23ea9400 R09: 00000000ffffffff
[  545.579638][ T5616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc23ea9490
[  545.579651][ T5616] R13: 00007f8246ab21ca R14: 0000000000085002 R15: 00007ffc23ea94d0
[  545.579689][ T5616]  </TASK>
[  545.579832][ T5616] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  546.143435][ T7471] team0 (unregistering): Port device team_slave_1 removed
[  546.429036][ T7471] team0 (unregistering): Port device team_slave_0 removed
[  547.961719][ T5732] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  548.107803][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6
[  548.120309][ T5732] usb 4-1: Using ep0 maxpacket: 32
[  548.121402][ T5732] usb 4-1: no configurations
[  548.121421][ T5732] usb 4-1: can't read configurations, error -22
[  548.352914][ T5732] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  548.502817][ T5732] usb 4-1: Using ep0 maxpacket: 32
[  548.503854][ T5732] usb 4-1: no configurations
[  548.503871][ T5732] usb 4-1: can't read configurations, error -22
[  548.507372][ T5732] usb usb4-port1: attempt power cycle
[  548.913605][ T5732] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  548.975341][ T5732] usb 4-1: Using ep0 maxpacket: 32
[  549.039316][ T5732] usb 4-1: no configurations
[  549.040267][ T5732] usb 4-1: can't read configurations, error -22
[  549.758746][ T5732] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  549.848999][ T5732] usb 4-1: Using ep0 maxpacket: 32
[  549.850424][ T5732] usb 4-1: no configurations
[  549.850442][ T5732] usb 4-1: can't read configurations, error -22
[  549.850835][ T5732] usb usb4-port1: unable to enumerate USB device
[  550.435386][ T8164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  550.479839][ T8164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  550.499484][ T8164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  550.519707][ T8164] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  550.520844][ T8164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  550.699919][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  550.722265][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  550.722688][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  550.725819][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  550.740336][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  552.522192][ T9224] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  552.593533][ T9226] fuse: fd is not a fuse device
[  552.886992][ T4932] Bluetooth: hci3: command tx timeout
[  554.933346][ T4932] Bluetooth: hci3: command tx timeout
[  554.978826][ T9252] loop4: detected capacity change from 0 to 256
[  555.714665][ T9252] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  555.745365][ T5732] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  555.760954][ T9252] exFAT-fs (loop4): failed to load alloc-bitmap
[  555.760973][ T9252] exFAT-fs (loop4): failed to recognize exfat type
[  555.893996][ T5732] usb 3-1: Using ep0 maxpacket: 16
[  555.896641][ T5732] usb 3-1: config 6 has an invalid interface number: 7 but max is 1
[  555.896670][ T5732] usb 3-1: config 6 has an invalid interface number: 104 but max is 1
[  555.896693][ T5732] usb 3-1: config 6 has an invalid interface association descriptor of length 5, skipping
[  555.896715][ T5732] usb 3-1: config 6 has no interface number 0
[  555.896733][ T5732] usb 3-1: config 6 has no interface number 1
[  555.896793][ T5732] usb 3-1: config 6 interface 7 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  555.896837][ T5732] usb 3-1: config 6 interface 7 has no altsetting 0
[  555.896857][ T5732] usb 3-1: config 6 interface 104 has no altsetting 0
[  555.899858][ T5732] usb 3-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=c9.9d
[  555.899891][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.899913][ T5732] usb 3-1: Product: syz
[  555.899929][ T5732] usb 3-1: Manufacturer: syz
[  555.899944][ T5732] usb 3-1: SerialNumber: syz
[  556.591918][ T5732] ch341 3-1:6.7: ch341-uart converter detected
[  556.598235][ T5732] usb 3-1: failed to receive control message: -71
[  556.598298][ T5732] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  556.633655][ T5732] ch341 3-1:6.104: ch341-uart converter detected
[  556.639832][ T5732] usb 3-1: failed to receive control message: -71
[  556.639894][ T5732] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71
[  556.686759][ T5732] usb 3-1: USB disconnect, device number 22
[  556.737801][ T5732] ch341 3-1:6.7: device disconnected
[  556.770839][ T5732] ch341 3-1:6.104: device disconnected
[  557.008963][ T9262] loop4: detected capacity change from 0 to 40427
[  557.019087][ T9262] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  557.019114][ T9262] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  557.024934][ T9262] F2FS-fs (loop4): invalid crc value
[  557.025294][ T4932] Bluetooth: hci3: command tx timeout
[  557.167949][ T9262] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  557.207568][ T9262] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  557.207601][ T9262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  557.583353][ T9279] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  558.812074][ T5628] syz-executor: attempt to access beyond end of device
[  558.812074][ T5628] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  558.827660][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  558.827699][ T5628] Tainted: [L]=SOFTLOCKUP
[  558.827708][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  558.827722][ T5628] Call Trace:
[  558.827731][ T5628]  <TASK>
[  558.827740][ T5628]  dump_stack_lvl+0xe8/0x150
[  558.827777][ T5628]  f2fs_stop_checkpoint+0x3cd/0x590
[  558.827823][ T5628]  f2fs_write_end_io+0x1274/0x1740
[  558.827877][ T5628]  __submit_merged_bio+0x256/0x6a0
[  558.827910][ T5628]  __submit_merged_write_cond+0x3c9/0x4e0
[  558.827957][ T5628]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  558.828021][ T5628]  f2fs_write_data_pages+0x287e/0x34f0
[  558.828090][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  558.828134][ T5628]  ? do_raw_spin_lock+0x12b/0x2f0
[  558.828185][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  558.828214][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  558.828262][ T5628]  ? do_raw_spin_lock+0x12b/0x2f0
[  558.828298][ T5628]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  558.828327][ T5628]  ? lockdep_hardirqs_on+0x7a/0x110
[  558.828362][ T5628]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  558.828390][ T5628]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  558.828420][ T5628]  do_writepages+0x32e/0x550
[  558.828455][ T5628]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  558.828491][ T5628]  ? rt_spin_unlock+0x14f/0x200
[  558.828537][ T5628]  filemap_fdatawrite+0x1ec/0x2f0
[  558.828576][ T5628]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  558.828609][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  558.828675][ T5628]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  558.828720][ T5628]  ? rt_spin_unlock+0x160/0x200
[  558.828758][ T5628]  f2fs_sync_dirty_inodes+0x30e/0x830
[  558.828803][ T5628]  f2fs_write_checkpoint+0x9df/0x26a0
[  558.828832][ T5628]  ? __lock_acquire+0x6b5/0x2d10
[  558.828894][ T5628]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  558.828982][ T5628]  kill_f2fs_super+0x314/0x730
[  558.829019][ T5628]  ? __pfx_kill_f2fs_super+0x10/0x10
[  558.829062][ T5628]  ? lockdep_hardirqs_on+0x7a/0x110
[  558.829103][ T5628]  deactivate_locked_super+0xbc/0x130
[  558.829143][ T5628]  cleanup_mnt+0x437/0x4d0
[  558.829166][ T5628]  ? _raw_spin_unlock_irq+0x23/0x50
[  558.829199][ T5628]  task_work_run+0x1d9/0x270
[  558.829233][ T5628]  ? __pfx_task_work_run+0x10/0x10
[  558.829275][ T5628]  exit_to_user_mode_loop+0xf3/0x4d0
[  558.829300][ T5628]  ? rcu_is_watching+0x15/0xb0
[  558.829330][ T5628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.829361][ T5628]  do_syscall_64+0x33e/0x560
[  558.829386][ T5628]  ? trace_irq_disable+0x3b/0x140
[  558.829409][ T5628]  ? clear_bhb_loop+0x40/0x90
[  558.829436][ T5628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.829459][ T5628] RIP: 0033:0x7fc96384e097
[  558.829481][ T5628] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  558.829501][ T5628] RSP: 002b:00007ffe0e923308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  558.829526][ T5628] RAX: 0000000000000000 RBX: 00007fc9638e21ca RCX: 00007fc96384e097
[  558.829542][ T5628] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0e9233c0
[  558.829556][ T5628] RBP: 00007ffe0e9233c0 R08: 00007ffe0e9243c0 R09: 00000000ffffffff
[  558.829572][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0e924450
[  558.829588][ T5628] R13: 00007fc9638e21ca R14: 0000000000087f26 R15: 00007ffe0e924490
[  558.829625][ T5628]  </TASK>
[  558.833173][ T5628] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  559.073028][ T4932] Bluetooth: hci3: command tx timeout
[  561.058007][ T9313] loop2: detected capacity change from 0 to 1024
[  561.077297][ T9313] EXT4-fs: Ignoring removed nomblk_io_submit option
[  561.424110][ T9313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  561.424276][ T9313] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.479693][ T9207] lo speed is unknown, defaulting to 1000
[  561.548390][ T9313] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.996: Freeing blocks not in datazone - block = 0, count = 16
[  561.601311][ T9313] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.996: bg 0: block 112: padding at end of block bitmap is not set
[  562.029526][ T9313] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  562.912478][ T9323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.998'.
[  563.155496][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  563.155611][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  564.196205][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  565.322363][ T9349] loop4: detected capacity change from 0 to 40427
[  565.359528][ T9349] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  565.359554][ T9349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  565.361898][ T9349] F2FS-fs (loop4): invalid crc value
[  565.496374][ T9349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  565.582968][ T9349] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  565.583003][ T9349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  566.193340][ T9349] syz.4.1006: attempt to access beyond end of device
[  566.193340][ T9349] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  566.196476][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.4.1006 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  566.196514][ T9349] Tainted: [L]=SOFTLOCKUP
[  566.196521][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  566.196534][ T9349] Call Trace:
[  566.196543][ T9349]  <TASK>
[  566.196553][ T9349]  dump_stack_lvl+0xe8/0x150
[  566.196587][ T9349]  f2fs_stop_checkpoint+0x3cd/0x590
[  566.196626][ T9349]  f2fs_write_end_io+0x1274/0x1740
[  566.196674][ T9349]  __submit_merged_bio+0x256/0x6a0
[  566.196702][ T9349]  __submit_merged_write_cond+0x3c9/0x4e0
[  566.196746][ T9349]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  566.196805][ T9349]  f2fs_write_data_pages+0x287e/0x34f0
[  566.196864][ T9349]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  566.196902][ T9349]  ? do_raw_spin_lock+0x12b/0x2f0
[  566.196951][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.196979][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.197024][ T9349]  ? do_raw_spin_lock+0x12b/0x2f0
[  566.197064][ T9349]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  566.197099][ T9349]  ? lockdep_hardirqs_on+0x7a/0x110
[  566.197124][ T9349]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  566.197150][ T9349]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  566.197188][ T9349]  do_writepages+0x32e/0x550
[  566.197221][ T9349]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  566.197253][ T9349]  ? rt_spin_unlock+0x14f/0x200
[  566.197294][ T9349]  filemap_fdatawrite+0x1ec/0x2f0
[  566.197331][ T9349]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  566.197358][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.197415][ T9349]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  566.197454][ T9349]  ? rt_spin_unlock+0x160/0x200
[  566.197487][ T9349]  f2fs_sync_dirty_inodes+0x30e/0x830
[  566.197529][ T9349]  f2fs_write_checkpoint+0x9df/0x26a0
[  566.197555][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.197610][ T9349]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  566.197688][ T9349]  kill_f2fs_super+0x314/0x730
[  566.197718][ T9349]  ? __pfx_kill_f2fs_super+0x10/0x10
[  566.197755][ T9349]  ? lockdep_hardirqs_on+0x7a/0x110
[  566.197793][ T9349]  deactivate_locked_super+0xbc/0x130
[  566.197832][ T9349]  cleanup_mnt+0x437/0x4d0
[  566.197861][ T9349]  task_work_run+0x1d9/0x270
[  566.197897][ T9349]  ? __pfx_task_work_run+0x10/0x10
[  566.197923][ T9349]  ? rt_spin_unlock+0x14f/0x200
[  566.197960][ T9349]  ? rt_spin_unlock+0x160/0x200
[  566.197998][ T9349]  get_signal+0x11eb/0x1330
[  566.198031][ T9349]  ? path_umount+0x24f/0xb40
[  566.198058][ T9349]  ? mntput_no_expire+0x1c/0x1c0
[  566.198101][ T9349]  ? __pfx_mntput_no_expire_slowpath+0x10/0x10
[  566.198130][ T9349]  ? mntput_no_expire+0x1c/0x1c0
[  566.198162][ T9349]  arch_do_signal_or_restart+0xbc/0x840
[  566.198188][ T9349]  ? path_umount+0x24f/0xb40
[  566.198213][ T9349]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  566.198232][ T9349]  ? user_path_at+0xd4/0x160
[  566.198271][ T9349]  exit_to_user_mode_loop+0x8c/0x4d0
[  566.198292][ T9349]  ? rcu_is_watching+0x15/0xb0
[  566.198320][ T9349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.198341][ T9349]  do_syscall_64+0x33e/0x560
[  566.198365][ T9349]  ? trace_irq_disable+0x3b/0x140
[  566.198387][ T9349]  ? clear_bhb_loop+0x40/0x90
[  566.198413][ T9349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.198434][ T9349] RIP: 0033:0x7fc96384ce59
[  566.198456][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.198476][ T9349] RSP: 002b:00007fc961a9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  566.198507][ T9349] RAX: 0000000000000000 RBX: 00007fc963ac5fa0 RCX: 00007fc96384ce59
[  566.198522][ T9349] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040
[  566.198535][ T9349] RBP: 00007fc9638e2d6f R08: 0000000000000000 R09: 0000000000000000
[  566.198547][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.198559][ T9349] R13: 00007fc963ac6038 R14: 00007fc963ac5fa0 R15: 00007ffe0e924098
[  566.198591][ T9349]  </TASK>
[  566.198601][ T9349] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  566.200108][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.4.1006 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  566.200145][ T9349] Tainted: [L]=SOFTLOCKUP
[  566.200153][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  566.200166][ T9349] Call Trace:
[  566.200174][ T9349]  <TASK>
[  566.200183][ T9349]  dump_stack_lvl+0xe8/0x150
[  566.200217][ T9349]  f2fs_stop_checkpoint+0x3cd/0x590
[  566.200257][ T9349]  f2fs_write_end_io+0x1274/0x1740
[  566.200303][ T9349]  __submit_merged_bio+0x256/0x6a0
[  566.200333][ T9349]  __submit_merged_write_cond+0x3c9/0x4e0
[  566.200376][ T9349]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  566.200434][ T9349]  f2fs_write_data_pages+0x287e/0x34f0
[  566.200497][ T9349]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  566.200537][ T9349]  ? do_raw_spin_lock+0x12b/0x2f0
[  566.200585][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.200612][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.200667][ T9349]  ? do_raw_spin_lock+0x12b/0x2f0
[  566.200700][ T9349]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  566.200725][ T9349]  ? lockdep_hardirqs_on+0x7a/0x110
[  566.200747][ T9349]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  566.200771][ T9349]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  566.200798][ T9349]  do_writepages+0x32e/0x550
[  566.200832][ T9349]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  566.200867][ T9349]  ? rt_spin_unlock+0x14f/0x200
[  566.200909][ T9349]  filemap_fdatawrite+0x1ec/0x2f0
[  566.200949][ T9349]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  566.200980][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.201041][ T9349]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  566.201088][ T9349]  ? rt_spin_unlock+0x160/0x200
[  566.201119][ T9349]  f2fs_sync_dirty_inodes+0x30e/0x830
[  566.201161][ T9349]  f2fs_write_checkpoint+0x9df/0x26a0
[  566.201193][ T9349]  ? __lock_acquire+0x6b5/0x2d10
[  566.201247][ T9349]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  566.201326][ T9349]  kill_f2fs_super+0x314/0x730
[  566.201359][ T9349]  ? __pfx_kill_f2fs_super+0x10/0x10
[  566.201398][ T9349]  ? lockdep_hardirqs_on+0x7a/0x110
[  566.201432][ T9349]  deactivate_locked_super+0xbc/0x130
[  566.201468][ T9349]  cleanup_mnt+0x437/0x4d0
[  566.201509][ T9349]  task_work_run+0x1d9/0x270
[  566.201547][ T9349]  ? __pfx_task_work_run+0x10/0x10
[  566.201581][ T9349]  ? rt_spin_unlock+0x14f/0x200
[  566.201621][ T9349]  ? rt_spin_unlock+0x160/0x200
[  566.201664][ T9349]  get_signal+0x11eb/0x1330
[  566.201696][ T9349]  ? path_umount+0x24f/0xb40
[  566.201725][ T9349]  ? mntput_no_expire+0x1c/0x1c0
[  566.201752][ T9349]  ? __pfx_mntput_no_expire_slowpath+0x10/0x10
[  566.201787][ T9349]  ? mntput_no_expire+0x1c/0x1c0
[  566.201819][ T9349]  arch_do_signal_or_restart+0xbc/0x840
[  566.201845][ T9349]  ? path_umount+0x24f/0xb40
[  566.201873][ T9349]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  566.201896][ T9349]  ? user_path_at+0xd4/0x160
[  566.201938][ T9349]  exit_to_user_mode_loop+0x8c/0x4d0
[  566.201960][ T9349]  ? rcu_is_watching+0x15/0xb0
[  566.201989][ T9349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.202013][ T9349]  do_syscall_64+0x33e/0x560
[  566.202038][ T9349]  ? trace_irq_disable+0x3b/0x140
[  566.202061][ T9349]  ? clear_bhb_loop+0x40/0x90
[  566.202096][ T9349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.202118][ T9349] RIP: 0033:0x7fc96384ce59
[  566.202139][ T9349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.202159][ T9349] RSP: 002b:00007fc961a9e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  566.202183][ T9349] RAX: 0000000000000000 RBX: 00007fc963ac5fa0 RCX: 00007fc96384ce59
[  566.202198][ T9349] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040
[  566.202214][ T9349] RBP: 00007fc9638e2d6f R08: 0000000000000000 R09: 0000000000000000
[  566.202229][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.202242][ T9349] R13: 00007fc963ac6038 R14: 00007fc963ac5fa0 R15: 00007ffe0e924098
[  566.202281][ T9349]  </TASK>
[  566.203270][ T9349] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  566.730399][ T5732] loop4: lost filesystem error report for type 5 error -108
[  566.919511][ T9363] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  567.970477][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1009'.
[  568.294947][ T9377] loop3: detected capacity change from 0 to 1024
[  571.341869][ T9377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.345343][ T9377] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.1011: deleted inode referenced: 12
[  571.801464][ T9377] EXT4-fs (loop3): Remounting filesystem read-only
[  573.335166][  T989] bridge_slave_1: left allmulticast mode
[  573.335207][  T989] bridge_slave_1: left promiscuous mode
[  573.335599][  T989] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.471337][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.556997][ T9400] program syz.2.1016 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  573.647684][  T989] bridge_slave_0: left allmulticast mode
[  573.647722][  T989] bridge_slave_0: left promiscuous mode
[  573.648017][  T989] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.857721][ T9407] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  574.453266][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  574.743175][ T9423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'.
[  575.144276][   T10] usb 4-1: Using ep0 maxpacket: 8
[  575.168612][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.168671][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  575.168700][   T10] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  575.168728][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  575.228707][   T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  575.228730][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.228746][   T10] usb 4-1: Product: syz
[  575.228756][   T10] usb 4-1: Manufacturer: syz
[  575.228768][   T10] usb 4-1: SerialNumber: syz
[  575.276117][   T10] usb 4-1: config 0 descriptor??
[  575.316348][   T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  575.517859][   T10] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  575.518175][   T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  575.520654][   T10] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  575.998265][   T10] usb 4-1: USB disconnect, device number 35
[  578.745994][ T9442] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1024'.
[  579.066774][  T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.472129][ T5810] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  582.164246][ T9466] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  582.197237][ T9466] fuse: fd is not a fuse device
[  582.222202][ T5810] usb 3-1: Using ep0 maxpacket: 16
[  582.288015][  T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  582.344637][ T9468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1031'.
[  582.913921][ T5810] usb 3-1: unable to read config index 0 descriptor/all
[  582.913981][ T5810] usb 3-1: can't read configurations, error -71
[  583.130694][  T989] bond0 (unregistering): Released all slaves
[  583.346655][ T9476] loop8: detected capacity change from 0 to 8
[  583.350740][ T9476] Dev loop8: unable to read RDB block 8
[  583.350788][ T9476]  loop8: unable to read partition table
[  583.351038][ T9476] loop8: partition table beyond EOD, truncated
[  583.351058][ T9476] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  583.543470][ T5810] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  585.048695][ T5810] usb 3-1: Using ep0 maxpacket: 8
[  585.051372][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.051428][ T5810] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  585.051456][ T5810] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  585.054464][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0
[  585.060317][ T5810] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  585.060348][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.060370][ T5810] usb 3-1: Product: syz
[  585.060386][ T5810] usb 3-1: Manufacturer: syz
[  585.060401][ T5810] usb 3-1: SerialNumber: syz
[  585.178918][ T5810] usb 3-1: config 0 descriptor??
[  585.196614][ T5810] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  585.418746][ T5810] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  585.419062][ T5810] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  585.445545][ T5810] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  585.609776][ T5810] usb 3-1: USB disconnect, device number 24
[  585.632556][  T989] hsr_slave_0: left promiscuous mode
[  585.675773][  T989] hsr_slave_1: left promiscuous mode
[  585.676669][  T989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.941132][  T989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.976655][ T9497] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  587.008832][ T9497] fuse: fd is not a fuse device
[  587.128195][ T9499] loop2: detected capacity change from 0 to 512
[  587.209077][ T9499] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  589.229588][  T989] team0 (unregistering): Port device team_slave_1 removed
[  590.750192][  T989] team0 (unregistering): Port device team_slave_0 removed
[  591.062520][ T9499] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  591.062687][ T9499] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  591.062755][ T9499] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1044: Failed to acquire dquot type 1
[  591.062779][ T9499] loop2: lost filesystem error report for type 5 error -117
[  591.072253][    C1] EXT4-fs (loop2): initial error at time 1779334885: ext4_acquire_dquot:7034
[  591.072300][    C1] EXT4-fs (loop2): last error at time 1779334885: ext4_acquire_dquot:7034
[  591.553146][ T9499] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1044: corrupted inode contents
[  591.553389][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.586117][ T9499] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.1044: mark_inode_dirty error
[  591.586155][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.641629][ T9499] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1044: corrupted inode contents
[  591.641669][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.642434][ T9499] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.1044: mark_inode_dirty error
[  591.642465][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.645608][ T9499] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1044: corrupted inode contents
[  591.645643][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.775087][ T9499] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  591.775121][ T9499] loop2: lost filesystem error report for type 5 error -117
[  591.776657][ T9499] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.1044: corrupted inode contents
[  591.776692][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.780205][ T9499] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.1044: mark_inode_dirty error
[  591.780241][ T9499] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  591.780746][ T9499] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  591.780770][ T9499] loop2: lost filesystem error report for type 5 error -117
[  591.914489][ T9524] loop3: detected capacity change from 0 to 256
[  591.916182][ T9524] exfat: Deprecated parameter 'utf8'
[  591.916253][ T9524] exfat: Deprecated parameter 'namecase'
[  591.916344][ T9524] exfat: Deprecated parameter 'namecase'
[  591.916365][ T9524] exfat: Deprecated parameter 'utf8'
[  593.880527][ T9524] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  593.880961][ T9524] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  593.995494][ T9499] EXT4-fs (loop2): 1 truncate cleaned up
[  594.067943][ T9499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  594.068137][ T9499] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  596.878172][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.922025][ T9532] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  596.922120][ T9532] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  597.046435][ T9532] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  597.069973][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state
[  597.081973][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.082218][ T9207] bridge_slave_0: entered allmulticast mode
[  597.084702][ T9207] bridge_slave_0: entered promiscuous mode
[  597.107343][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state
[  597.107729][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.107990][ T9207] bridge_slave_1: entered allmulticast mode
[  597.156486][ T9207] bridge_slave_1: entered promiscuous mode
[  597.516472][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.543505][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.600453][ T9541] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  597.615553][ T5732] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  597.656772][ T9541] fuse: Bad value for 'fd'
[  597.771669][ T5732] usb 3-1: Using ep0 maxpacket: 8
[  597.778169][ T5732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.778229][ T5732] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  597.778259][ T5732] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  597.778287][ T5732] usb 3-1: config 0 interface 0 has no altsetting 0
[  597.782476][ T5732] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  597.782506][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.782527][ T5732] usb 3-1: Product: syz
[  597.782541][ T5732] usb 3-1: Manufacturer: syz
[  597.782556][ T5732] usb 3-1: SerialNumber: syz
[  597.904426][ T5732] usb 3-1: config 0 descriptor??
[  597.930036][ T5732] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  598.150848][ T9207] team0: Port device team_slave_0 added
[  598.165306][ T5732] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  598.180896][ T5732] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  598.201219][ T9207] team0: Port device team_slave_1 added
[  598.211252][ T5732] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  598.515579][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  598.515606][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.515640][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  598.576211][ T8085] usb 3-1: USB disconnect, device number 25
[  598.585623][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.585638][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  598.585661][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  598.996456][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout
[  599.703357][ T9207] hsr_slave_0: entered promiscuous mode
[  599.710285][ T9207] hsr_slave_1: entered promiscuous mode
[  599.720433][ T9207] debugfs: 'hsr0' already exists in 'hsr'
[  599.720463][ T9207] Cannot create hsr debugfs directory
[  601.212385][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout
[  603.231768][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout
[  603.803519][ T9567] loop3: detected capacity change from 0 to 16
[  604.522926][ T9567] erofs (device loop3): mounted with root inode @ nid 36.
[  604.886860][ T9567] erofs (device loop3): invalid h_shared_count 255 @ nid 86
[  605.408064][ T9578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  607.242357][ T9207] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  607.315022][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  607.316317][ T9207] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  607.525416][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  607.699073][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  607.731547][ T9207] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  607.821615][   T10] usb 3-1: Using ep0 maxpacket: 8
[  607.824887][   T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64
[  607.824925][   T10] usb 3-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  607.824948][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  607.828479][   T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  607.828511][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.828533][   T10] usb 3-1: Product: syz
[  607.828549][   T10] usb 3-1: Manufacturer: syz
[  607.828565][   T10] usb 3-1: SerialNumber: syz
[  607.834864][   T10] usb 3-1: config 0 descriptor??
[  607.843305][   T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  608.161298][   T10] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[  608.175471][   T10] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  608.185413][   T10] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  608.249317][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  608.259391][ T9207] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  608.300535][ T9207] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  608.448507][   T10] usb 3-1: USB disconnect, device number 26
[  613.348865][ T8164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  613.393815][ T9625] netlink: 'syz.4.1067': attribute type 4 has an invalid length.
[  613.393878][ T8164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  613.396159][ T8164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  613.489399][ T9627] netlink: 'syz.4.1067': attribute type 4 has an invalid length.
[  613.491124][ T8164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  613.509302][ T8164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  614.155214][ T9640] overlayfs: failed to clone upperpath
[  615.338105][ T9643] loop2: detected capacity change from 0 to 512
[  615.341301][ T9643] EXT4-fs: Ignoring removed mblk_io_submit option
[  615.462596][ T9643] EXT4-fs (loop2): orphan cleanup on readonly fs
[  615.462628][ T9643] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  615.805091][ T8164] Bluetooth: hci5: command tx timeout
[  616.161209][ T9643] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1083: attempt to clear invalid blocks 2 len 1
[  616.161253][ T9643] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  616.170096][    C1] EXT4-fs (loop2): initial error at time 1779334910: ext4_clear_blocks:876: inode 13
[  616.170147][    C1] EXT4-fs (loop2): last error at time 1779334910: ext4_clear_blocks:876: inode 13
[  616.186442][ T9643] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  616.223428][ T9643] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1083: invalid indirect mapped block 1819239214 (level 0)
[  616.223472][ T9643] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  616.224090][ T9643] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1083: invalid indirect mapped block 1819239214 (level 1)
[  616.224125][ T9643] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  616.376086][ T9643] EXT4-fs (loop2): 1 truncate cleaned up
[  616.477288][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  619.432314][ T8164] Bluetooth: hci5: command tx timeout
[  620.775897][ T5627] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.227191][ T9679] loop8: detected capacity change from 0 to 8
[  621.254828][ T9679] Dev loop8: unable to read RDB block 8
[  621.254875][ T9679]  loop8: unable to read partition table
[  621.256585][ T9679] loop8: partition table beyond EOD, truncated
[  621.256611][ T9679] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  622.265500][ T9670] loop3: detected capacity change from 0 to 40427
[  622.270944][ T9670] f2fs: Unknown parameter 'whint_mode'
[  622.685607][ T8164] Bluetooth: hci5: command tx timeout
[  625.214024][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  625.214132][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  625.884601][ T8164] Bluetooth: hci5: command tx timeout
[  626.014975][ T9712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  627.531914][ T9704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  628.756421][ T9729] input: syz0 as /devices/virtual/input/input13
[  628.991628][ T5610] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  629.100758][ T9623] lo speed is unknown, defaulting to 1000
[  629.181796][ T5610] usb 3-1: Using ep0 maxpacket: 16
[  629.219176][ T5610] usb 3-1: unable to get BOS descriptor or descriptor too short
[  629.230267][ T5610] usb 3-1: unable to read config index 0 descriptor/start: -71
[  629.230313][ T5610] usb 3-1: can't read configurations, error -71
[  631.262047][ T8085] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  631.262078][ T8085] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  631.631655][    C0] ------------[ cut here ]------------
[  631.631670][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci5
[  631.631702][    C0] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd87/0x1090, CPU#0: ktimers/0/16
[  631.631743][    C0] Modules linked in:
[  631.631766][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  631.631798][    C0] Tainted: [L]=SOFTLOCKUP
[  631.631806][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  631.631819][    C0] RIP: 0010:__queue_work+0xda4/0x1090
[  631.631843][    C0] Code: 81 c7 68 01 00 00 4c 8d 35 59 18 01 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f6 f5 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[  631.631857][    C0] RSP: 0018:ffffc90000157998 EFLAGS: 00010046
[  631.631871][    C0] RAX: 1ffff11006eb0953 RBX: 0000000000000008 RCX: ffff88801d680000
[  631.631883][    C0] RDX: ffff88803c56a968 RSI: ffffffff8a1d5fd0 RDI: ffffffff8f8e76e0
[  631.631896][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  631.631905][    C0] R10: dffffc0000000000 R11: ffffffff818d6560 R12: dffffc0000000000
[  631.631917][    C0] R13: ffff888037584a80 R14: ffffffff8f8e76e0 R15: ffff88803c56a968
[  631.631930][    C0] FS:  0000000000000000(0000) GS:ffff888125efc000(0000) knlGS:0000000000000000
[  631.631944][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  631.631955][    C0] CR2: 000055556019b4e8 CR3: 000000002b162000 CR4: 00000000003526f0
[  631.631969][    C0] Call Trace:
[  631.631975][    C0]  <TASK>
[  631.631986][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  631.632009][    C0]  call_timer_fn+0x192/0x5e0
[  631.632031][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  631.632047][    C0]  ? call_timer_fn+0xd4/0x5e0
[  631.632067][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  631.632095][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  631.632110][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  631.632128][    C0]  __run_timer_base+0x764/0x9f0
[  631.632159][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  631.632183][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  631.632216][    C0]  run_timer_softirq+0xb7/0x170
[  631.632236][    C0]  handle_softirqs+0x1de/0x6d0
[  631.632269][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  631.632285][    C0]  run_ktimerd+0x69/0x100
[  631.632302][    C0]  smpboot_thread_fn+0x541/0xa50
[  631.632320][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  631.632343][    C0]  kthread+0x389/0x470
[  631.632363][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  631.632378][    C0]  ? __pfx_kthread+0x10/0x10
[  631.632398][    C0]  ret_from_fork+0x514/0xb70
[  631.632422][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  631.632449][    C0]  ? __switch_to+0xc79/0x1410
[  631.632469][    C0]  ? __pfx_kthread+0x10/0x10
[  631.632489][    C0]  ret_from_fork_asm+0x1a/0x30
[  631.632526][    C0]  </TASK>
[  631.632537][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  631.632556][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  631.632578][    C0] Tainted: [L]=SOFTLOCKUP
[  631.632584][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  631.632593][    C0] Call Trace:
[  631.632599][    C0]  <TASK>
[  631.632605][    C0]  vpanic+0x56c/0xa60
[  631.632629][    C0]  ? __pfx__printk+0x10/0x10
[  631.632645][    C0]  ? __pfx_vpanic+0x10/0x10
[  631.632666][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  631.632686][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  631.632712][    C0]  panic+0xc5/0xd0
[  631.632734][    C0]  ? __pfx_panic+0x10/0x10
[  631.632764][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  631.632792][    C0]  __warn+0x315/0x4c0
[  631.632813][    C0]  ? __queue_work+0xd87/0x1090
[  631.632829][    C0]  ? __queue_work+0xd87/0x1090
[  631.632846][    C0]  __report_bug+0x339/0x540
[  631.632871][    C0]  ? __queue_work+0xd87/0x1090
[  631.632886][    C0]  ? __pfx___report_bug+0x10/0x10
[  631.632905][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  631.632925][    C0]  ? look_up_lock_class+0x57/0x110
[  631.632944][    C0]  ? register_lock_class+0x31/0x2e0
[  631.632969][    C0]  report_bug_entry+0x19a/0x290
[  631.632989][    C0]  ? __queue_work+0xda4/0x1090
[  631.633003][    C0]  ? __queue_work+0xda9/0x1090
[  631.633017][    C0]  handle_bug+0xce/0x200
[  631.633039][    C0]  exc_invalid_op+0x1a/0x50
[  631.633061][    C0]  asm_exc_invalid_op+0x1a/0x20
[  631.633077][    C0] RIP: 0010:__queue_work+0xda4/0x1090
[  631.633144][    C0] Code: 81 c7 68 01 00 00 4c 8d 35 59 18 01 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 f6 f5 a1 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef
[  631.633164][    C0] RSP: 0018:ffffc90000157998 EFLAGS: 00010046
[  631.633178][    C0] RAX: 1ffff11006eb0953 RBX: 0000000000000008 RCX: ffff88801d680000
[  631.633210][    C0] RDX: ffff88803c56a968 RSI: ffffffff8a1d5fd0 RDI: ffffffff8f8e76e0
[  631.633229][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100
[  631.633248][    C0] R10: dffffc0000000000 R11: ffffffff818d6560 R12: dffffc0000000000
[  631.633260][    C0] R13: ffff888037584a80 R14: ffffffff8f8e76e0 R15: ffff88803c56a968
[  631.633277][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  631.633297][    C0]  ? __pfx_hci_cmd_timeout+0x10/0x10
[  631.633317][    C0]  ? __queue_work+0xd53/0x1090
[  631.633335][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  631.633357][    C0]  call_timer_fn+0x192/0x5e0
[  631.633377][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  631.633392][    C0]  ? call_timer_fn+0xd4/0x5e0
[  631.633413][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  631.633445][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  631.633461][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  631.633479][    C0]  __run_timer_base+0x764/0x9f0
[  631.633509][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  631.633532][    C0]  ? __local_bh_disable_ip+0x3c/0x420
[  631.633565][    C0]  run_timer_softirq+0xb7/0x170
[  631.633584][    C0]  handle_softirqs+0x1de/0x6d0
[  631.633617][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  631.633633][    C0]  run_ktimerd+0x69/0x100
[  631.633650][    C0]  smpboot_thread_fn+0x541/0xa50
[  631.633668][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  631.633692][    C0]  kthread+0x389/0x470
[  631.633711][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  631.633726][    C0]  ? __pfx_kthread+0x10/0x10
[  631.633746][    C0]  ret_from_fork+0x514/0xb70
[  631.633769][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  631.633791][    C0]  ? __switch_to+0xc79/0x1410
[  631.633810][    C0]  ? __pfx_kthread+0x10/0x10
[  631.633830][    C0]  ret_from_fork_asm+0x1a/0x30
[  631.633867][    C0]  </TASK>
[  631.634041][    C0] Kernel Offset: disabled