last executing test programs:

1m26.033141541s ago: executing program 0 (id=395):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000dc0)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f0000000200)="$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")
r0 = fsmount(0xffffffffffffffff, 0x1, 0x46)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000fc0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000001000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000001100), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001140)=0x2)
recvmmsg(r2, &(0x7f0000001180), 0x10106, 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000053c0)=ANY=[@ANYBLOB='l0000,gid=', @ANYRESDEC=r0, @ANYBLOB=',gid=forget,fileset=00000000000000000006,unhide,uid=', @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="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"], 0x4, 0xc24, &(0x7f00000020c0)="$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")
r4 = syz_open_procfs(0x0, &(0x7f0000002d00)='mountinfo\x00')
read$FUSE(r4, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000005180)=ANY=[@ANYBLOB="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"], 0x1, 0x36f, &(0x7f0000001c00)="$eJzs3cFrHFUYAPAvsU3SaLo5iKAiPupFL0sS/4EGaUEMKLEr1YMwNRNdMs2GnSWyRbQ3r/4dxaM3QfwHctC7N2+5eOyhdCS72WaTrlFok7H6+8Hyvt33vt03O8vw7WH49m9+d3trs2xuZr2YvppiOiKm70csDqJD00fDVMzEuLvxVuPmb699+PEn762urV1bT+n66o23V1JKl1//6cuvvr/yc+/5j364/ONs7C1+uv/Hyu97L+29vP/wxhftMrXLtN3ppSzd6nR62a0iTxvtcquZ0gdFnpV5am+XeffY/GbR2dnpp2x7Y2F+p5uXZcq2+2kr76deJ/W6/ZR9nrW3U7PZTAvzwd9p3Vtfz1aH8dwp666e14Y4A93uajYVEbOPzbTu1bIhAKBW/6T+nzocJ9X/M0+1/r8Y6v/zNF7/8191UP/PHP2NH6P+BwAAAAAAAAAAAACAZ8H9qmpUVdUYjdXoJuHD5zVvjzP22Pk/8ah7f5ytsRv35iKKb3dbu63hOJxf3Yx2FJHHUjTiwcFlYWQYX3937dpSGliMhdvfDPKv/BLReu54/nI0YnFy/vIwPz3Kj4PxYsyP569EI16cnL8yMX8m3nxjLL8Zjfj1s+hEERuDy9tR/tfLKb3z/tqJ/NnBOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+H5pp5NUY9r3fbUVcit3D/v3NowWLx/vjD/Mf9ddfikY8mNyff2lif/4L8cqFeo8dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEbK/p2trCjy7nkFo57/g1dmRsFfZ00Nl989MXUpznHPRZFPP603fFhV1Vltde58T+WTBBcjTjuD1eGv5Mk/64WIOGXNbETU/238G4O6rkgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQn6Om33XvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqV/TtbWVHk3TMM6j5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ8mfAQAA//8nphGO")
socket$inet6(0xa, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000001200)='ext4\x00', &(0x7f0000001240)='./file1\x00', 0x220471a, &(0x7f00000001c0)={[{@errors_continue}]}, 0x82, 0x499, &(0x7f00000012c0)="$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")
r5 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0)

1m23.93833389s ago: executing program 0 (id=399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000851}, 0x800)

1m22.050984333s ago: executing program 0 (id=404):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(r0, 0x0, 0x0, 0x80)
read(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
accept4$unix(r2, &(0x7f0000000940)=@abs, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000500)="$eJzs3TFrE2EYB/DHNG1DHexcHA5cnII6uQapIAaESAadPKgurQjX5XS6j+Fn8CP5MTp1O7EXmrSNFrHXt8n9fhDugX8Cz5tA3gzPm/vw8PPhwZfjT/XP7zEYZNGPqOo6Yjd6sRGNe7Nr76zeikVVAACrZjLJR6l7oF1FMco3I2L7SjL9kaQhAAAAAAAAAAAA/tuy+f84Nf8PAOtscf5/L20rtKQoRvnO7PfbReb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHRO6/pB/ZdH6v4AgJtn/weA7rH/A0D32P8BoHvevnv/ejQe70+ybBBxUpXTctpcm/zlq/H+k+zM7vxVJ2U53TjPnzZ5djHfjJ1Z/mxpvhWPHzX57+zFm/GlfDsOrrbba+EtAAAAAAAAAAAAAAAAAAAAgOSG2bml5/uHwz/lTbXw/wCXzu/3Y69/a8sAAAAAAAAAAAAAAAAAAACAlXb89dthfnT0sVBcX9yPO9HGdUU8vxNt3HYRq/HpJCz6//Lk1N9MAAAAAAAAAAAAAAAAAADQPfNDv6k7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB05vf/b6+IiKpupF4uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMZ+BQAA//8E/pnA")
creat(&(0x7f0000000780)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000007c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000880), 0x208e24b)

1m20.448122793s ago: executing program 0 (id=409):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1a)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x61000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x8, &(0x7f0000001b80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
syz_mount_image$fuse(&(0x7f0000001bc0), &(0x7f0000001c00)='./file0\x00', 0x14a0, &(0x7f0000001c40)=ANY=[], 0x1, 0x0, 0x0)
syz_clone(0x881000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5800001a, r0, 0x0)
read$FUSE(r1, &(0x7f0000001d40)={0x2020}, 0x2020)

1m16.400455302s ago: executing program 0 (id=420):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(r0, 0x0, 0x0, 0x80)
read(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
accept4$unix(r2, &(0x7f0000000940)=@abs, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000500)="$eJzs3TFrE2EYB/DHNG1DHexcHA5cnII6uQapIAaESAadPKgurQjX5XS6j+Fn8CP5MTp1O7EXmrSNFrHXt8n9fhDugX8Cz5tA3gzPm/vw8PPhwZfjT/XP7zEYZNGPqOo6Yjd6sRGNe7Nr76zeikVVAACrZjLJR6l7oF1FMco3I2L7SjL9kaQhAAAAAAAAAAAA/tuy+f84Nf8PAOtscf5/L20rtKQoRvnO7PfbReb/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHRO6/pB/ZdH6v4AgJtn/weA7rH/A0D32P8BoHvevnv/ejQe70+ybBBxUpXTctpcm/zlq/H+k+zM7vxVJ2U53TjPnzZ5djHfjJ1Z/mxpvhWPHzX57+zFm/GlfDsOrrbba+EtAAAAAAAAAAAAAAAAAAAAgOSG2bml5/uHwz/lTbXw/wCXzu/3Y69/a8sAAAAAAAAAAAAAAAAAAACAlXb89dthfnT0sVBcX9yPO9HGdUU8vxNt3HYRq/HpJCz6//Lk1N9MAAAAAAAAAAAAAAAAAADQPfNDv6k7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB05vf/b6+IiKpupF4uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMZ+BQAA//8E/pnA")
creat(&(0x7f0000000780)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f00000007c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000880), 0x208e24b)

1m11.004863461s ago: executing program 0 (id=431):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x110, r2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x9, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m10.595778679s ago: executing program 32 (id=431):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x110, r2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x9, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.756917007s ago: executing program 3 (id=544):
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xa, 0x80000028b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000700), 0xfe)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x8, 0x5, 0x3, 0x80, r1, 0x207a37f4, '\x00', 0x0, r1, 0x5, 0x5, 0x2}, 0x50)
creat(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x102)

14.449915389s ago: executing program 4 (id=552):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002940)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000029c0), 0x2, 0x143102)
writev(r1, &(0x7f0000002a00)=[{&(0x7f0000002a40)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='offline', 0x7)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xb4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008014}, 0xc080)
write(r3, &(0x7f0000000180), 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000002b80)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000025c0), 0x80000, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x0, 0x200, 0xfff8, 0x3, 0x4, 0x0, 0x0, 0x0, 0x40}}, 0x50)

13.196796477s ago: executing program 3 (id=554):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000bc0)="e2", 0x918)

12.564764862s ago: executing program 4 (id=555):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000e00)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000f80)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001040)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000007c00)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000007c80), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000007cc0), 0x10106, 0x2, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
sched_setaffinity(0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000008040), 0x35c, 0x18)
unshare(0x64000600)

12.15489166s ago: executing program 3 (id=558):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r3, 0x4, 0x2400)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000b80)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000e00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000ec0)=0x4)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000380)={[{@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000006c0)="$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")
fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0)

11.39929964s ago: executing program 4 (id=559):
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c00)={'syz0\x00', {0x4007, 0x6, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x8000, 0x7f, 0x6, 0x4a, 0xfffffff2, 0x5f, 0x1, 0x0, 0xffffad37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x208f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x3, 0x80, 0xfffffffa, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x1, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x2, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xd37f, 0x4, 0x9, 0x5a2, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7ffd, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40003, 0x9, 0x8, 0x81, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x121, 0x40009, 0x4, 0x3], [0x0, 0xbb31, 0x3, 0xfffffffc, 0x2, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x5, 0x104, 0x80000000, 0x6, 0x7ffd, 0x8ffff, 0x4, 0x3, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x8, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9601, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x10, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000bc0)="e2", 0x918)

9.894598938s ago: executing program 5 (id=561):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)

9.828386876s ago: executing program 3 (id=562):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x804818, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x574, &(0x7f0000000580)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000180)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}}], 0x2, 0x2604e0d4)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x48000, 0x2)
r2 = fsopen(&(0x7f0000001780)='nfs\x00', 0x0)
r3 = socket(0x2d, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c00)={'syzkaller1\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4004010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000d40)={'ip6gre0\x00', &(0x7f0000000d80)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xf, 0x3, 0x59, @mcast2, @rand_addr=' \x01\x00', 0x80, 0x40, 0x96, 0x8}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40080c5)
dup(r3)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r8, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000001900)='./proc\x00', &(0x7f0000001940)='proc\x00', 0x82, 0x0)
ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f00000019c0))
r9 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r9, &(0x7f0000001a40)='3', 0x4e)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000030c0), 0x400, 0x0)
landlock_create_ruleset(&(0x7f0000003100)={0x7b36}, 0x30, 0x0)

9.635498539s ago: executing program 4 (id=565):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002940)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000029c0), 0x2, 0x143102)
writev(r1, &(0x7f0000002a00)=[{&(0x7f0000002a40)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='offline', 0x7)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xb4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008014}, 0xc080)
write(r3, &(0x7f0000000180), 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000002b80)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000025c0), 0x80000, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x0, 0x200, 0xfff8, 0x3, 0x4, 0x0, 0x0, 0x0, 0x40}}, 0x50)

9.3738553s ago: executing program 5 (id=566):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
listen(r0, 0x7f)

8.771471781s ago: executing program 5 (id=567):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x1a8cc7b, &(0x7f0000019c40)={[], [{@dont_measure}]}, 0x1, 0x445, &(0x7f0000000240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000700)='\f', 0x1, 0x8000c61)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000740)={{0x0, 0x3938700}}, 0x0)
r2 = timerfd_create(0x0, 0x0)
timerfd_settime(r2, 0x3, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="de27ddf356bc8037014d811aa7cc4b8d861451f5073ff6467bfe0ebc3a135a4ad31e981aeea9b1619477b50672a4f9354b7f4aa03d7179d7234db5bbc64628b92d0a5403b43062b1103467bc5dca61a08e51f81f12df2e5eefd3bdf1f708746694939da9b3f85f07f3fec27955c338bc2a953f268b3a6ae02fdce5bc9c4f6fc726ca649b6535bc0b781724d9011b4d3d03a0370769125111d82eca0db18f1d20e89cdb0968bb9dff7a9ddbbad09144dd75de11bfd68a5786f1e3a3dd7096dcb1feae092b58c37dd29237616265"], 0x7)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x4c2c4000)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r3, &(0x7f000001bc80)=""/102400, 0x19000, 0xffffffff8)
syz_open_dev$MSR(&(0x7f0000000980), 0x0, 0x0)
r4 = fsopen(&(0x7f0000000140)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x1)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', 0x8880, 0x85)
lseek(r6, 0x100, 0x0)
getdents(r6, &(0x7f0000019a80)=""/184, 0xb8)
open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x8001)

8.708423048s ago: executing program 2 (id=568):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000bc0)="e2", 0x918)

8.645687456s ago: executing program 1 (id=569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000005c0), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000000600), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0)

7.049456225s ago: executing program 4 (id=570):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001800)={0x84, &(0x7f0000000380)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001900)={0x44, &(0x7f0000001980)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000019c0)={0x44, &(0x7f0000001a40)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001a80)={0x1c, &(0x7f0000001ac0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001b00)={0x2c, &(0x7f0000001b40)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001b80)={0x2c, &(0x7f0000001bc0)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

7.048285095s ago: executing program 1 (id=580):
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002940)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000029c0), 0x2, 0x143102)
writev(r1, &(0x7f0000002a00)=[{&(0x7f0000002a40)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ee)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory10/state\x00', 0x2, 0x0)
write(r2, &(0x7f0000000140)='offline', 0x7)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xb4, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008014}, 0xc080)
write(r3, &(0x7f0000000180), 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000002b80)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000025c0), 0x80000, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x0, 0x200, 0xfff8, 0x3, 0x4, 0x0, 0x0, 0x0, 0x40}}, 0x50)

7.047343495s ago: executing program 2 (id=571):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000500)="$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")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_create_resource$futex(0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x1ff}}, 0x24)
sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6)
syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000b40))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.events.local\x00', 0x275a, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = msgget$private(0x0, 0x0)
msgctl$IPC_STAT(r4, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r5}, &(0x7f0000000d40), &(0x7f0000000d80)=r6}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x40, 0x14e)

6.086421319s ago: executing program 5 (id=572):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0xa7c, r2}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000840)=@filename='mtd0\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='jffs2\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/fillfile\x00', 0x42, 0x9f)
r4 = syz_genetlink_get_family_id$net_dm(0x0, r1)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000400)="81bc", 0x2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write(r3, &(0x7f0000000940)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
r7 = syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x401)
ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000000680)=0x2c0000)

5.399429731s ago: executing program 2 (id=573):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r3, 0x4, 0x2400)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000b80)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000e00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000ec0)=0x4)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000380)={[{@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000006c0)="$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")
fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0)

4.934503136s ago: executing program 3 (id=574):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
listen(r0, 0x5)
accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0xa7c, r1}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000840)=@filename='mtd0\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='jffs2\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt/fillfile\x00', 0x42, 0x9f)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80080)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)="81bc", 0x2}], 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, 0x0, 0x30, 0x8}, 0x14)
write(r2, &(0x7f0000000940)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000)
r6 = syz_open_dev$sg(&(0x7f0000000640), 0x0, 0x401)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000680)=0x2c0000)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000006c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000740)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})

4.931933736s ago: executing program 1 (id=575):
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10401, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c00)={'syz0\x00', {0x4007, 0x6, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x8000, 0x7f, 0x6, 0x4a, 0xfffffff2, 0x5f, 0x1, 0x0, 0xffffad37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x208f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x3, 0x80, 0xfffffffa, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x1, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x2, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xd37f, 0x4, 0x9, 0x5a2, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7ffd, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40003, 0x9, 0x8, 0x81, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x121, 0x40009, 0x4, 0x3], [0x0, 0xbb31, 0x3, 0xfffffffc, 0x2, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x5, 0x104, 0x80000000, 0x6, 0x7ffd, 0x8ffff, 0x4, 0x3, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x8, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9601, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x10, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000bc0)="e2", 0x918)

4.788577893s ago: executing program 5 (id=576):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2, 0x1, 0x0, 0x1}}, 0x2e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)

3.983311888s ago: executing program 2 (id=577):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x4a102)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, &(0x7f00000002c0)='./proc\x00', 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000003c0))
rt_sigtimedwait(&(0x7f0000000300)={[0xa]}, &(0x7f0000000340), 0x0, 0x8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.333873195s ago: executing program 4 (id=578):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffd0, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x800)
getresgid(0x0, &(0x7f0000000680), 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x2, 0x0, r4, 0x0, 0x0, 0x90, 0x10}, 0x0, 0x0, 0x6, 0x7, 0x9, 0x8000, 0x2, 0xd07, 0x400, 0x3, r0, r2})
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

2.946486711s ago: executing program 5 (id=579):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev_mnt\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.521030801s ago: executing program 1 (id=581):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20842, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000b80)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000ec0)=0x4)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000380)={[{@shortname_winnt}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffff}}, {@uni_xlateno}, {@utf8}, {@utf8}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000006c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsopen(&(0x7f0000000600)='cgroup2\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000005c0)='./lower\x00', &(0x7f0000000b00)='system.posix_acl_access\x00', &(0x7f0000015e00)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x0, 0xee00}, {0x2, 0x5}, {0x2, 0x3}, {0x2, 0x2}], {}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x5}, {0x8, 0x1}], {0x10, 0x5}}, 0x64, 0x2)

1.487671084s ago: executing program 1 (id=582):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'dummy0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc084}, 0x2400c800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000005c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000600), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e000100"], 0x50}}, 0x0)

1.478289655s ago: executing program 3 (id=583):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x2)
readv(r0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/58, 0x3a}], 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c00)={'syz0\x00', {0x4007, 0x6, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x8000, 0x7f, 0x6, 0x4a, 0xfffffff2, 0x5f, 0x1, 0x0, 0xffffad37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x208f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x3, 0x80, 0xfffffffa, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x1, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x2, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xd37f, 0x4, 0x9, 0x5a2, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7ffd, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40003, 0x9, 0x8, 0x81, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x121, 0x40009, 0x4, 0x3], [0x0, 0xbb31, 0x3, 0xfffffffc, 0x2, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x5, 0x104, 0x80000000, 0x6, 0x7ffd, 0x8ffff, 0x4, 0x3, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x8, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9601, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x9, 0x2b91, 0xa1f, 0x10, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(0x0, 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000bc0)="e2", 0x918)

1.405906853s ago: executing program 2 (id=584):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(r1)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002940)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002980)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000029c0), 0x2, 0x143102)
writev(r2, &(0x7f0000002a00)=[{&(0x7f0000002a40)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f0000002a80), 0x0, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000002b80)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x1, 0x3b8000, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000025c0), 0x80000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x11, 0x14, &(0x7f0000002480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x11, 0x14, &(0x7f00000025c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x200, 0xfff8, 0x3, 0x3, 0x0, 0x0, 0x0, 0x40}}, 0x50)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000009d00)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000009d40)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

77.535991ms ago: executing program 2 (id=585):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

0s ago: executing program 1 (id=586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x1e, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004a00152228bd7000fcfffdff0a"], 0x1c}, 0x1, 0x0, 0x0, 0xc0014}, 0x0)

kernel console output (not intermixed with test programs):

tdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.853905][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.864460][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.876709][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.912827][ T4278] device veth0_vlan entered promiscuous mode
[   77.957595][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.977311][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.038913][ T4278] device veth1_vlan entered promiscuous mode
[   78.060578][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.101861][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.110042][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.124711][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.179086][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.198727][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.266726][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.274843][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.295830][ T4278] device veth0_macvtap entered promiscuous mode
[   78.303341][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.313728][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.329766][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.370559][ T4278] device veth1_macvtap entered promiscuous mode
[   78.390193][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.403928][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.412704][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.423125][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.433129][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   78.442318][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.450936][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.461811][ T4289] device veth0_vlan entered promiscuous mode
[   78.484874][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.498928][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.509132][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.519923][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.531162][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.551738][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.560458][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.568519][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   78.576390][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   78.583982][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.592802][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.613975][ T4289] device veth1_vlan entered promiscuous mode
[   78.638008][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.647865][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.655833][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.666895][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.674505][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.683474][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   78.699925][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   78.709953][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.721546][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.733516][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.744677][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.755248][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.767172][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.778170][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.805678][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.814477][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.832502][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.842558][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.852718][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.867478][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.908857][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   78.927628][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.973904][ T4289] device veth0_macvtap entered promiscuous mode
[   78.984056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   78.994096][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.004011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   79.019186][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   79.039918][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.051125][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   79.073585][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   79.105299][   T50] Bluetooth: hci2: command 0x0419 tx timeout
[   79.105313][ T4291] Bluetooth: hci1: command 0x0419 tx timeout
[   79.105344][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[   79.151986][ T4280] device veth0_vlan entered promiscuous mode
[   79.166695][ T4280] device veth1_vlan entered promiscuous mode
[   79.186634][ T4291] Bluetooth: hci0: command 0x0419 tx timeout
[   79.193113][ T4288] Bluetooth: hci4: command 0x0419 tx timeout
[   79.200600][ T4289] device veth1_macvtap entered promiscuous mode
[   79.287955][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.298280][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.317283][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   79.327903][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.356488][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   79.373262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   79.389025][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   79.405375][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.427344][ T4280] device veth0_macvtap entered promiscuous mode
[   79.483490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   79.503415][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.531227][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.542005][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.555956][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.566005][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.576716][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.598921][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.607533][ T4280] device veth1_macvtap entered promiscuous mode
[   79.628301][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.630493][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.647583][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.674709][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.694646][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.725296][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.735569][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   79.747160][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.778147][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.786040][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   79.799759][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   79.811097][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   79.849814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.864900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   79.884568][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.932964][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   79.947246][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   79.961244][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.000721][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.012321][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.039857][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.059607][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   80.071621][ T4410] Zero length message leads to an empty skb
[   80.230616][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   80.254096][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.280715][ T4289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.292691][ T4289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.307410][ T4289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.367818][ T4289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.922623][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   80.940633][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.084178][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.128671][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.138746][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.149741][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.164060][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.174842][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.188285][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.199877][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.455034][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.475022][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   81.485031][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   81.495030][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.505020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.515029][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.525032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.535033][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   81.572139][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.651756][ T4425] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[   81.680767][ T4428] syz.0.1: attempt to access beyond end of device
[   81.680767][ T4428] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0
[   81.694062][ T4428] gfs2: error 10 reading superblock
[   81.867978][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.927990][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.015065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[   82.025065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!!
[   82.247161][ T4280] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.265518][ T4280] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.302535][ T4280] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.338754][ T4280] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.542787][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.560950][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.585618][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.749401][ T4440] loop1: detected capacity change from 0 to 256
[   83.407589][ T4433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.439972][ T4433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.479138][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.592231][ T4433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.625203][ T4433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.635758][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.676519][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.684407][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.730727][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.967674][ T4368] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.993688][ T4451] loop2: detected capacity change from 0 to 1024
[   84.179046][ T4368] usb 2-1: Using ep0 maxpacket: 8
[   84.480008][ T4368] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   84.755143][ T4368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.783673][ T4368] usb 2-1: Product: syz
[   84.788390][ T4368] usb 2-1: Manufacturer: syz
[   84.793048][ T4368] usb 2-1: SerialNumber: syz
[   84.806413][ T4350] rxe_eth0 speed is unknown, defaulting to 1000
[   84.819652][ T4368] usb 2-1: config 0 descriptor??
[   84.868224][ T4368] gspca_main: se401-2.14.0 probing 047d:5003
[   84.934417][ T4453] loop4: detected capacity change from 0 to 512
[   84.941896][ T4453] EXT4-fs: inline encryption not supported
[   84.955513][ T4453] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.968609][ T4453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   85.046341][ T4453] EXT4-fs (loop4): 1 truncate cleaned up
[   85.052682][ T4453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.285336][ T4468] loop3: detected capacity change from 0 to 256
[   86.250279][ T4368] gspca_se401: Wrong descriptor type
[   86.408401][ T4289] EXT4-fs (loop4): unmounting filesystem.
[   86.503547][ T4357] usb 2-1: USB disconnect, device number 2
[   86.948409][   T14] cfg80211: failed to load regulatory.db
[   87.405187][ T4474] loop3: detected capacity change from 0 to 8192
[   88.950299][ T4496] loop1: detected capacity change from 0 to 512
[   91.364615][ T4498] kworker/u4:14: attempt to access beyond end of device
[   91.364615][ T4498] loop1: rw=1, sector=5664, nr_sectors = 10800 limit=512
[   92.200687][ T4504] loop4: detected capacity change from 0 to 32768
[   92.278959][ T4504] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.25 (4504)
[   92.325168][ T4353] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   92.341119][ T4503] loop2: detected capacity change from 0 to 32768
[   92.370944][ T4504] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[   92.393666][ T4503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.24 (4503)
[   92.402693][ T4504] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[   92.476405][ T4504] BTRFS info (device loop4): using free space tree
[   92.494017][ T4522] syz.1.26 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   92.504518][ T4503] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.525515][ T4353] usb 1-1: Using ep0 maxpacket: 32
[   92.533828][ T4353] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   92.534803][ T4503] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   92.566454][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.624494][ T4503] BTRFS info (device loop2): setting nodatasum
[   92.646508][ T4503] BTRFS info (device loop2): force zlib compression, level 3
[   92.658257][ T4353] gspca_main: nw80x-2.14.0 probing 055f:d001
[   92.738148][ T4503] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   92.785127][ T4509] loop3: detected capacity change from 0 to 40427
[   92.821159][ T4509] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   92.835597][ T4503] BTRFS info (device loop2): use lzo compression, level 0
[   92.835964][ T4509] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   92.842908][ T4503] BTRFS info (device loop2): turning on flush-on-commit
[   92.859465][ T4503] BTRFS info (device loop2): enabling auto defrag
[   92.875178][ T4503] BTRFS info (device loop2): max_inline at 4096
[   92.881842][ T4504] BTRFS info (device loop4): enabling ssd optimizations
[   92.885450][ T4503] BTRFS info (device loop2): using free space tree
[   92.993042][ T4509] F2FS-fs (loop3): invalid crc value
[   93.125457][ T4509] F2FS-fs (loop3): Found nat_bits in checkpoint
[   93.220681][ T4353] gspca_nw80x: reg_w err -71
[   93.225817][ T4353] nw80x: probe of 1-1:3.0 failed with error -71
[   93.235410][ T4503] BTRFS info (device loop2): enabling ssd optimizations
[   93.283321][ T4353] usb 1-1: USB disconnect, device number 2
[   93.425514][ T4509] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   93.474503][ T4509] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   93.599758][ T4289] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[   93.931835][ T4575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[   95.042022][ T4280] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.448272][ T4592] device-mapper: thin: Data device (ram1) discard unsupported: Disabling discard passdown.
[   96.772430][ T4622] loop0: detected capacity change from 0 to 512
[   96.795128][ T4587] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   96.806483][ T4622] =======================================================
[   96.806483][ T4622] WARNING: The mand mount option has been deprecated and
[   96.806483][ T4622]          and is ignored by this kernel. Remove the mand
[   96.806483][ T4622]          option from the mount to silence this warning.
[   96.806483][ T4622] =======================================================
[   97.077304][ T4587] usb 5-1: unable to get BOS descriptor or descriptor too short
[   97.101600][ T4587] usb 5-1: not running at top speed; connect to a high speed hub
[   97.148742][ T4587] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4
[   97.239974][ T4587] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[   97.255995][ T4587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.275198][ T4587] usb 5-1: Product: syz
[   97.280125][ T4587] usb 5-1: Manufacturer: syz
[   97.291983][ T4587] usb 5-1: SerialNumber: syz
[   97.646114][ T4587] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   97.724701][ T4630] syz.2.41: attempt to access beyond end of device
[   97.724701][ T4630] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   97.823417][ T4634] tc_dump_action: action bad kind
[   97.854044][ T4634] Bluetooth: MGMT ver 1.22
[   97.867897][ T4587] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   98.583663][ T4587] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[   98.741280][ T4630] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   98.943184][ T4587] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[   98.971965][ T4587] usb 5-1: found format II with max.bitrate = 4, frame size=7372
[   99.105548][ T4640] loop3: detected capacity change from 0 to 1024
[   99.113249][ T4640] EXT4-fs: Ignoring removed orlov option
[   99.153621][ T4587] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[   99.171866][ T4640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   99.306827][ T4640] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.714748][ T4587] usb 5-1: USB disconnect, device number 2
[   99.877004][ T4640] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 3)
[   99.947721][ T4640] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   99.981353][ T4640] EXT4-fs (loop3): This should not happen!! Data will be lost
[   99.981353][ T4640] 
[  100.003258][ T4650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.020075][ T4652] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  100.039671][ T4639] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.059667][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.102470][ T4650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.140477][ T4639] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.201248][ T4650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.237179][ T4639] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.292232][ T4650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.419146][ T4639] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  100.564768][ T4650] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #15: block 3: comm syz.3.43: lblock 3 mapped to illegal pblock 3 (length 1)
[  101.121433][ T4630] Process accounting resumed
[  101.982821][ T4665] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.339360][ T4666] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  102.470503][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.724883][ T4670] loop4: detected capacity change from 0 to 256
[  103.153376][ T4665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.335563][ T4497] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  103.388452][ T4497] EXT4-fs (loop3): This should not happen!! Data will be lost
[  103.388452][ T4497] 
[  103.412746][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  104.443739][ T4673] loop1: detected capacity change from 0 to 4096
[  104.474936][ T4584] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.495997][ T4673] EXT4-fs: Ignoring removed nobh option
[  104.686996][ T4584] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  104.712741][ T4584] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  104.757481][ T4584] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  104.776582][ T4584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.826243][ T4584] usb 3-1: Product: syz
[  104.840217][ T4690] loop3: detected capacity change from 0 to 512
[  104.956699][ T4584] usb 3-1: Manufacturer: syz
[  105.047463][ T4584] usb 3-1: SerialNumber: syz
[  105.943589][ T4584] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  106.072279][ T4673] EXT4-fs: Ignoring removed bh option
[  106.093613][ T4673] EXT4-fs (loop1): Test dummy encryption mode enabled
[  106.142326][ T4695] kworker/u4:17: attempt to access beyond end of device
[  106.142326][ T4695] loop3: rw=1, sector=2640, nr_sectors = 2056 limit=512
[  106.156123][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  106.169596][ T4695] kworker/u4:17: attempt to access beyond end of device
[  106.169596][ T4695] loop3: rw=1, sector=4696, nr_sectors = 3600 limit=512
[  106.189855][ T4695] kworker/u4:17: attempt to access beyond end of device
[  106.189855][ T4695] loop3: rw=1, sector=8296, nr_sectors = 1328 limit=512
[  106.205910][ T4692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.226431][ T4598] usb 3-1: USB disconnect, device number 2
[  106.241492][ T4598] usblp0: removed
[  108.071093][ T4702] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  108.940078][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  109.933896][ T4730] nvme nvme0: failed to connect socket: -111
[  110.074656][ T4740] loop1: detected capacity change from 0 to 512
[  111.415004][    C0] sched: RT throttling activated
[  112.373738][ T4735] loop0: detected capacity change from 0 to 32768
[  112.486463][ T4735] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (4735)
[  112.529107][ T4773] No source specified
[  112.575094][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  112.626588][ T4735] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  112.637121][ T4735] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  112.715563][ T4735] BTRFS info (device loop0): using free space tree
[  112.955428][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  113.004551][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  113.050141][   T14] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  113.082940][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.113029][   T14] usb 2-1: Product: syz
[  113.115619][ T4792] loop3: detected capacity change from 0 to 512
[  113.117331][   T14] usb 2-1: Manufacturer: syz
[  113.165176][   T14] usb 2-1: SerialNumber: syz
[  113.245121][ T4792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.295282][ T4792] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.341600][ T4735] BTRFS error (device loop0): open_ctree failed: -12
[  113.355976][ T4271] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by udevd (4271)
[  113.422974][   T14] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  114.245754][ T4806] usb 2-1: USB disconnect, device number 3
[  114.259836][ T4806] usblp0: removed
[  114.384327][ T4804] rxe_eth0 speed is unknown, defaulting to 1000
[  115.906257][ T4824] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  115.979075][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  116.108835][ T4825] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  116.185207][ T4824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.859147][ T4820] loop1: detected capacity change from 0 to 40427
[  116.926095][ T4820] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x3ffff
[  118.345483][ T4844] No source specified
[  118.770692][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  119.215458][ T4350] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.420190][ T4350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  119.485233][ T4350] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  119.618700][ T4350] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  119.741680][ T4350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.845410][ T4350] usb 5-1: Product: syz
[  119.900628][ T4350] usb 5-1: Manufacturer: syz
[  119.956084][ T4350] usb 5-1: SerialNumber: syz
[  120.283818][ T4350] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  120.531327][ T4350] usb 5-1: USB disconnect, device number 3
[  120.551782][ T4350] usblp0: removed
[  120.633602][ T4846] loop2: detected capacity change from 0 to 32768
[  120.647760][ T4846] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.88 (4846)
[  120.671094][ T4846] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.690597][ T4846] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  120.715481][ T4846] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  120.731782][ T4846] BTRFS info (device loop2): use zstd compression, level 3
[  120.749618][ T4862] jffs2: notice: (4862) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  120.775961][ T4846] BTRFS info (device loop2): using free space tree
[  122.238998][ T4846] BTRFS error (device loop2): open_ctree failed: -12
[  122.326435][ T4271] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4271)
[  122.562567][ T4899] loop1: detected capacity change from 0 to 1024
[  122.645981][ T4899] EXT4-fs: Ignoring removed orlov option
[  122.937040][ T4899] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  123.026279][ T4899] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.375235][ T4908] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  123.718930][ T4898] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.101: lblock 0 mapped to illegal pblock 0 (length 1)
[  123.791601][ T4898] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.101: lblock 0 mapped to illegal pblock 0 (length 1)
[  123.897516][ T4898] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.101: lblock 0 mapped to illegal pblock 0 (length 1)
[  123.965476][ T4898] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #15: comm syz.1.101: lblock 0 mapped to illegal pblock 0 (length 1)
[  124.152875][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  124.217285][ T4886] loop3: detected capacity change from 0 to 32768
[  124.324081][ T4886] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  124.350468][ T4886] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  124.367636][ T4886] BTRFS info (device loop3): using free space tree
[  124.442822][ T4927] jffs2: notice: (4927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  125.861585][ T4886] BTRFS error (device loop3): open_ctree failed: -12
[  126.174164][ T4270] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by udevd (4270)
[  126.191044][ T4949] jffs2: notice: (4949) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  127.370517][ T4955] nvme nvme0: failed to connect socket: -111
[  130.168714][ T4961] loop4: detected capacity change from 0 to 40427
[  130.210136][ T4961] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  130.254007][ T4961] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  130.304949][ T4961] F2FS-fs (loop4): invalid crc value
[  130.341914][ T4961] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  131.901953][ T5022] blktrace: Concurrent blktraces are not allowed on loop2
[  132.029052][ T5024] loop0: detected capacity change from 0 to 1024
[  132.252339][ T5027] loop4: detected capacity change from 0 to 512
[  132.493680][ T5032] rnbd_client L125: Can't parse path ip:127: -22
[  132.510625][ T5027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  132.525279][ T5027] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.625358][ T4598] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  132.895650][ T4598] usb 1-1: Using ep0 maxpacket: 16
[  132.913093][ T4598] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  133.165062][ T4598] usb 1-1: config 0 has no interface number 0
[  133.209314][ T4598] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  133.262680][ T5038] rxe_eth0 speed is unknown, defaulting to 1000
[  133.284347][ T4598] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  133.318071][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  133.328877][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  133.379416][ T4598] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  133.409767][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.430023][ T4598] usb 1-1: Product: syz
[  133.437677][ T4598] usb 1-1: Manufacturer: syz
[  133.445331][ T4598] usb 1-1: SerialNumber: syz
[  133.645936][ T4598] usb 1-1: config 0 descriptor??
[  133.676636][ T5030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.684419][ T5030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.789054][ T4289] EXT4-fs (loop4): unmounting filesystem.
[  133.891493][ T5049] loop1: detected capacity change from 0 to 512
[  133.961629][ T5030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.977395][ T5030] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  134.248435][ T4598] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  134.450749][ T4598] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  134.465241][ T4598] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  134.641163][ T4598] asix: probe of 1-1:0.34 failed with error -61
[  135.734071][ T4582] usb 1-1: USB disconnect, device number 3
[  135.736969][ T5065] rnbd_client L125: Can't parse path ip:127.0.: -22
[  137.918992][ T5085] loop3: detected capacity change from 0 to 512
[  138.025904][ T5085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  138.051905][ T5085] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.359208][ T5093] rxe_eth0 speed is unknown, defaulting to 1000
[  138.798998][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  139.945218][ T4598] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  140.145085][ T4598] usb 1-1: Using ep0 maxpacket: 16
[  140.822140][ T4598] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  140.830387][ T4598] usb 1-1: config 0 has no interface number 0
[  140.853955][ T4598] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  140.947575][ T4598] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  140.974362][ T4598] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  140.993955][ T4598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.004289][ T4598] usb 1-1: Product: syz
[  141.009046][ T4598] usb 1-1: Manufacturer: syz
[  141.013772][ T4598] usb 1-1: SerialNumber: syz
[  141.021852][ T4598] usb 1-1: config 0 descriptor??
[  141.028224][ T5101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  141.057114][ T5101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.166206][ T5128] loop3: detected capacity change from 0 to 512
[  142.404542][ T4598] asix: probe of 1-1:0.34 failed with error -71
[  142.513229][ T4598] usb 1-1: USB disconnect, device number 4
[  143.219671][ T5144] jffs2: notice: (5144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  147.410151][ T5177] loop3: detected capacity change from 0 to 512
[  147.528367][ T5182] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  147.686579][ T4596] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  147.885186][ T4596] usb 5-1: Using ep0 maxpacket: 16
[  147.902247][ T4596] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  147.920986][ T4596] usb 5-1: config 0 has no interface number 0
[  147.930783][ T4596] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  147.945086][ T4596] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  148.011981][ T4596] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  148.023170][ T4596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.125452][ T4596] usb 5-1: Product: syz
[  148.160345][ T4596] usb 5-1: Manufacturer: syz
[  148.173324][ T4596] usb 5-1: SerialNumber: syz
[  148.211869][ T4596] usb 5-1: config 0 descriptor??
[  148.227418][ T5179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.237654][ T5179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.458939][ T5179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.514215][ T5179] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  148.631452][ T5193] jffs2: notice: (5193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  148.764861][ T4596] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  149.633299][ T4596] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  149.643753][ T4596] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  149.718382][ T4596] asix: probe of 5-1:0.34 failed with error -61
[  151.369518][ T4947] usb 5-1: USB disconnect, device number 4
[  152.595412][ T5228] loop2: detected capacity change from 0 to 512
[  155.540514][ T5261] jffs2: notice: (5261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  155.991759][ T4582] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  156.262374][ T5261] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  157.035214][ T4582] usb 5-1: Using ep0 maxpacket: 16
[  157.054096][ T4582] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  157.064317][ T4582] usb 5-1: config 0 has no interface number 0
[  157.173367][ T4582] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  157.493536][ T4582] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  157.537857][ T4582] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  157.548047][ T4582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.557629][ T4582] usb 5-1: Product: syz
[  157.562329][ T4582] usb 5-1: Manufacturer: syz
[  157.569145][ T4582] usb 5-1: SerialNumber: syz
[  157.590290][ T4582] usb 5-1: config 0 descriptor??
[  157.598333][ T5260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  157.606375][ T5284] rnbd_client L125: Can't parse path ip:127.0.0.: -22
[  157.617536][ T5260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.459459][ T5260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.502893][ T5260] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  159.426547][ T4582] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  159.542412][ T4582] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  159.562938][ T4582] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  159.589072][ T5307] jffs2: notice: (5307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  159.614137][ T4582] asix: probe of 5-1:0.34 failed with error -61
[  160.785195][   T14] usb 5-1: USB disconnect, device number 5
[  165.013397][ T5347] loop3: detected capacity change from 0 to 512
[  166.458359][ T5359] jffs2: notice: (5359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  168.975168][ T4582] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  169.685068][ T4582] usb 2-1: Using ep0 maxpacket: 16
[  169.720223][ T4582] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  169.748686][ T4582] usb 2-1: config 0 has no interface number 0
[  169.778936][ T4582] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  170.034294][ T4582] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  170.094124][ T4582] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  170.124470][ T4582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.147615][ T4582] usb 2-1: Product: syz
[  170.157747][ T4582] usb 2-1: Manufacturer: syz
[  170.178005][ T4582] usb 2-1: SerialNumber: syz
[  171.143677][ T5399] loop0: detected capacity change from 0 to 256
[  171.189694][ T4582] usb 2-1: config 0 descriptor??
[  171.263016][ T4582] usb 2-1: can't set config #0, error -71
[  171.511937][ T4582] usb 2-1: USB disconnect, device number 4
[  172.609655][ T5412] jffs2: notice: (5412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  173.535605][ T5431] loop4: detected capacity change from 0 to 512
[  173.636075][ T5436] loop1: detected capacity change from 0 to 256
[  175.619720][ T5450] loop1: detected capacity change from 0 to 512
[  175.633502][ T5452] loop2: detected capacity change from 0 to 512
[  175.715696][ T4806] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  176.209777][ T5452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  176.222192][ T5452] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.381492][ T5461] rxe_eth0 speed is unknown, defaulting to 1000
[  176.548949][ T4806] usb 4-1: Using ep0 maxpacket: 16
[  176.596116][ T4806] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  177.041707][ T4806] usb 4-1: config 0 has no interface number 0
[  177.048027][ T4806] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  177.065889][ T4806] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  177.089337][ T4806] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  177.096312][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  177.098837][ T4806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.112500][ T4806] usb 4-1: Product: syz
[  177.116852][ T4806] usb 4-1: Manufacturer: syz
[  177.121575][ T4806] usb 4-1: SerialNumber: syz
[  177.149917][ T4806] usb 4-1: config 0 descriptor??
[  177.165879][ T5444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.173315][ T5444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.411486][ T5444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  177.465577][ T5444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  178.265671][ T4806] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  178.894806][ T5486] loop1: detected capacity change from 0 to 128
[  178.923581][ T5486] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  178.936165][ T5486] hpfs: filesystem error: improperly stopped
[  178.942401][ T5486] hpfs: You really don't want any checks? You are crazy...
[  178.952183][ T5486] hpfs: hpfs_map_sector(): read error
[  178.957841][ T5486] hpfs: code page support is disabled
[  178.967422][ T5486] hpfs: hpfs_map_4sectors(): unaligned read
[  178.974180][ T5486] hpfs: hpfs_map_4sectors(): unaligned read
[  178.981053][ T5486] hpfs: filesystem error: unable to find root dir
[  179.100383][ T4806] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  179.329932][ T5482] jffs2: notice: (5482) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  179.357212][ T4806] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  179.405168][ T4806] asix: probe of 4-1:0.34 failed with error -71
[  179.750508][ T4806] usb 4-1: USB disconnect, device number 2
[  180.148638][ T5500] loop3: detected capacity change from 0 to 512
[  181.546842][ T5500] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  181.559398][ T5500] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.883050][ T5530] rxe_eth0 speed is unknown, defaulting to 1000
[  183.278196][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  183.335108][ T4583] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  184.006135][ T5537] loop1: detected capacity change from 0 to 128
[  184.093074][ T5537] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  184.105992][ T5537] hpfs: filesystem error: improperly stopped
[  184.112101][ T5537] hpfs: You really don't want any checks? You are crazy...
[  184.120672][ T5537] hpfs: hpfs_map_sector(): read error
[  184.126150][ T5537] hpfs: code page support is disabled
[  184.143598][ T5537] hpfs: hpfs_map_4sectors(): unaligned read
[  184.150094][ T5537] hpfs: hpfs_map_4sectors(): unaligned read
[  184.156130][ T5537] hpfs: filesystem error: unable to find root dir
[  184.445046][ T4583] usb 5-1: Using ep0 maxpacket: 16
[  184.452260][ T4583] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  184.470304][ T4583] usb 5-1: config 0 has no interface number 0
[  184.487524][ T4583] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  184.681824][ T4583] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  184.880649][ T4583] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  185.032951][ T4583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.145514][ T4583] usb 5-1: Product: syz
[  185.195652][ T4583] usb 5-1: Manufacturer: syz
[  185.326053][ T4583] usb 5-1: SerialNumber: syz
[  185.359293][ T4583] usb 5-1: config 0 descriptor??
[  185.413343][ T5525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.435227][ T5525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.490749][ T5546] loop0: detected capacity change from 0 to 512
[  185.518628][ T5544] jffs2: notice: (5544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  185.652995][ T5525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.676963][ T5525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  185.904220][ T4583] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  186.091714][ T5494] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  186.135636][ T4583] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  186.200487][ T4583] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  186.256701][ T4583] asix: probe of 5-1:0.34 failed with error -61
[  188.075863][ T4583] usb 5-1: USB disconnect, device number 6
[  188.130251][ T5569] loop1: detected capacity change from 0 to 8
[  189.409883][ T5573] loop3: detected capacity change from 0 to 1024
[  191.435102][ T4291] Bluetooth: hci4: command 0x0406 tx timeout
[  191.677611][ T5599] loop2: detected capacity change from 0 to 256
[  192.587861][ T5609] jffs2: notice: (5609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  193.605129][   T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  194.564196][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  194.570757][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  194.675292][   T14] usb 1-1: Using ep0 maxpacket: 16
[  194.707219][   T14] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  194.895607][   T14] usb 1-1: config 0 has no interface number 0
[  194.916957][   T14] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  194.942416][   T14] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  194.967207][ T5622] loop4: detected capacity change from 0 to 512
[  195.022919][   T14] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  195.055310][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.063377][   T14] usb 1-1: Product: syz
[  195.116113][   T14] usb 1-1: Manufacturer: syz
[  195.397091][   T14] usb 1-1: SerialNumber: syz
[  196.545621][ T4288] Bluetooth: hci2: command 0x0406 tx timeout
[  196.546560][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  196.546573][ T4294] Bluetooth: hci0: command 0x0406 tx timeout
[  196.564674][ T4291] Bluetooth: hci3: command 0x0406 tx timeout
[  196.969164][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805408bc00: rx timeout, send abort
[  196.988645][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805408bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  197.009590][   T14] usb 1-1: config 0 descriptor??
[  197.017775][   T14] usb 1-1: can't set config #0, error -71
[  197.026116][   T14] usb 1-1: USB disconnect, device number 5
[  198.164222][ T5640] loop1: detected capacity change from 0 to 512
[  198.325573][ T5646] page:ffffea00014028c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x500a3
[  198.347459][ T5646] memcg:ffff888073ee2000
[  198.351962][ T5646] anon flags: 0xfff800000a0014(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  198.363112][ T5646] raw: 00fff800000a0014 ffffea00014c5b88 ffff8880798002e8 ffff88802bd02441
[  198.372027][ T5646] raw: 000000020000038c 0000000000000000 0000000100000000 ffff888073ee2000
[  198.381038][ T5646] page dumped because: unmovable page
[  198.386717][ T5646] page_owner tracks the page as allocated
[  198.394205][ T5646] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5584, tgid 5583 (syz.3.300), ts 198309466735, free_ts 192428174051
[  198.413352][ T5646]  post_alloc_hook+0x173/0x1a0
[  198.418446][ T5646]  get_page_from_freelist+0x206b/0x2180
[  198.424494][ T5646]  __alloc_pages+0x1ec/0x4f0
[  198.429412][ T5646]  __folio_alloc+0xe/0x30
[  198.434462][ T5646]  vma_alloc_folio+0x499/0x900
[  198.439508][ T5646]  wp_page_copy+0x24b/0x1660
[  198.444306][ T5646]  handle_mm_fault+0x1b1b/0x3d40
[  198.449500][ T5646]  do_user_addr_fault+0x5a9/0xbb0
[  198.454751][ T5646]  exc_page_fault+0x60/0x100
[  198.459604][ T5646]  asm_exc_page_fault+0x22/0x30
[  198.464671][ T5646] page last free stack trace:
[  198.469552][ T5646]  free_unref_page_prepare+0x8e5/0x9e0
[  198.475287][ T5646]  free_unref_page_list+0xbb/0x8e0
[  198.480606][ T5646]  release_pages+0x20d1/0x2340
[  198.485574][ T5646]  tlb_flush_mmu+0x105/0x220
[  198.490430][ T5646]  unmap_page_range+0x2037/0x25b0
[  198.495694][ T5646]  unmap_vmas+0x260/0x390
[  198.500269][ T5646]  exit_mmap+0x20d/0x970
[  198.504763][ T5646]  __mmput+0x118/0x3a0
[  198.509091][ T5646]  exit_mm+0x24d/0x350
[  198.513360][ T5646]  do_exit+0x958/0x2570
[  198.517746][ T5646]  do_group_exit+0x229/0x2e0
[  198.522599][ T5646]  get_signal+0x1259/0x1340
[  198.527377][ T5646]  arch_do_signal_or_restart+0xc4/0x1310
[  198.534105][ T5646]  exit_to_user_mode_loop+0x70/0x110
[  198.539681][ T5646]  exit_to_user_mode_prepare+0xee/0x180
[  198.545604][ T5646]  syscall_exit_to_user_mode+0x16/0x40
[  200.968563][ T5663] jffs2: notice: (5663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  201.285104][ T4598] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  201.950928][ T4598] usb 4-1: Using ep0 maxpacket: 16
[  201.958489][ T4598] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  201.995098][ T4598] usb 4-1: config 0 has no interface number 0
[  202.011609][ T4598] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  202.039452][ T4598] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  202.064580][ T4598] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  202.108123][ T4598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.148730][ T4598] usb 4-1: Product: syz
[  202.152975][ T4598] usb 4-1: Manufacturer: syz
[  202.171904][ T4598] usb 4-1: SerialNumber: syz
[  202.204113][ T4598] usb 4-1: config 0 descriptor??
[  202.231540][ T5667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  202.253357][ T5667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.100718][ T5675] jffs2: notice: (5675) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  203.400025][ T5667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  204.555797][ T5667] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  204.605943][ T4598] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  205.013087][ T4598] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  205.065201][ T4598] asix: probe of 4-1:0.34 failed with error -32
[  205.256128][ T5689] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  205.266704][ T5689] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  205.275576][ T5689] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  205.283885][ T5689] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  205.293208][ T5689] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  205.302267][ T5689] page dumped because: unmovable page
[  205.308113][ T5689] page_owner tracks the page as allocated
[  205.314081][ T5689] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  205.335897][ T5689]  post_alloc_hook+0x173/0x1a0
[  205.340900][ T5689]  get_page_from_freelist+0x206b/0x2180
[  205.346901][ T5689]  __alloc_pages+0x1ec/0x4f0
[  205.351697][ T5689]  alloc_slab_page+0x5d/0x180
[  205.356820][ T5689]  new_slab+0x87/0x2d0
[  205.361091][ T5689]  ___slab_alloc+0xbc5/0x1240
[  205.366196][ T5689]  __kmem_cache_alloc_node+0x126/0x270
[  205.371895][ T5689]  __kmalloc_node_track_caller+0xa0/0x240
[  205.378215][ T5689]  kmemdup+0x27/0x60
[  205.382317][ T5689]  neigh_sysctl_register+0xab/0xa80
[  205.387907][ T5689]  addrconf_sysctl_register+0xac/0x1b0
[  205.393590][ T5689]  ipv6_add_dev+0xbd4/0x1110
[  205.398982][ T5689]  addrconf_notify+0x634/0xf60
[  205.403981][ T5689]  raw_notifier_call_chain+0xcb/0x160
[  205.409666][ T5689]  register_netdevice+0x16a8/0x1b80
[  205.415396][ T5689]  veth_newlink+0x66a/0xd60
[  205.420359][ T5689] page last free stack trace:
[  205.425852][ T5689]  free_unref_page_prepare+0x8e5/0x9e0
[  205.431536][ T5689]  free_unref_page+0x2e/0x3f0
[  205.436482][ T5689]  free_contig_range+0x9d/0x150
[  205.441586][ T5689]  destroy_args+0xef/0xa0e
[  205.446336][ T5689]  debug_vm_pgtable+0x33c/0x38e
[  205.451404][ T5689]  do_one_initcall+0x257/0x800
[  205.456684][ T5689]  do_initcall_level+0x13d/0x1ed
[  205.461805][ T5689]  do_initcalls+0x4b/0x8a
[  205.466741][ T5689]  kernel_init_freeable+0x401/0x5ab
[  205.472165][ T5689]  kernel_init+0x19/0x1b0
[  205.476751][ T5689]  ret_from_fork+0x1f/0x30
[  207.469080][   T14] usb 4-1: USB disconnect, device number 3
[  207.634256][ T5705] loop2: detected capacity change from 0 to 512
[  207.728595][ T5182] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  207.836193][ T5707] jffs2: notice: (5707) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  208.639233][ T5719] loop1: detected capacity change from 0 to 512
[  212.834696][ T5749] jffs2: notice: (5749) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  212.875107][   T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  214.159377][   T14] usb 3-1: Using ep0 maxpacket: 16
[  214.171651][   T14] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  214.345827][ T5767] loop0: detected capacity change from 0 to 128
[  215.628747][ T5767] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  215.641405][ T5767] hpfs: filesystem error: improperly stopped
[  215.647430][ T5767] hpfs: You really don't want any checks? You are crazy...
[  215.654833][ T5767] hpfs: hpfs_map_sector(): read error
[  215.660253][ T5767] hpfs: code page support is disabled
[  215.667068][   T14] usb 3-1: config 0 has no interface number 0
[  215.674317][   T14] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  215.684433][ T5767] hpfs: hpfs_map_4sectors(): unaligned read
[  215.690507][ T5767] hpfs: hpfs_map_4sectors(): unaligned read
[  215.696491][ T5767] hpfs: filesystem error: unable to find root dir
[  215.703412][   T14] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  216.043265][   T14] usb 3-1: string descriptor 0 read error: -71
[  216.050527][   T14] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  216.059660][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.077040][   T14] usb 3-1: config 0 descriptor??
[  216.096901][   T14] usb 3-1: can't set config #0, error -71
[  216.116243][   T14] usb 3-1: USB disconnect, device number 3
[  216.189923][ T5771] loop2: detected capacity change from 0 to 512
[  216.299656][ T5773] loop0: detected capacity change from 0 to 512
[  216.409123][ T5773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  216.640344][ T5773] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.218955][ T5784] rxe_eth0 speed is unknown, defaulting to 1000
[  217.894472][ T5782] jffs2: notice: (5782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  217.940927][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  218.910178][ T5799] loop3: detected capacity change from 0 to 512
[  219.806378][ T5182] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  220.457189][ T5811] loop2: detected capacity change from 0 to 1024
[  220.470482][ T5809] loop0: detected capacity change from 0 to 512
[  220.544472][ T5809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  221.355274][ T5809] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.657881][ T5820] rxe_eth0 speed is unknown, defaulting to 1000
[  222.982368][ T4353] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  223.000644][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  223.175078][ T4353] usb 2-1: Using ep0 maxpacket: 16
[  223.221051][ T5823] jffs2: notice: (5823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  223.269875][ T5827] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  223.280466][ T5827] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  223.289304][ T5827] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  223.297505][ T5827] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  223.323927][ T5827] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  223.333022][ T5827] page dumped because: unmovable page
[  223.338677][ T5827] page_owner tracks the page as allocated
[  223.344612][ T5827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  223.366380][ T5827]  post_alloc_hook+0x173/0x1a0
[  223.371393][ T5827]  get_page_from_freelist+0x206b/0x2180
[  223.377212][ T5827]  __alloc_pages+0x1ec/0x4f0
[  223.382062][ T5827]  alloc_slab_page+0x5d/0x180
[  223.387054][ T5827]  new_slab+0x87/0x2d0
[  223.391324][ T5827]  ___slab_alloc+0xbc5/0x1240
[  223.396356][ T5827]  __kmem_cache_alloc_node+0x126/0x270
[  223.402058][ T5827]  __kmalloc_node_track_caller+0xa0/0x240
[  223.408187][ T5827]  kmemdup+0x27/0x60
[  223.412345][ T5827]  neigh_sysctl_register+0xab/0xa80
[  223.418926][ T5827]  addrconf_sysctl_register+0xac/0x1b0
[  223.424623][ T5827]  ipv6_add_dev+0xbd4/0x1110
[  223.429905][ T5827]  addrconf_notify+0x634/0xf60
[  223.434860][ T5827]  raw_notifier_call_chain+0xcb/0x160
[  223.440616][ T5827]  register_netdevice+0x16a8/0x1b80
[  223.446285][ T5827]  veth_newlink+0x66a/0xd60
[  223.451424][ T5827] page last free stack trace:
[  223.456585][ T5827]  free_unref_page_prepare+0x8e5/0x9e0
[  223.462272][ T5827]  free_unref_page+0x2e/0x3f0
[  223.467442][ T5827]  free_contig_range+0x9d/0x150
[  223.472684][ T5827]  destroy_args+0xef/0xa0e
[  223.477342][ T5827]  debug_vm_pgtable+0x33c/0x38e
[  223.482345][ T5827]  do_one_initcall+0x257/0x800
[  223.487387][ T5827]  do_initcall_level+0x13d/0x1ed
[  223.492516][ T5827]  do_initcalls+0x4b/0x8a
[  223.497124][ T5827]  kernel_init_freeable+0x401/0x5ab
[  223.502516][ T5827]  kernel_init+0x19/0x1b0
[  223.507363][ T5827]  ret_from_fork+0x1f/0x30
[  224.259299][ T4353] usb 2-1: unable to read config index 0 descriptor/start: -71
[  224.269552][ T4353] usb 2-1: can't read configurations, error -71
[  224.305892][ T5834] loop0: detected capacity change from 0 to 1024
[  224.385781][ T5834] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  224.618998][ T5843] loop3: detected capacity change from 0 to 512
[  224.625709][ T5834] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  224.634405][ T5834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  225.409840][ T5848] jffs2: notice: (5848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  225.642068][ T5851] loop1: detected capacity change from 0 to 512
[  225.720932][ T5843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  225.889229][ T5857] loop4: detected capacity change from 0 to 256
[  226.665899][ T5843] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.205606][ T5860] rxe_eth0 speed is unknown, defaulting to 1000
[  228.262733][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  228.887369][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  228.897206][ T5866] loop4: detected capacity change from 0 to 512
[  230.960968][ T5877] loop0: detected capacity change from 0 to 512
[  231.125727][ T5880] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  231.136406][ T5880] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  231.145433][ T5880] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  231.153544][ T5880] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  231.162404][ T5880] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  231.181000][ T5880] page dumped because: unmovable page
[  231.186728][ T5880] page_owner tracks the page as allocated
[  231.192714][ T5880] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  231.215645][ T5880]  post_alloc_hook+0x173/0x1a0
[  231.220667][ T5880]  get_page_from_freelist+0x206b/0x2180
[  231.226571][ T5880]  __alloc_pages+0x1ec/0x4f0
[  231.231348][ T5880]  alloc_slab_page+0x5d/0x180
[  231.236261][ T5880]  new_slab+0x87/0x2d0
[  231.240587][ T5880]  ___slab_alloc+0xbc5/0x1240
[  231.245566][ T5880]  __kmem_cache_alloc_node+0x126/0x270
[  231.251206][ T5880]  __kmalloc_node_track_caller+0xa0/0x240
[  231.257213][ T5880]  kmemdup+0x27/0x60
[  231.261364][ T5880]  neigh_sysctl_register+0xab/0xa80
[  231.266827][ T5880]  addrconf_sysctl_register+0xac/0x1b0
[  231.272575][ T5880]  ipv6_add_dev+0xbd4/0x1110
[  231.283281][ T5880]  addrconf_notify+0x634/0xf60
[  231.288728][ T5880]  raw_notifier_call_chain+0xcb/0x160
[  231.294319][ T5880]  register_netdevice+0x16a8/0x1b80
[  231.299819][ T5880]  veth_newlink+0x66a/0xd60
[  231.305679][ T5880] page last free stack trace:
[  231.310595][ T5880]  free_unref_page_prepare+0x8e5/0x9e0
[  231.316316][ T5880]  free_unref_page+0x2e/0x3f0
[  231.321266][ T5880]  free_contig_range+0x9d/0x150
[  231.326377][ T5880]  destroy_args+0xef/0xa0e
[  231.331033][ T5880]  debug_vm_pgtable+0x33c/0x38e
[  231.336130][ T5880]  do_one_initcall+0x257/0x800
[  231.341112][ T5880]  do_initcall_level+0x13d/0x1ed
[  231.346389][ T5880]  do_initcalls+0x4b/0x8a
[  231.350959][ T5880]  kernel_init_freeable+0x401/0x5ab
[  231.356415][ T5880]  kernel_init+0x19/0x1b0
[  231.360946][ T5880]  ret_from_fork+0x1f/0x30
[  232.729755][ T5891] jffs2: notice: (5891) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  232.887079][ T4597] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  232.899238][ T5894] loop1: detected capacity change from 0 to 256
[  233.295572][ T4597] usb 4-1: Using ep0 maxpacket: 16
[  233.461568][ T4597] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  233.503795][ T4597] usb 4-1: config 0 has no interface number 0
[  233.514271][ T4597] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  233.540780][ T4597] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  233.785871][ T4597] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  233.882919][ T4597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.934605][ T5903] loop0: detected capacity change from 0 to 256
[  234.127065][ T4597] usb 4-1: Product: syz
[  234.368401][ T4597] usb 4-1: Manufacturer: syz
[  234.430850][ T4597] usb 4-1: SerialNumber: syz
[  234.545230][ T4597] usb 4-1: config 0 descriptor??
[  234.614626][ T5885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.766548][ T5885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.911717][ T5906] loop2: detected capacity change from 0 to 512
[  235.033516][ T5885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.091887][ T5885] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  235.708528][ T4597] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  236.006014][ T5917] loop4: detected capacity change from 0 to 512
[  236.526381][ T4597] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  236.665764][ T4597] asix: probe of 4-1:0.34 failed with error -32
[  236.732423][ T4757] kworker/u4:18: attempt to access beyond end of device
[  236.732423][ T4757] loop2: rw=1, sector=4608, nr_sectors = 8608 limit=512
[  236.750583][ T5923] overlayfs: failed to resolve 'work': -2
[  236.786580][ T5923] overlayfs: failed to resolve 'work': -2
[  236.824584][ T4757] kworker/u4:18: attempt to access beyond end of device
[  236.824584][ T4757] loop2: rw=1, sector=13216, nr_sectors = 3248 limit=512
[  237.017823][ T5927] loop0: detected capacity change from 0 to 4096
[  237.039638][ T5927] EXT4-fs: Ignoring removed nobh option
[  237.062293][ T5927] EXT4-fs: Ignoring removed bh option
[  237.085557][ T5927] EXT4-fs (loop0): Test dummy encryption mode enabled
[  237.126584][ T5927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  238.456656][ T5939] loop1: detected capacity change from 0 to 256
[  239.006305][ T5948] jffs2: notice: (5948) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  239.034028][ T4799] usb 4-1: USB disconnect, device number 4
[  239.041807][ T4278] EXT4-fs (loop0): unmounting filesystem.
[  239.137284][ T5951] loop1: detected capacity change from 0 to 512
[  239.409854][ T5957] loop3: detected capacity change from 0 to 256
[  240.791513][ T5964] loop2: detected capacity change from 0 to 1024
[  240.834226][ T5964] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  240.886914][ T5964] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  240.902922][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  242.093083][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  242.146217][ T5977] loop0: detected capacity change from 0 to 512
[  242.403738][ T5984] overlayfs: failed to resolve 'work': -2
[  242.421100][ T5984] overlayfs: failed to resolve 'work': -2
[  242.516010][ T4495] kworker/u4:12: attempt to access beyond end of device
[  242.516010][ T4495] loop0: rw=1, sector=6064, nr_sectors = 3944 limit=512
[  242.627959][ T4495] kworker/u4:12: attempt to access beyond end of device
[  242.627959][ T4495] loop0: rw=1, sector=10008, nr_sectors = 5552 limit=512
[  242.676450][ T5991] loop1: detected capacity change from 0 to 256
[  242.857469][ T5989] loop3: detected capacity change from 0 to 512
[  243.358562][ T4495] kworker/u4:12: attempt to access beyond end of device
[  243.358562][ T4495] loop0: rw=1, sector=15560, nr_sectors = 904 limit=512
[  243.448872][ T5494] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  243.695288][ T4597] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  243.915029][ T4597] usb 3-1: Using ep0 maxpacket: 16
[  243.929290][ T4597] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  243.938117][ T4597] usb 3-1: config 0 has no interface number 0
[  243.944462][ T4597] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  243.955083][ T4597] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  243.977598][ T4597] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  243.998548][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.017051][ T4597] usb 3-1: Product: syz
[  244.021356][ T4597] usb 3-1: Manufacturer: syz
[  244.028427][ T4597] usb 3-1: SerialNumber: syz
[  244.090025][ T4597] usb 3-1: config 0 descriptor??
[  244.116625][ T5993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  244.128146][ T5993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  245.138249][ T5993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  245.155351][ T5993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  245.385501][ T4597] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  245.694657][ T6020] loop3: detected capacity change from 0 to 512
[  245.768538][ T5182] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  245.808121][ T4597] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  245.837192][ T4597] asix: probe of 3-1:0.34 failed with error -32
[  246.695051][ T6029] syz.1.419 uses obsolete (PF_INET,SOCK_PACKET)
[  247.776808][ T4947] usb 3-1: USB disconnect, device number 4
[  247.903044][ T6035] loop1: detected capacity change from 0 to 256
[  250.072593][ T6051] loop1: detected capacity change from 0 to 512
[  250.489220][   T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.718818][   T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.857059][   T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.906796][   T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.970887][ T6040] loop3: detected capacity change from 0 to 32768
[  252.415113][ T4582] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  252.472074][ T6072] loop1: detected capacity change from 0 to 512
[  252.615672][ T4582] usb 3-1: Using ep0 maxpacket: 16
[  252.623892][ T4582] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  252.682470][ T4582] usb 3-1: config 0 has no interface number 0
[  252.756456][ T4582] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  252.822573][ T4582] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  252.869086][ T4582] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  252.879579][ T4582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.887850][ T4582] usb 3-1: Product: syz
[  252.892847][ T4582] usb 3-1: Manufacturer: syz
[  252.897632][ T4582] usb 3-1: SerialNumber: syz
[  252.956834][ T4582] usb 3-1: config 0 descriptor??
[  252.968094][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  253.039871][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  253.349193][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  253.388674][ T6064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  253.660457][ T4582] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  254.094479][ T4582] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  254.182932][ T4582] asix: probe of 3-1:0.34 failed with error -61
[  254.798646][ T6095] jffs2: notice: (6095) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  255.164198][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.179588][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.255792][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.266154][ T6097] loop4: detected capacity change from 0 to 512
[  255.455147][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.465222][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  255.473940][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.629403][ T6091] rxe_eth0 speed is unknown, defaulting to 1000
[  255.638903][ T4596] usb 3-1: USB disconnect, device number 5
[  255.714170][ T4695] kworker/u4:17: attempt to access beyond end of device
[  255.714170][ T4695] loop4: rw=1, sector=7608, nr_sectors = 7640 limit=512
[  255.771525][ T4695] kworker/u4:17: attempt to access beyond end of device
[  255.771525][ T4695] loop4: rw=1, sector=15248, nr_sectors = 1216 limit=512
[  255.837103][ T6104] loop1: detected capacity change from 0 to 512
[  255.906908][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  255.913331][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  257.420421][ T6117] rxe_eth0 speed is unknown, defaulting to 1000
[  257.481388][ T6125] loop1: detected capacity change from 0 to 512
[  257.506793][   T50] Bluetooth: hci1: command 0x0409 tx timeout
[  259.585834][   T50] Bluetooth: hci1: command 0x041b tx timeout
[  260.445024][ T6141] jffs2: notice: (6141) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  260.922561][ T6149] loop3: detected capacity change from 0 to 512
[  261.075039][ T4597] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  261.102447][   T40] device hsr_slave_0 left promiscuous mode
[  261.127370][   T40] device hsr_slave_1 left promiscuous mode
[  261.152167][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.174596][   T40] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.195224][   T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.212326][   T40] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.228348][   T40] device bridge_slave_1 left promiscuous mode
[  261.248149][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.274650][   T40] device bridge_slave_0 left promiscuous mode
[  261.294825][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.315194][ T4597] usb 3-1: Using ep0 maxpacket: 16
[  261.326737][ T4597] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  261.357554][ T4597] usb 3-1: config 0 has no interface number 0
[  261.365657][   T40] device veth1_macvtap left promiscuous mode
[  261.372287][   T40] device veth0_macvtap left promiscuous mode
[  261.394812][   T40] device veth1_vlan left promiscuous mode
[  261.396404][ T4597] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  261.401223][   T40] device veth0_vlan left promiscuous mode
[  261.417950][ T6154] loop4: detected capacity change from 0 to 256
[  261.447287][ T4597] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  261.448453][ T6154] exfat: Deprecated parameter 'utf8'
[  261.496700][ T4597] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  261.506911][ T4498] kworker/u4:14: attempt to access beyond end of device
[  261.506911][ T4498] loop3: rw=1, sector=2792, nr_sectors = 2056 limit=512
[  261.525491][ T6154] exfat: Deprecated parameter 'utf8'
[  261.542135][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.569054][ T4597] usb 3-1: Product: syz
[  261.570212][ T4498] kworker/u4:14: attempt to access beyond end of device
[  261.570212][ T4498] loop3: rw=1, sector=4848, nr_sectors = 2048 limit=512
[  261.579106][ T4597] usb 3-1: Manufacturer: syz
[  261.609308][ T6154] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  261.618561][ T4597] usb 3-1: SerialNumber: syz
[  261.637631][ T4498] kworker/u4:14: attempt to access beyond end of device
[  261.637631][ T4498] loop3: rw=1, sector=6896, nr_sectors = 2048 limit=512
[  261.646321][ T4597] usb 3-1: config 0 descriptor??
[  261.665751][   T50] Bluetooth: hci1: command 0x040f tx timeout
[  261.678715][ T4498] kworker/u4:14: attempt to access beyond end of device
[  261.678715][ T4498] loop3: rw=1, sector=8944, nr_sectors = 2152 limit=512
[  261.694583][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  261.710342][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  261.749007][ T4498] kworker/u4:14: attempt to access beyond end of device
[  261.749007][ T4498] loop3: rw=1, sector=11096, nr_sectors = 5368 limit=512
[  262.694354][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.708997][ T6146] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  262.853454][ T6163] loop1: detected capacity change from 0 to 512
[  262.947954][ T4597] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  263.636444][ T4597] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  263.651499][ T4597] asix: probe of 3-1:0.34 failed with error -61
[  263.745176][   T50] Bluetooth: hci1: command 0x0419 tx timeout
[  264.990015][   T40] team0 (unregistering): Port device team_slave_1 removed
[  265.034795][   T40] team0 (unregistering): Port device team_slave_0 removed
[  265.118993][   T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.273832][   T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.242131][ T4445] usb 3-1: USB disconnect, device number 6
[  266.634564][ T6189] jffs2: notice: (6189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  266.799160][ T6196] loop3: detected capacity change from 0 to 512
[  268.212223][ T6206] loop2: detected capacity change from 0 to 512
[  268.261407][ T5182] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  268.676450][   T40] bond0 (unregistering): Released all slaves
[  268.913482][ T4695] kworker/u4:17: attempt to access beyond end of device
[  268.913482][ T4695] loop3: rw=1, sector=8536, nr_sectors = 7928 limit=512
[  269.241412][ T6091] chnl_net:caif_netlink_parms(): no params data found
[  269.835162][ T6212] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  269.962030][ T6212] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  269.995158][ T6212] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  270.058476][ T6212] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  270.072518][ T6212] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  270.083161][ T6212] page dumped because: unmovable page
[  270.095225][ T6212] page_owner tracks the page as allocated
[  270.201699][ T6226] loop2: detected capacity change from 0 to 256
[  270.995048][ T6212] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  271.075636][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.089025][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.123284][ T6212]  post_alloc_hook+0x173/0x1a0
[  271.126718][ T6091] device bridge_slave_0 entered promiscuous mode
[  271.155033][ T6212]  get_page_from_freelist+0x206b/0x2180
[  271.173521][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.187593][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.200994][ T6212]  __alloc_pages+0x1ec/0x4f0
[  271.232836][ T6212]  alloc_slab_page+0x5d/0x180
[  271.240001][ T6091] device bridge_slave_1 entered promiscuous mode
[  271.263956][ T6212]  new_slab+0x87/0x2d0
[  271.286633][ T6212]  ___slab_alloc+0xbc5/0x1240
[  271.303927][ T6212]  __kmem_cache_alloc_node+0x126/0x270
[  271.324181][ T6212]  __kmalloc_node_track_caller+0xa0/0x240
[  271.340605][ T6212]  kmemdup+0x27/0x60
[  271.354812][ T6212]  neigh_sysctl_register+0xab/0xa80
[  271.372950][ T6212]  addrconf_sysctl_register+0xac/0x1b0
[  271.390845][ T6091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.395059][ T6212]  ipv6_add_dev+0xbd4/0x1110
[  271.414876][ T6212]  addrconf_notify+0x634/0xf60
[  271.433247][ T6091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.435525][ T6212]  raw_notifier_call_chain+0xcb/0x160
[  271.480635][ T6212]  register_netdevice+0x16a8/0x1b80
[  271.495487][ T6212]  veth_newlink+0x66a/0xd60
[  271.509360][ T6212] page last free stack trace:
[  271.516644][ T6235] jffs2: notice: (6235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  271.541352][ T6212]  free_unref_page_prepare+0x8e5/0x9e0
[  271.558543][ T6212]  free_unref_page+0x2e/0x3f0
[  271.563264][ T6212]  free_contig_range+0x9d/0x150
[  271.569670][ T6091] team0: Port device team_slave_0 added
[  271.581299][ T6212]  destroy_args+0xef/0xa0e
[  271.589404][ T6091] team0: Port device team_slave_1 added
[  271.601933][ T6212]  debug_vm_pgtable+0x33c/0x38e
[  271.635409][ T6212]  do_one_initcall+0x257/0x800
[  272.287631][ T6212]  do_initcall_level+0x13d/0x1ed
[  272.292623][ T6212]  do_initcalls+0x4b/0x8a
[  272.297353][ T6212]  kernel_init_freeable+0x401/0x5ab
[  272.302683][ T6212]  kernel_init+0x19/0x1b0
[  272.307504][ T6212]  ret_from_fork+0x1f/0x30
[  272.425046][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.432161][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.458922][ T6091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.472645][ T6091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.480596][ T6091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.507005][ T6091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.814234][ T6091] device hsr_slave_0 entered promiscuous mode
[  272.821759][ T6091] device hsr_slave_1 entered promiscuous mode
[  272.862450][ T6246] jffs2: notice: (6246) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  273.102984][ T6091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.191171][ T6091] Cannot create hsr debugfs directory
[  274.757295][ T6258] loop2: detected capacity change from 0 to 512
[  275.128874][ T6091] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  275.247731][ T6091] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  275.441343][   T48] kworker/u4:3: attempt to access beyond end of device
[  275.441343][   T48] loop2: rw=1, sector=14808, nr_sectors = 1656 limit=512
[  275.513639][ T6091] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  275.703414][ T6091] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  276.188127][ T6273] loop1: detected capacity change from 0 to 21
[  276.215377][ T6274] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  276.225789][ T6274] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  276.234223][ T6274] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  276.243153][ T6274] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  276.251911][ T6274] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  276.277514][ T6274] page dumped because: unmovable page
[  276.283171][ T6274] page_owner tracks the page as allocated
[  276.289556][ T6274] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  276.311311][ T6274]  post_alloc_hook+0x173/0x1a0
[  276.316377][ T6274]  get_page_from_freelist+0x206b/0x2180
[  276.322120][ T6274]  __alloc_pages+0x1ec/0x4f0
[  276.327054][ T6274]  alloc_slab_page+0x5d/0x180
[  276.332383][ T6274]  new_slab+0x87/0x2d0
[  276.336707][ T6274]  ___slab_alloc+0xbc5/0x1240
[  276.341616][ T6274]  __kmem_cache_alloc_node+0x126/0x270
[  276.347377][ T6274]  __kmalloc_node_track_caller+0xa0/0x240
[  276.353278][ T6274]  kmemdup+0x27/0x60
[  276.358275][ T6274]  neigh_sysctl_register+0xab/0xa80
[  276.363688][ T6274]  addrconf_sysctl_register+0xac/0x1b0
[  276.369412][ T6274]  ipv6_add_dev+0xbd4/0x1110
[  276.374199][ T6274]  addrconf_notify+0x634/0xf60
[  276.379461][ T6274]  raw_notifier_call_chain+0xcb/0x160
[  276.385245][ T6274]  register_netdevice+0x16a8/0x1b80
[  276.391455][ T6274]  veth_newlink+0x66a/0xd60
[  276.396443][ T6274] page last free stack trace:
[  276.401372][ T6274]  free_unref_page_prepare+0x8e5/0x9e0
[  276.407325][ T6274]  free_unref_page+0x2e/0x3f0
[  276.412223][ T6274]  free_contig_range+0x9d/0x150
[  276.417354][ T6274]  destroy_args+0xef/0xa0e
[  276.422371][ T6274]  debug_vm_pgtable+0x33c/0x38e
[  276.427632][ T6274]  do_one_initcall+0x257/0x800
[  276.432666][ T6274]  do_initcall_level+0x13d/0x1ed
[  276.437891][ T6274]  do_initcalls+0x4b/0x8a
[  276.442447][ T6274]  kernel_init_freeable+0x401/0x5ab
[  276.447897][ T6274]  kernel_init+0x19/0x1b0
[  276.452937][ T6274]  ret_from_fork+0x1f/0x30
[  276.534207][ T6273] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  277.210955][ T6091] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.297691][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  277.312898][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  277.320565][ T4947] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  277.340406][ T6091] 8021q: adding VLAN 0 to HW filter on device team0
[  277.362366][ T6286] loop2: detected capacity change from 0 to 512
[  277.465146][ T6289] loop4: detected capacity change from 0 to 256
[  277.585661][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  277.669777][ T4947] usb 4-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[  277.766404][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  277.778782][ T4947] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  277.963509][ T4947] usb 4-1: Product: syz
[  277.976040][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.983282][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.104260][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  278.170835][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  278.188358][ T4947] usb 4-1: Manufacturer: syz
[  278.203269][ T4947] usb 4-1: SerialNumber: syz
[  278.205554][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  278.268202][ T4947] usb 4-1: config 0 descriptor??
[  278.450188][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.458928][ T4431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.858247][ T4947] usb 4-1: USB disconnect, device number 5
[  278.873748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.113947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  279.788942][ T6300] loop4: detected capacity change from 0 to 128
[  279.798127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.809217][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  279.818533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.843839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.848775][ T6300] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.959245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  279.981435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  280.009259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  280.030907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  280.052392][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  280.074283][ T6091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  283.212293][ T6332] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  283.223345][ T6332] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  283.232018][ T6332] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  283.240213][ T6332] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  283.249030][ T6332] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  283.268331][ T6332] page dumped because: unmovable page
[  283.273953][ T6332] page_owner tracks the page as allocated
[  283.279934][ T6332] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  283.301693][ T6332]  post_alloc_hook+0x173/0x1a0
[  283.306736][ T6332]  get_page_from_freelist+0x206b/0x2180
[  283.312459][ T6332]  __alloc_pages+0x1ec/0x4f0
[  283.317302][ T6332]  alloc_slab_page+0x5d/0x180
[  283.322625][ T6332]  new_slab+0x87/0x2d0
[  283.326970][ T6332]  ___slab_alloc+0xbc5/0x1240
[  283.331900][ T6332]  __kmem_cache_alloc_node+0x126/0x270
[  283.337622][ T6332]  __kmalloc_node_track_caller+0xa0/0x240
[  283.343569][ T6332]  kmemdup+0x27/0x60
[  283.347849][ T6332]  neigh_sysctl_register+0xab/0xa80
[  283.353286][ T6332]  addrconf_sysctl_register+0xac/0x1b0
[  283.359020][ T6332]  ipv6_add_dev+0xbd4/0x1110
[  283.363857][ T6332]  addrconf_notify+0x634/0xf60
[  283.369153][ T6332]  raw_notifier_call_chain+0xcb/0x160
[  283.374711][ T6332]  register_netdevice+0x16a8/0x1b80
[  283.380171][ T6332]  veth_newlink+0x66a/0xd60
[  283.384879][ T6332] page last free stack trace:
[  283.389874][ T6332]  free_unref_page_prepare+0x8e5/0x9e0
[  283.395568][ T6332]  free_unref_page+0x2e/0x3f0
[  283.400463][ T6332]  free_contig_range+0x9d/0x150
[  283.405623][ T6332]  destroy_args+0xef/0xa0e
[  283.410279][ T6332]  debug_vm_pgtable+0x33c/0x38e
[  283.415469][ T6332]  do_one_initcall+0x257/0x800
[  283.420436][ T6332]  do_initcall_level+0x13d/0x1ed
[  283.426252][ T6332]  do_initcalls+0x4b/0x8a
[  283.430798][ T6332]  kernel_init_freeable+0x401/0x5ab
[  283.436323][ T6332]  kernel_init+0x19/0x1b0
[  283.440869][ T6332]  ret_from_fork+0x1f/0x30
[  284.744093][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.767211][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.819901][ T6091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.061074][ T6361] loop4: detected capacity change from 0 to 512
[  286.430451][ T4695] kworker/u4:17: attempt to access beyond end of device
[  286.430451][ T4695] loop4: rw=1, sector=4520, nr_sectors = 5336 limit=512
[  286.469641][ T6372] loop2: detected capacity change from 0 to 512
[  286.524824][ T4695] kworker/u4:17: attempt to access beyond end of device
[  286.524824][ T4695] loop4: rw=1, sector=9856, nr_sectors = 3840 limit=512
[  286.590585][ T6372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  286.619270][ T4695] kworker/u4:17: attempt to access beyond end of device
[  286.619270][ T4695] loop4: rw=1, sector=13696, nr_sectors = 2768 limit=512
[  286.642232][ T6372] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.947290][ T6379] rxe_eth0 speed is unknown, defaulting to 1000
[  287.656871][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  287.871124][ T6384] loop4: detected capacity change from 0 to 512
[  288.885211][ T6390] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  288.895627][ T4597] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  288.903288][ T6390] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  288.921313][ T6390] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  288.929844][ T6390] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  288.938822][ T6390] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  288.947941][ T6390] page dumped because: unmovable page
[  289.095021][ T4597] usb 3-1: Using ep0 maxpacket: 32
[  289.102409][ T4597] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  289.115204][ T6390] page_owner tracks the page as allocated
[  289.120953][ T6390] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  289.158059][ T4597] usb 3-1: config 0 has no interface number 0
[  289.184676][ T4597] usb 3-1: config 0 interface 184 has no altsetting 0
[  289.197498][ T4597] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  289.227515][ T6390]  post_alloc_hook+0x173/0x1a0
[  289.244128][ T4597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.305164][ T4597] usb 3-1: Product: syz
[  289.315625][ T4597] usb 3-1: Manufacturer: syz
[  289.324987][ T4597] usb 3-1: SerialNumber: syz
[  289.355902][ T4597] usb 3-1: config 0 descriptor??
[  289.384569][ T4597] smsc75xx v1.0.0
[  289.477492][ T6390]  get_page_from_freelist+0x206b/0x2180
[  289.574433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.598763][ T6390]  __alloc_pages+0x1ec/0x4f0
[  289.650039][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.685049][ T6390]  alloc_slab_page+0x5d/0x180
[  289.689974][ T6390]  new_slab+0x87/0x2d0
[  289.694085][ T6390]  ___slab_alloc+0xbc5/0x1240
[  289.700215][ T6390]  __kmem_cache_alloc_node+0x126/0x270
[  289.706314][ T6390]  __kmalloc_node_track_caller+0xa0/0x240
[  289.712284][ T6390]  kmemdup+0x27/0x60
[  289.723685][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  289.732647][ T6390]  neigh_sysctl_register+0xab/0xa80
[  289.739643][ T6390]  addrconf_sysctl_register+0xac/0x1b0
[  289.756430][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  289.764278][ T6390]  ipv6_add_dev+0xbd4/0x1110
[  289.773428][ T6091] device veth0_vlan entered promiscuous mode
[  289.781368][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  289.784586][ T6390]  addrconf_notify+0x634/0xf60
[  289.806338][ T4691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  289.811918][ T6390]  raw_notifier_call_chain+0xcb/0x160
[  289.821451][ T6091] device veth1_vlan entered promiscuous mode
[  289.845340][ T6390]  register_netdevice+0x16a8/0x1b80
[  289.850657][ T6390]  veth_newlink+0x66a/0xd60
[  289.894873][ T6390] page last free stack trace:
[  289.900258][ T6390]  free_unref_page_prepare+0x8e5/0x9e0
[  289.927181][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  289.937715][ T6390]  free_unref_page+0x2e/0x3f0
[  289.942452][ T6390]  free_contig_range+0x9d/0x150
[  289.953638][ T6390]  destroy_args+0xef/0xa0e
[  289.963263][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  289.963746][ T6390]  debug_vm_pgtable+0x33c/0x38e
[  289.996350][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.000579][ T6390]  do_one_initcall+0x257/0x800
[  290.005801][ T4597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  290.026259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.030890][ T6390]  do_initcall_level+0x13d/0x1ed
[  290.038154][ T4597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  290.052622][ T6091] device veth0_macvtap entered promiscuous mode
[  290.067206][ T6390]  do_initcalls+0x4b/0x8a
[  290.129825][ T6091] device veth1_macvtap entered promiscuous mode
[  290.313994][ T6390]  kernel_init_freeable+0x401/0x5ab
[  290.467872][ T6390]  kernel_init+0x19/0x1b0
[  290.524712][ T6390]  ret_from_fork+0x1f/0x30
[  290.575350][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.736350][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  290.823434][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.858108][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.899802][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.920611][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.937735][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.958959][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.972068][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.989136][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.027940][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.085269][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.231291][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.705675][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.716428][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.727031][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.744122][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.767393][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.784484][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.810480][ T6091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  291.822300][ T6091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.835364][ T6091] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.850311][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.876876][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.933633][ T6091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.022613][ T6091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.067684][ T6420] syz.3.518: attempt to access beyond end of device
[  292.067684][ T6420] nbd3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  292.081105][ T6420] gfs2: error 10 reading superblock
[  292.172503][ T6091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.265615][ T6091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.548805][ T4597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  293.911946][ T6431] loop1: detected capacity change from 0 to 512
[  293.966704][ T4597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  294.004978][ T4597] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  294.045475][ T4597] smsc75xx: probe of 3-1:0.184 failed with error -71
[  294.121731][ T4597] usb 3-1: USB disconnect, device number 7
[  294.170425][ T6433] loop4: detected capacity change from 0 to 512
[  294.610445][ T4691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.618866][ T4691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.816315][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  294.875239][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.883213][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.199058][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  296.440868][ T6446] loop3: detected capacity change from 0 to 512
[  296.522079][ T6453] jffs2: notice: (6453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  297.890775][ T6455] loop5: detected capacity change from 0 to 256
[  298.533314][ T6453] jffs2: fork failed for JFFS2 garbage collect thread: 4
[  299.924547][ T6476] loop1: detected capacity change from 0 to 1024
[  299.961377][ T6476] EXT4-fs: Ignoring removed nomblk_io_submit option
[  299.986930][ T6476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  300.060562][ T6476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  300.100368][ T6485] loop4: detected capacity change from 0 to 512
[  300.104680][ T6476] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.167090][   T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  300.388811][ T6476] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.531: bg 0: block 112: padding at end of block bitmap is not set
[  300.471088][   T14] usb 6-1: Using ep0 maxpacket: 8
[  300.541193][ T6476] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  300.567761][   T14] usb 6-1: unable to get BOS descriptor or descriptor too short
[  300.685968][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  300.697600][ T6476] EXT4-fs (loop1): This should not happen!! Data will be lost
[  300.697600][ T6476] 
[  300.697696][ T6476] EXT4-fs (loop1): Total free blocks count 0
[  300.697748][ T6476] EXT4-fs (loop1): Free/Dirty block details
[  300.697828][ T6476] EXT4-fs (loop1): free_blocks=0
[  300.697950][ T6476] EXT4-fs (loop1): dirty_blocks=64
[  300.774883][ T6476] EXT4-fs (loop1): Block reservation details
[  300.915056][ T6476] EXT4-fs (loop1): i_reserved_data_blocks=4
[  300.965158][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  300.974887][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  300.981342][ T6492] loop2: detected capacity change from 0 to 128
[  300.999036][   T14] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  301.034247][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  301.068959][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  301.069014][ T6492] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  301.106289][   T14] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  301.140022][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.160671][   T14] usb 6-1: Product: syz
[  301.174979][   T14] usb 6-1: Manufacturer: syz
[  301.179644][   T14] usb 6-1: SerialNumber: syz
[  301.196987][   T14] usb 6-1: config 0 descriptor??
[  301.202902][ T6475] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  301.220850][ T6438] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28
[  301.448753][   T14] usb 6-1: USB disconnect, device number 2
[  301.672992][ T6505] loop1: detected capacity change from 0 to 512
[  301.686081][ T6500] udevd[6500]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.714690][ T6486] loop3: detected capacity change from 0 to 32768
[  302.223143][ T6486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.532 (6486)
[  302.296240][ T6486] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.336593][ T6510] device syzkaller0 entered promiscuous mode
[  302.406521][ T6486] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  302.426559][ T6513] loop5: detected capacity change from 0 to 512
[  302.438632][ T6486] BTRFS info (device loop3): using free space tree
[  302.519101][ T6500] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.661385][ T4455] kworker/u4:10: attempt to access beyond end of device
[  302.661385][ T4455] loop1: rw=1, sector=3304, nr_sectors = 904 limit=512
[  302.758089][ T6486] BTRFS info (device loop3): enabling ssd optimizations
[  303.093576][ T6543] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  303.105108][ T6543] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  303.113628][ T6543] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  303.130840][ T6543] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  303.139972][ T6543] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  303.148847][ T6543] page dumped because: unmovable page
[  303.154434][ T6543] page_owner tracks the page as allocated
[  303.160412][ T6543] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  303.182079][ T6543]  post_alloc_hook+0x173/0x1a0
[  303.188313][ T6543]  get_page_from_freelist+0x206b/0x2180
[  303.194200][ T6543]  __alloc_pages+0x1ec/0x4f0
[  303.199056][ T6543]  alloc_slab_page+0x5d/0x180
[  303.204345][ T6543]  new_slab+0x87/0x2d0
[  303.208724][ T6543]  ___slab_alloc+0xbc5/0x1240
[  303.213705][ T6543]  __kmem_cache_alloc_node+0x126/0x270
[  303.219935][ T6543]  __kmalloc_node_track_caller+0xa0/0x240
[  303.225959][ T6543]  kmemdup+0x27/0x60
[  303.230102][ T6543]  neigh_sysctl_register+0xab/0xa80
[  303.235567][ T6543]  addrconf_sysctl_register+0xac/0x1b0
[  303.241297][ T6543]  ipv6_add_dev+0xbd4/0x1110
[  303.246171][ T6543]  addrconf_notify+0x634/0xf60
[  303.251164][ T6543]  raw_notifier_call_chain+0xcb/0x160
[  303.256820][ T6543]  register_netdevice+0x16a8/0x1b80
[  303.262221][ T6543]  veth_newlink+0x66a/0xd60
[  303.267460][ T6543] page last free stack trace:
[  303.272403][ T6543]  free_unref_page_prepare+0x8e5/0x9e0
[  303.278286][ T6543]  free_unref_page+0x2e/0x3f0
[  303.283247][ T6543]  free_contig_range+0x9d/0x150
[  303.288951][ T6543]  destroy_args+0xef/0xa0e
[  303.293756][ T6543]  debug_vm_pgtable+0x33c/0x38e
[  303.298913][ T6543]  do_one_initcall+0x257/0x800
[  303.310989][ T6543]  do_initcall_level+0x13d/0x1ed
[  303.316476][ T6543]  do_initcalls+0x4b/0x8a
[  303.321035][ T6543]  kernel_init_freeable+0x401/0x5ab
[  303.326716][ T6543]  kernel_init+0x19/0x1b0
[  303.331239][ T6543]  ret_from_fork+0x1f/0x30
[  303.876900][ T6545] jffs2: notice: (6545) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  305.245738][ T4277] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  305.287413][ T6560] loop4: detected capacity change from 0 to 256
[  306.060093][ T6574] syz.1.545: attempt to access beyond end of device
[  306.060093][ T6574] nbd1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  306.205986][ T6577] loop5: detected capacity change from 0 to 256
[  307.119763][ T6574] gfs2: error 10 reading superblock
[  308.998543][ T4587] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  309.020156][ T6602] loop2: detected capacity change from 0 to 512
[  309.225024][ T4587] usb 2-1: Using ep0 maxpacket: 32
[  309.663011][ T4587] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  309.671841][ T4587] usb 2-1: config 0 has no interface number 0
[  309.678470][ T4587] usb 2-1: config 0 interface 184 has no altsetting 0
[  309.689784][ T4587] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  309.746730][ T4587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.759512][ T6607] loop5: detected capacity change from 0 to 512
[  309.811992][ T4587] usb 2-1: Product: syz
[  309.816446][ T4587] usb 2-1: Manufacturer: syz
[  309.821289][ T4587] usb 2-1: SerialNumber: syz
[  309.828254][ T4587] usb 2-1: config 0 descriptor??
[  309.835713][ T4587] smsc75xx v1.0.0
[  309.873815][ T6604] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  309.940859][ T6604] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  309.986197][ T6604] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  310.014745][ T6604] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  310.023952][ T6604] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  310.064186][ T6604] page dumped because: unmovable page
[  310.079842][ T6604] page_owner tracks the page as allocated
[  310.098545][ T6604] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  310.124366][ T6604]  post_alloc_hook+0x173/0x1a0
[  310.132177][ T6604]  get_page_from_freelist+0x206b/0x2180
[  310.139812][ T6604]  __alloc_pages+0x1ec/0x4f0
[  310.144561][ T6604]  alloc_slab_page+0x5d/0x180
[  310.151550][ T6604]  new_slab+0x87/0x2d0
[  310.157416][ T6604]  ___slab_alloc+0xbc5/0x1240
[  310.162429][ T6604]  __kmem_cache_alloc_node+0x126/0x270
[  310.169267][ T6604]  __kmalloc_node_track_caller+0xa0/0x240
[  310.176327][ T6604]  kmemdup+0x27/0x60
[  310.180401][ T6604]  neigh_sysctl_register+0xab/0xa80
[  310.189254][ T6604]  addrconf_sysctl_register+0xac/0x1b0
[  310.194843][ T6604]  ipv6_add_dev+0xbd4/0x1110
[  310.201182][ T6604]  addrconf_notify+0x634/0xf60
[  310.206366][ T6604]  raw_notifier_call_chain+0xcb/0x160
[  310.212092][ T6604]  register_netdevice+0x16a8/0x1b80
[  310.219814][ T6604]  veth_newlink+0x66a/0xd60
[  310.224597][ T6604] page last free stack trace:
[  310.230356][ T6604]  free_unref_page_prepare+0x8e5/0x9e0
[  310.236475][ T6604]  free_unref_page+0x2e/0x3f0
[  310.241275][ T6604]  free_contig_range+0x9d/0x150
[  310.249757][ T6604]  destroy_args+0xef/0xa0e
[  310.259101][ T6604]  debug_vm_pgtable+0x33c/0x38e
[  310.264108][ T6604]  do_one_initcall+0x257/0x800
[  310.269607][ T6604]  do_initcall_level+0x13d/0x1ed
[  310.274656][ T6604]  do_initcalls+0x4b/0x8a
[  310.286605][ T6604]  kernel_init_freeable+0x401/0x5ab
[  310.291930][ T6604]  kernel_init+0x19/0x1b0
[  310.302792][ T6604]  ret_from_fork+0x1f/0x30
[  310.389821][ T6438] kworker/u4:21: attempt to access beyond end of device
[  310.389821][ T6438] loop2: rw=1, sector=2448, nr_sectors = 1112 limit=512
[  310.409853][ T6613] loop4: detected capacity change from 0 to 512
[  310.449456][ T4587] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  310.471303][ T4587] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  310.552121][ T6613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.646367][ T6613] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.784088][ T6624] jffs2: notice: (6624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  310.879085][ T6628] rxe_eth0 speed is unknown, defaulting to 1000
[  311.603934][ T4289] EXT4-fs (loop4): unmounting filesystem.
[  311.716744][ T6639] loop3: detected capacity change from 0 to 256
[  312.791601][ T4587] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  313.003171][ T4587] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  313.053005][ T4587] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  313.072959][ T4587] smsc75xx: probe of 2-1:0.184 failed with error -71
[  313.115365][ T4587] usb 2-1: USB disconnect, device number 7
[  313.391886][ T6652] loop3: detected capacity change from 0 to 164
[  314.375896][ T6665] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  314.415924][ T6665] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  314.432944][ T6675] iso9660: Corrupted directory entry in block 2 of inode 1920
[  314.569957][ T6665] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  314.600637][ T6665] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  314.609726][ T6680] loop5: detected capacity change from 0 to 512
[  315.300470][ T6665] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  315.335096][ T6665] page dumped because: unmovable page
[  315.340639][ T6665] page_owner tracks the page as allocated
[  315.407469][ T6665] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  315.475689][ T6665]  post_alloc_hook+0x173/0x1a0
[  315.487259][ T6665]  get_page_from_freelist+0x206b/0x2180
[  315.515173][ T6665]  __alloc_pages+0x1ec/0x4f0
[  315.530892][ T6665]  alloc_slab_page+0x5d/0x180
[  315.536039][ T6665]  new_slab+0x87/0x2d0
[  315.550389][ T6665]  ___slab_alloc+0xbc5/0x1240
[  315.556266][ T6665]  __kmem_cache_alloc_node+0x126/0x270
[  315.561852][ T6665]  __kmalloc_node_track_caller+0xa0/0x240
[  315.569614][ T6665]  kmemdup+0x27/0x60
[  315.573635][ T6665]  neigh_sysctl_register+0xab/0xa80
[  315.590937][ T6665]  addrconf_sysctl_register+0xac/0x1b0
[  315.600503][ T6665]  ipv6_add_dev+0xbd4/0x1110
[  315.616813][ T6665]  addrconf_notify+0x634/0xf60
[  315.624625][ T6665]  raw_notifier_call_chain+0xcb/0x160
[  315.630608][ T6665]  register_netdevice+0x16a8/0x1b80
[  315.638485][ T6665]  veth_newlink+0x66a/0xd60
[  315.643245][ T6665] page last free stack trace:
[  315.652147][ T6665]  free_unref_page_prepare+0x8e5/0x9e0
[  315.659454][ T6665]  free_unref_page+0x2e/0x3f0
[  315.664406][ T6665]  free_contig_range+0x9d/0x150
[  315.674697][ T6665]  destroy_args+0xef/0xa0e
[  315.684977][ T6665]  debug_vm_pgtable+0x33c/0x38e
[  315.696270][ T6665]  do_one_initcall+0x257/0x800
[  315.701092][ T6665]  do_initcall_level+0x13d/0x1ed
[  315.707165][ T6665]  do_initcalls+0x4b/0x8a
[  315.711513][ T6665]  kernel_init_freeable+0x401/0x5ab
[  315.727604][ T6665]  kernel_init+0x19/0x1b0
[  315.731996][ T6665]  ret_from_fork+0x1f/0x30
[  315.867984][ T6675] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  315.905155][ T6675] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  315.934720][ T6694] loop2: detected capacity change from 0 to 128
[  316.053938][ T6698] page:ffffea00015f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57e00
[  316.064575][ T6698] head:ffffea00015f8000 order:3 compound_mapcount:0 compound_pincount:0
[  316.073604][ T6698] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  316.081933][ T6698] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801844c140
[  316.091325][ T6698] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[  316.135697][ T6698] page dumped because: unmovable page
[  316.141209][ T6698] page_owner tracks the page as allocated
[  316.147206][ T6698] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4277, tgid 4277 (syz-executor), ts 72714884195, free_ts 22562555938
[  316.172510][ T6698]  post_alloc_hook+0x173/0x1a0
[  316.177515][ T6698]  get_page_from_freelist+0x206b/0x2180
[  316.183173][ T6698]  __alloc_pages+0x1ec/0x4f0
[  316.187972][ T6698]  alloc_slab_page+0x5d/0x180
[  316.193389][ T6698]  new_slab+0x87/0x2d0
[  316.197851][ T6698]  ___slab_alloc+0xbc5/0x1240
[  316.202786][ T6698]  __kmem_cache_alloc_node+0x126/0x270
[  316.208464][ T6698]  __kmalloc_node_track_caller+0xa0/0x240
[  316.214290][ T6698]  kmemdup+0x27/0x60
[  316.218434][ T6698]  neigh_sysctl_register+0xab/0xa80
[  316.273866][ T6698]  addrconf_sysctl_register+0xac/0x1b0
[  316.279818][ T6698]  ipv6_add_dev+0xbd4/0x1110
[  316.284629][ T6698]  addrconf_notify+0x634/0xf60
[  316.289757][ T6698]  raw_notifier_call_chain+0xcb/0x160
[  316.296078][ T6698]  register_netdevice+0x16a8/0x1b80
[  316.301474][ T6698]  veth_newlink+0x66a/0xd60
[  316.306400][ T6698] page last free stack trace:
[  316.311263][ T6698]  free_unref_page_prepare+0x8e5/0x9e0
[  316.323667][ T6698]  free_unref_page+0x2e/0x3f0
[  316.328656][ T6698]  free_contig_range+0x9d/0x150
[  316.333724][ T6698]  destroy_args+0xef/0xa0e
[  316.338478][ T6698]  debug_vm_pgtable+0x33c/0x38e
[  316.343638][ T6698]  do_one_initcall+0x257/0x800
[  316.348833][ T6698]  do_initcall_level+0x13d/0x1ed
[  316.353952][ T6698]  do_initcalls+0x4b/0x8a
[  316.358594][ T6698]  kernel_init_freeable+0x401/0x5ab
[  316.364008][ T6698]  kernel_init+0x19/0x1b0
[  316.368607][ T6698]  ret_from_fork+0x1f/0x30
[  316.804752][ T6675] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  316.905532][ T6675] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  316.976162][ T6675] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  317.012749][ T6675] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  317.054150][ T6675] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  317.072348][ T6675] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  317.232496][ T6705] jffs2: notice: (6705) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  317.252280][ T6675] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  317.326955][ T6675] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  317.435312][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.441638][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  317.905480][   T50] Bluetooth: hci0: command 0x0c1a tx timeout
[  318.104306][ T6713] loop2: detected capacity change from 0 to 256
[  318.225301][   T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  318.435080][   T14] usb 5-1: Using ep0 maxpacket: 32
[  318.448370][   T14] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  318.570378][   T14] usb 5-1: config 0 has no interface number 0
[  318.632100][   T14] usb 5-1: config 0 interface 184 has no altsetting 0
[  318.891499][   T50] Bluetooth: hci3: command 0x0c1a tx timeout
[  318.925858][   T14] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  318.985040][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.002878][ T6721] jffs2: notice: (6721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  319.015035][   T14] usb 5-1: Product: syz
[  319.023561][   T14] usb 5-1: Manufacturer: syz
[  319.028683][   T50] Bluetooth: hci2: command 0x0c1a tx timeout
[  319.039378][   T14] usb 5-1: SerialNumber: syz
[  319.067046][   T14] usb 5-1: config 0 descriptor??
[  319.125073][   T50] Bluetooth: hci1: command 0x0c1a tx timeout
[  319.131645][   T50] Bluetooth: hci4: command 0x0c1a tx timeout
[  319.976729][   T14] usb 5-1: can't set config #0, error -71
[  319.985306][ T4293] Bluetooth: hci0: command 0x0406 tx timeout
[  319.986596][   T14] usb 5-1: USB disconnect, device number 7
[  320.658529][ T6740] loop1: detected capacity change from 0 to 256
[  320.914965][ T4587] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  320.945065][ T4293] Bluetooth: hci3: command 0x0406 tx timeout
[  321.105179][ T4293] Bluetooth: hci2: command 0x0406 tx timeout
[  321.185183][ T4293] Bluetooth: hci1: command 0x0406 tx timeout
[  321.566620][ T4587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.592825][ T4587] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.756903][ T4587] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  322.135987][ T4587] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.310289][ T4587] usb 6-1: config 0 descriptor??
[  322.831733][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.860036][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.884022][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.903531][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.917795][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.926095][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.933169][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.940534][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.950710][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  322.958112][ T4587] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0
[  323.001418][ T4587] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  323.035070][ T6733] ------------[ cut here ]------------
[  323.040689][ T6733] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  323.040798][ T6733] WARNING: CPU: 1 PID: 6733 at kernel/locking/mutex.c:582 __mutex_lock+0xa7e/0xb40
[  323.056336][ T6733] Modules linked in:
[  323.060233][ T6733] CPU: 1 PID: 6733 Comm: syz.5.579 Not tainted syzkaller #0
[  323.067632][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  323.077772][ T6733] RIP: 0010:__mutex_lock+0xa7e/0xb40
[  323.083117][ T6733] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80
[  323.102756][ T6733] RSP: 0018:ffffc90005417680 EFLAGS: 00010246
[  323.108859][ T6733] RAX: 995fa4ecde54eb00 RBX: ffff888056cbb880 RCX: 0000000000080000
[  323.116894][ T6733] RDX: ffffc900059c1000 RSI: 0000000000003499 RDI: 000000000000349a
[  323.124951][ T6733] RBP: ffffc900054177e0 R08: ffff8880b8d279db R09: 1ffff110171a4f3b
[  323.132949][ T6733] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000
[  323.141045][ T6733] R13: 0000000000000000 R14: ffffffff9806db80 R15: 0000000000000000
[  323.149060][ T6733] FS:  00007f878569b6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  323.158005][ T6733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.164593][ T6733] CR2: 00007fb12bc27dac CR3: 0000000078a12000 CR4: 00000000003506e0
[  323.172776][ T6733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  323.180788][ T6733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  323.188882][ T6733] Call Trace:
[  323.192158][ T6733]  <TASK>
[  323.195121][ T6733]  ? __mutex_lock+0x3ba/0xb40
[  323.199832][ T6733]  ? roccat_open+0xf2/0x5a0
[  323.204365][ T6733]  ? mutex_lock_nested+0x10/0x10
[  323.209366][ T6733]  roccat_open+0xf2/0x5a0
[  323.213715][ T6733]  ? do_raw_spin_unlock+0x11d/0x230
[  323.218973][ T6733]  chrdev_open+0x585/0x5f0
[  323.223416][ T6733]  ? cd_forget+0x160/0x160
[  323.227895][ T6733]  ? fsnotify_perm+0x39b/0x550
[  323.232716][ T6733]  ? cd_forget+0x160/0x160
[  323.237173][ T6733]  do_dentry_open+0x7dd/0x10b0
[  323.241970][ T6733]  path_openat+0x2674/0x2f10
[  323.246801][ T6733]  ? kasan_set_track+0x60/0x70
[  323.251684][ T6733]  ? verify_lock_unused+0x140/0x140
[  323.257435][ T6733]  ? do_sys_openat2+0xdd/0x4f0
[  323.262214][ T6733]  ? do_filp_open+0x420/0x420
[  323.266938][ T6733]  do_filp_open+0x1ee/0x420
[  323.271465][ T6733]  ? vfs_tmpfile+0x490/0x490
[  323.276127][ T6733]  ? _raw_spin_unlock+0x24/0x40
[  323.281020][ T6733]  ? alloc_fd+0x590/0x640
[  323.285399][ T6733]  do_sys_openat2+0x14b/0x4f0
[  323.290096][ T6733]  ? do_sys_open+0xe0/0xe0
[  323.294511][ T6733]  ? lock_chain_count+0x20/0x20
[  323.299407][ T6733]  __x64_sys_openat+0x135/0x160
[  323.304290][ T6733]  do_syscall_64+0x4c/0xa0
[  323.308774][ T6733]  ? clear_bhb_loop+0x60/0xb0
[  323.313483][ T6733]  ? clear_bhb_loop+0x60/0xb0
[  323.318224][ T6733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.324133][ T6733] RIP: 0033:0x7f878479fb19
[  323.328584][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.348343][ T6733] RSP: 002b:00007f878569b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  323.356922][ T6733] RAX: ffffffffffffffda RBX: 00007f8784a25fa0 RCX: 00007f878479fb19
[  323.365035][ T6733] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  323.372998][ T6733] RBP: 00007f8784837b70 R08: 0000000000000000 R09: 0000000000000000
[  323.381093][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.389148][ T6733] R13: 00007f8784a26038 R14: 00007f8784a25fa0 R15: 00007ffe66716ae8
[  323.397263][ T6733]  </TASK>
[  323.400311][ T6733] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  323.407588][ T6733] CPU: 1 PID: 6733 Comm: syz.5.579 Not tainted syzkaller #0
[  323.414976][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  323.425029][ T6733] Call Trace:
[  323.428303][ T6733]  <TASK>
[  323.431227][ T6733]  dump_stack_lvl+0x188/0x24e
[  323.435905][ T6733]  ? memcpy+0x3c/0x60
[  323.439886][ T6733]  ? show_regs_print_info+0x12/0x12
[  323.445118][ T6733]  ? load_image+0x410/0x410
[  323.449624][ T6733]  panic+0x2d3/0x710
[  323.453602][ T6733]  ? bpf_jit_dump+0xd0/0xd0
[  323.458101][ T6733]  __warn+0x2f8/0x4f0
[  323.462076][ T6733]  ? __mutex_lock+0xa7e/0xb40
[  323.466771][ T6733]  ? __mutex_lock+0xa7e/0xb40
[  323.471439][ T6733]  report_bug+0x2ba/0x4f0
[  323.475764][ T6733]  ? __mutex_lock+0xa7e/0xb40
[  323.480449][ T6733]  handle_bug+0x3a/0x70
[  323.484608][ T6733]  exc_invalid_op+0x16/0x40
[  323.489106][ T6733]  asm_exc_invalid_op+0x16/0x20
[  323.493952][ T6733] RIP: 0010:__mutex_lock+0xa7e/0xb40
[  323.499240][ T6733] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80
[  323.518871][ T6733] RSP: 0018:ffffc90005417680 EFLAGS: 00010246
[  323.524949][ T6733] RAX: 995fa4ecde54eb00 RBX: ffff888056cbb880 RCX: 0000000000080000
[  323.532929][ T6733] RDX: ffffc900059c1000 RSI: 0000000000003499 RDI: 000000000000349a
[  323.540898][ T6733] RBP: ffffc900054177e0 R08: ffff8880b8d279db R09: 1ffff110171a4f3b
[  323.548937][ T6733] R10: dffffc0000000000 R11: ffffed10171a4f3c R12: dffffc0000000000
[  323.556925][ T6733] R13: 0000000000000000 R14: ffffffff9806db80 R15: 0000000000000000
[  323.564895][ T6733]  ? __mutex_lock+0x3ba/0xb40
[  323.569583][ T6733]  ? roccat_open+0xf2/0x5a0
[  323.574097][ T6733]  ? mutex_lock_nested+0x10/0x10
[  323.579027][ T6733]  roccat_open+0xf2/0x5a0
[  323.583354][ T6733]  ? do_raw_spin_unlock+0x11d/0x230
[  323.588545][ T6733]  chrdev_open+0x585/0x5f0
[  323.592963][ T6733]  ? cd_forget+0x160/0x160
[  323.597374][ T6733]  ? fsnotify_perm+0x39b/0x550
[  323.602136][ T6733]  ? cd_forget+0x160/0x160
[  323.606551][ T6733]  do_dentry_open+0x7dd/0x10b0
[  323.611354][ T6733]  path_openat+0x2674/0x2f10
[  323.615944][ T6733]  ? kasan_set_track+0x60/0x70
[  323.620705][ T6733]  ? verify_lock_unused+0x140/0x140
[  323.625900][ T6733]  ? do_sys_openat2+0xdd/0x4f0
[  323.630679][ T6733]  ? do_filp_open+0x420/0x420
[  323.635361][ T6733]  do_filp_open+0x1ee/0x420
[  323.639870][ T6733]  ? vfs_tmpfile+0x490/0x490
[  323.644459][ T6733]  ? _raw_spin_unlock+0x24/0x40
[  323.649306][ T6733]  ? alloc_fd+0x590/0x640
[  323.653635][ T6733]  do_sys_openat2+0x14b/0x4f0
[  323.658313][ T6733]  ? do_sys_open+0xe0/0xe0
[  323.662724][ T6733]  ? lock_chain_count+0x20/0x20
[  323.667605][ T6733]  __x64_sys_openat+0x135/0x160
[  323.672463][ T6733]  do_syscall_64+0x4c/0xa0
[  323.676878][ T6733]  ? clear_bhb_loop+0x60/0xb0
[  323.681553][ T6733]  ? clear_bhb_loop+0x60/0xb0
[  323.686235][ T6733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  323.692127][ T6733] RIP: 0033:0x7f878479fb19
[  323.696542][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.716499][ T6733] RSP: 002b:00007f878569b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  323.724921][ T6733] RAX: ffffffffffffffda RBX: 00007f8784a25fa0 RCX: 00007f878479fb19
[  323.732900][ T6733] RDX: 0000000000000002 RSI: 0000200000000380 RDI: ffffffffffffff9c
[  323.740951][ T6733] RBP: 00007f8784837b70 R08: 0000000000000000 R09: 0000000000000000
[  323.748930][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  323.756914][ T6733] R13: 00007f8784a26038 R14: 00007f8784a25fa0 R15: 00007ffe66716ae8
[  323.764890][ T6733]  </TASK>
[  323.768073][ T6733] Kernel Offset: disabled
[  323.772423][ T6733] Rebooting in 86400 seconds..