last executing test programs:

4m17.503233657s ago: executing program 4 (id=349):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000500006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

4m14.627374694s ago: executing program 4 (id=352):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
madvise(&(0x7f0000229000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x30901d51018e0bb3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x2, 0x0})
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
socket$netlink(0x10, 0x3, 0xc)
setgroups(0x0, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
clock_gettime(0x4, 0x0)
semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}, {0x6, 0x6, 0x1000}, {0x4, 0x80, 0x800}, {0x3, 0x3, 0x1000}, {0x3, 0x1ff, 0x1800}, {0x4, 0x6, 0x800}], 0x6, &(0x7f0000000140))
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x46, &(0x7f0000001940)=ANY=[], 0x41, 0xa9d, &(0x7f0000000c00)="$eJzs3UuMHEfdAPCe3Z2113Y+j/PZZHFCbBNIIiC78a4xDwviKL5gxYhbpIiL5TjBwjEIR4JEkbB94kYiy9wQD3HKJQKERC7IyolLJGKJS7gEDhywjBSJAzjYg3a2anbm75n0rPfROzu/n1Rb01PVXdW93T39rCqAkTXW+ltv/b3y1uVj/3j471MLn59o52i0/k50DC3krqXhiTC998cX41sfvHqqV1wr5lp/8/B4x7jbi6K4UOwvrhaNYu+Va6+/M/f0iYvHLx14940j19dg1gEAYOR84+qRQ3v++qf7d91888GjxZb29/n4vJGGd6Tj/qPpwH8hmqjl84el84FaR+g0GfJNpDAW8o33yFd05KvnfFu7x4vlT4bp1vvk21JS/ng4R6mF+sAwy+txo6iNzXQNj43NzCyekxet8/rJ2sy5M2efP19RRYFV9699RVHsz+Fmc+mzIGzm0NzZ3ggqr0t1oWMpAFQq3i+8w4V4ZWFl2lObGKz8G0+O9R6/W30168joWO/1X/lx+t31WO/yy+b/VxfXeP4ZKYOvTVvXtB6rLc9X3o52pOF4HyE+v9R/+0tjhu0/T288TG/QA4B+9xGG5f5Cv3qOr3M97la/+sf1YrP6SorzcvhqSO/cfuL/dFj+x0Bv/95X/TXI7jC1VLny/BPV11cQhjc0q9z5ANUqOa2Pz801k5wen+uL6VtK0reWpE+VpG8rSd9ekg6j7Lcv/bh4rVb0fB+vWDz/b20sg14Pz9fZ7knx/y2zPvF65HLvB8TnfpdrpeXH54lhI/v9yWdOf/G5Z68tPv9fa6//t9P6vj8NN9K2dTVlyNcL43X19rP/je5yxvrkuzfU554e+Vufd3fnq+1emk7RsZ+5ox7T3ePt7Jfvge58jZBvKoV4uBSPT7aF8fLxR96v5uU1Eea3HuZjMtQj71d2pXi47sawUeX1sd/z/3n9nC7qtefPnD39eBrO6+kfx+tbFr4/uM71BlZu0Pd/povu9392pN++6aI+1rlf2NnOv7i/ONieXvf3c32+n0/D+XfuW+NTre9nTn3n7HNrsQBghJ1/+ZVvnzx79vT3fPDBBx/aH6reMwFrbfalF787e/7lVx478+LJF06/cPrc/OHD83Nzh780f2i2dVw/23l0D2wmSz/6VdcEAAAAAAAAAAAAGNT3jx+79ue3v/De4vv/S+//5ff/85O/+f3/H4X3/+N78vk9+Pwe4K4e6a08oYHVyZCvnsL/h/ruDuXsCeN9LMXtfvzS+/+5uNiua67PfeH72H5vzheaE7ijvZTJ0AZJ7C/wkym+lOJfFlCh2k97f53isvat87qe26fQLsVwyv+33J5Jbsckv//dr12nvP/f1XuyP1zterK61uN1wqrnEejtnxuu/e81CUsNflZel44zhsrrImy0cKvZXNc+eJvNj+rFQ19TwPqpuv/PfN0zx+f+8LWtCyFnu/Fk9/4ytl8KK1F1/5eVlZ8vLG7g+b/wl+qX/2r3/9nu/27g/V/oMa9xd+X+52fX3+sottjbt/wtRVf5cf5zO9C7l1f+zVR+nptHin7ld89/8xeh/HhDaEAfhvK3DVh+nP/Lyy04FfjfVH5ebI8+NGj5ixOojXXXI143zvf/4nXj7FaY/9y253Ln/247arydyodRNiz9zC5XV/+/F5ur0P9vMmj/vyvsYSg+h/H5NJx3hPk5h9jfyXLrn5+vyL8De8L0ayW/b/r/HW5fTnHZ9pD7/83rY6PH8FjHcL3Hst2s+xoYVu+v2v2/jifmNsB9lJEIU5b3QqhZBncdms1mpTf53GGsVtXLv+rzhKrLr3r5l4n9/8Zj+Nj/b0yP/f/G9Nj/b0xv/cR9uNRpb1xesf/fmB77/43p94VyY//A0yXpHy9J31uSfn9J+gMl6Z8oST9Qkv5gSfq+kvR7S9IfKkn/VPiPx/RPl4z/cEn6ox+dPv+DkvE3u/w+ymDzv9H3VsByxPfzRm3/B6Ms3//pt/3vLkkHhtdP3jz41LO/+WZj8f3/yfb1kHwf72garqej/3i+FK+fjKe0t9Pw30K6MwjYOGL7GfH3/ZGSdGB45ee8bN8wgmq9W+wZtN2qfsf5DJfPpPizKf5cih9L8UyKZ1N8MMVz61Q/1sZTv/7dkddqS+f7O0P6oM+Tx/eBYjtR8wPWJ14fWO7z7LEdv+Vaafl3+ToYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZcZafw8dmq4VxZW3Lh975sSZ2YVvnmjnaLT+TnQM1dvjFcXjKR5P8c/Th1sfvHqqM76d4loxV9SKWvv74us32iVtL4riQrG/uFo0ir1Xrr3+ztzTJy4ev3Tg3TeOXF+7JQAAAACb3/8CAAD//0uLH1c=")
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4842, 0x0)
sendfile(r3, r2, 0x0, 0x80000002)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
setsockopt(0xffffffffffffffff, 0xa2a, 0x3, &(0x7f0000d14ffc)="ce", 0x1)
listen(0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x7)

4m7.805150819s ago: executing program 4 (id=360):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {<r2=>0x0}}, './file0\x00'})
setreuid(r2, 0xffffffffffffffff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
read$watch_queue(r3, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@errors_remount}]}, 0x1, 0x782, &(0x7f0000002200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x3010, 0x2}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044, 0x1})
io_uring_enter(r7, 0x47b9, 0x3e80, 0xc, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)

4m3.222103457s ago: executing program 4 (id=365):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')

3m58.620378193s ago: executing program 4 (id=372):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
madvise(&(0x7f0000229000/0x3000)=nil, 0x3000, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x30901d51018e0bb3, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x2, 0x0})
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
socket$netlink(0x10, 0x3, 0xc)
setgroups(0x0, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)
clock_gettime(0x4, 0x0)
semtimedop(0x0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}, {0x6, 0x6, 0x1000}, {0x3, 0x3, 0x1000}, {0x3, 0x1ff, 0x1800}, {0x4, 0x6, 0x800}], 0x5, &(0x7f0000000140))
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x46, &(0x7f0000001940)=ANY=[], 0x41, 0xa9d, &(0x7f0000000c00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x44402, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x4842, 0x0)
sendfile(r3, r2, 0x0, 0x80000002)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
setsockopt(0xffffffffffffffff, 0xa2a, 0x3, &(0x7f0000d14ffc)="ce", 0x1)
listen(0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x7)

3m53.767776511s ago: executing program 4 (id=376):
socket$kcm(0x22, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

3m38.112561204s ago: executing program 32 (id=376):
socket$kcm(0x22, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

1m48.351703189s ago: executing program 0 (id=658):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x21}, 0x1, 0x2})

1m47.216829255s ago: executing program 0 (id=661):
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40040, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x20000000000000d8, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x662e507d9cf78f0b, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
socket$kcm(0x2d, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0)

1m46.460749572s ago: executing program 0 (id=664):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0))

1m45.039590308s ago: executing program 0 (id=667):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xff80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x4000000)

1m43.691578061s ago: executing program 0 (id=671):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x999, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x1, 0x4000000004, 0x800000000, 0x4, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})

1m41.995564158s ago: executing program 0 (id=673):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setns(0xffffffffffffffff, 0x8020000)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b)

1m26.549067007s ago: executing program 33 (id=673):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setns(0xffffffffffffffff, 0x8020000)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x23b)

15.123440757s ago: executing program 1 (id=911):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

14.294372167s ago: executing program 1 (id=912):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r1, 0x540b, 0x2)
socket$inet6(0xa, 0x800000000000002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x118, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r7 = openat$incfs(0xffffffffffffffff, 0x0, 0xa80, 0xc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000240)={0xfff, 0x1, {0x0, 0x2, 0x2, 0x0, 0xe}, 0x5})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

12.271677303s ago: executing program 1 (id=920):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4)

12.058580683s ago: executing program 5 (id=921):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bind$alg(r1, 0x0, 0x0)

11.878380482s ago: executing program 5 (id=924):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020400090a00000000000000fbdbdf250300060000000e00020000007f0000010000000000000000020001000000000003040206000000c0030005000000000002"], 0x50}}, 0x0)

10.708985041s ago: executing program 5 (id=927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0)

9.983356634s ago: executing program 5 (id=930):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

9.799892216s ago: executing program 2 (id=932):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})

8.731321135s ago: executing program 3 (id=933):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2)

7.255678455s ago: executing program 2 (id=935):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
get_mempolicy(0x0, &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4)

6.43541843s ago: executing program 1 (id=936):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mlockall(0x7)
shutdown(r2, 0x2)
close(r2)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
close(0xffffffffffffffff)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444bf40ddf534ff8c07cb111"], 0x0)
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

6.288308448s ago: executing program 2 (id=937):
r0 = epoll_create1(0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000001})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000))

6.257951436s ago: executing program 3 (id=938):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @none}, 0x8)

5.744991689s ago: executing program 2 (id=941):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x0, 0x2c000011)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r0, 0xfa206000)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

5.697791929s ago: executing program 6 (id=942):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

4.759492385s ago: executing program 6 (id=943):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

4.415321627s ago: executing program 2 (id=944):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$rxrpc(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r1, 0x4b72, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

3.430231321s ago: executing program 6 (id=945):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})

3.311403789s ago: executing program 3 (id=946):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)

2.916607431s ago: executing program 3 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x3cfb, 0x400, 0x3fffd, 0x112}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0})
io_uring_enter(r4, 0x8aa, 0x0, 0x41, 0x0, 0x0)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.592578827s ago: executing program 6 (id=948):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0xde2e92ecda5c185f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f04}, @TCA_CTINFO_PARMS_DSCP_MASK={0x1, 0x5, 0x5d4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

2.228130535s ago: executing program 5 (id=949):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)

1.611461348s ago: executing program 3 (id=950):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

1.511947671s ago: executing program 2 (id=951):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpeername(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000180)=0x80)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r6, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r7 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000380)=""/7, 0x7}], 0x3)
tkill(r7, 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)

1.28469853s ago: executing program 1 (id=952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0)

1.231473905s ago: executing program 6 (id=953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0)

1.160090357s ago: executing program 3 (id=954):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000003a80), 0x0, 0x2c000011)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x13, r0, 0xfa206000)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

1.102841615s ago: executing program 1 (id=955):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff0001000000000000000000040000ffffe0000002fc010000000000000000000000ff00010001071c4e23000200000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d66c0000000a01010100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250000000000000300000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000002350000020001002000000000000000480003006465666c61746500"/232], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0)

963.428392ms ago: executing program 5 (id=956):
socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0xd7, 0x0, 0xe9cc})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)

0s ago: executing program 6 (id=957):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40310500000005101c24ed"], 0x0, 0x0, 0x0, 0x0}, 0x0)

kernel console output (not intermixed with test programs):


[  186.076348][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.083774][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.091068][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.098536][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.123636][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.131358][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.138901][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.146390][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.154147][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.161587][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.168923][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.176363][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.203107][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.210687][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.218057][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.226346][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.234396][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.241803][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.249109][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.256550][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.283459][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.290994][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.298297][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.305830][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.313205][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.320647][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.328401][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.336506][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.362739][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.370187][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.377573][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.385022][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.392400][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.399967][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.414002][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.421454][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.449510][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.456979][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.465174][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.472611][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.479965][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.487378][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.494841][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.502271][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.527349][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.535771][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.543601][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.551232][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.558929][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.566697][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.574078][ T6480] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  186.581846][ T6480] SQUASHFS error: read_indexes: reading block [2fa:0]
[  186.608251][   T30] audit: type=1800 audit(1743914924.595:12): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.141" name="file1" dev="loop3" ino=5 res=0 errno=0
[  186.856078][ T6482] loop2: detected capacity change from 0 to 128
[  187.919394][ T6482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.196016][ T6496] bio_check_eod: 102 callbacks suppressed
[  188.196038][ T6496] syz.2.143: attempt to access beyond end of device
[  188.196038][ T6496] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128
[  188.261782][ T6496] syz.2.143: attempt to access beyond end of device
[  188.261782][ T6496] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  188.321263][ T6497] loop3: detected capacity change from 0 to 2048
[  188.348362][ T6496] syz.2.143: attempt to access beyond end of device
[  188.348362][ T6496] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  188.449651][ T6496] syz.2.143: attempt to access beyond end of device
[  188.449651][ T6496] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  189.483336][ T6496] syz.2.143: attempt to access beyond end of device
[  189.483336][ T6496] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  189.498444][ T6504] loop1: detected capacity change from 0 to 512
[  189.586743][ T6497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.599422][ T6496] syz.2.143: attempt to access beyond end of device
[  189.599422][ T6496] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  189.629954][ T6496] syz.2.143: attempt to access beyond end of device
[  189.629954][ T6496] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  189.644725][ T6496] syz.2.143: attempt to access beyond end of device
[  189.644725][ T6496] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  189.658715][ T6497] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.670707][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  189.694809][ T6504] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.721602][ T6496] syz.2.143: attempt to access beyond end of device
[  189.721602][ T6496] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  189.743935][ T6496] syz.2.143: attempt to access beyond end of device
[  189.743935][ T6496] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  190.754814][ T6515] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  190.859766][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  190.993850][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.057317][ T6540] loop1: detected capacity change from 0 to 128
[  193.110250][ T6543] loop2: detected capacity change from 0 to 512
[  193.183469][ T6543] EXT4-fs: Ignoring removed i_version option
[  193.273516][ T6543] EXT4-fs: Ignoring removed mblk_io_submit option
[  193.296067][ T6547] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.385378][ T6546] loop0: detected capacity change from 0 to 8
[  193.517254][ T6548] bio_check_eod: 101 callbacks suppressed
[  193.523228][ T6548] syz.1.157: attempt to access beyond end of device
[  193.523228][ T6548] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  193.537259][ T6548] syz.1.157: attempt to access beyond end of device
[  193.537259][ T6548] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  193.551306][ T6548] syz.1.157: attempt to access beyond end of device
[  193.551306][ T6548] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  193.565340][ T6548] syz.1.157: attempt to access beyond end of device
[  193.565340][ T6548] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  193.579989][ T6548] syz.1.157: attempt to access beyond end of device
[  193.579989][ T6548] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  193.596206][ T6548] syz.1.157: attempt to access beyond end of device
[  193.596206][ T6548] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  193.610536][ T6548] syz.1.157: attempt to access beyond end of device
[  193.610536][ T6548] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  193.624698][ T6548] syz.1.157: attempt to access beyond end of device
[  193.624698][ T6548] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  193.638984][ T6548] syz.1.157: attempt to access beyond end of device
[  193.638984][ T6548] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  193.653169][ T6548] syz.1.157: attempt to access beyond end of device
[  193.653169][ T6548] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  194.423047][ T6553] loop4: detected capacity change from 0 to 256
[  194.489449][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.158: inode #13: comm syz.2.158: iget: illegal inode #
[  194.586785][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  194.600417][ T6543] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.158: couldn't read orphan inode 13 (err -117)
[  194.619294][ T6543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.655424][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  194.693454][ T6553] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  194.740585][ T6553] UDF-fs: Scanning with blocksize 512 failed
[  194.790416][ T6553] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  194.839903][ T6553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.858279][ T6560] loop3: detected capacity change from 0 to 128
[  196.531692][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.296957][ T6573] loop4: detected capacity change from 0 to 128
[  197.535163][ T6575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.489258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  199.495756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  201.135646][ T6588] loop1: detected capacity change from 0 to 2048
[  201.230393][ T6599] loop0: detected capacity change from 0 to 128
[  201.279024][ T6588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.326516][ T6588] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.559264][ T6603] loop2: detected capacity change from 0 to 2048
[  202.573007][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.748134][ T6610] bio_check_eod: 326 callbacks suppressed
[  202.748158][ T6610] syz.0.173: attempt to access beyond end of device
[  202.748158][ T6610] loop0: rw=2049, sector=145, nr_sectors = 80 limit=128
[  202.768165][ T6610] syz.0.173: attempt to access beyond end of device
[  202.768165][ T6610] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  202.782179][ T6610] syz.0.173: attempt to access beyond end of device
[  202.782179][ T6610] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  202.826085][ T6603] /dev/loop2: Can't open blockdev
[  202.832323][ T6610] syz.0.173: attempt to access beyond end of device
[  202.832323][ T6610] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  202.850193][ T6610] syz.0.173: attempt to access beyond end of device
[  202.850193][ T6610] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  202.865022][ T6610] syz.0.173: attempt to access beyond end of device
[  202.865022][ T6610] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  202.881833][ T6610] syz.0.173: attempt to access beyond end of device
[  202.881833][ T6610] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128
[  203.096224][ T6610] syz.0.173: attempt to access beyond end of device
[  203.096224][ T6610] loop0: rw=2049, sector=329, nr_sectors = 8 limit=128
[  204.087980][ T6610] syz.0.173: attempt to access beyond end of device
[  204.087980][ T6610] loop0: rw=2049, sector=345, nr_sectors = 8 limit=128
[  204.118592][ T6610] syz.0.173: attempt to access beyond end of device
[  204.118592][ T6610] loop0: rw=2049, sector=361, nr_sectors = 8 limit=128
[  204.511811][ T6621] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  205.122205][ T6604] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  205.260300][ T6628] loop3: detected capacity change from 0 to 128
[  205.270573][ T6604] EXT4-fs (loop1): Remounting filesystem read-only
[  205.310463][ T6624] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  205.334352][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.892461][ T6453] bio_check_eod: 63 callbacks suppressed
[  209.892476][ T6453] kworker/u8:12: attempt to access beyond end of device
[  209.892476][ T6453] loop0: rw=1, sector=737, nr_sectors = 8 limit=128
[  209.931764][ T6638] loop1: detected capacity change from 0 to 8
[  209.938278][ T6453] kworker/u8:12: attempt to access beyond end of device
[  209.938278][ T6453] loop0: rw=1, sector=769, nr_sectors = 8 limit=128
[  209.968718][ T6453] kworker/u8:12: attempt to access beyond end of device
[  209.968718][ T6453] loop0: rw=1, sector=801, nr_sectors = 8 limit=128
[  210.051715][ T6453] kworker/u8:12: attempt to access beyond end of device
[  210.051715][ T6453] loop0: rw=1, sector=833, nr_sectors = 8 limit=128
[  210.086527][ T3507] kworker/u8:6: attempt to access beyond end of device
[  210.086527][ T3507] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  210.115054][ T6640] loop2: detected capacity change from 0 to 128
[  210.122888][ T6453] kworker/u8:12: attempt to access beyond end of device
[  210.122888][ T6453] loop0: rw=1, sector=865, nr_sectors = 8 limit=128
[  210.137299][ T3507] kworker/u8:6: attempt to access beyond end of device
[  210.137299][ T3507] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[  210.158640][ T6453] kworker/u8:12: attempt to access beyond end of device
[  210.158640][ T6453] loop0: rw=1, sector=897, nr_sectors = 8 limit=128
[  210.172326][ T3507] kworker/u8:6: attempt to access beyond end of device
[  210.172326][ T3507] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[  210.189155][ T6453] kworker/u8:12: attempt to access beyond end of device
[  210.189155][ T6453] loop0: rw=1, sector=929, nr_sectors = 8 limit=128
[  212.442226][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'.
[  214.806715][ T6680] loop1: detected capacity change from 0 to 8
[  215.413197][ T6680] SQUASHFS error: Failed to read block 0x2fc: -5
[  215.419719][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.427089][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.433941][ T6680] SQUASHFS error: Failed to read block 0xfc: -5
[  215.440525][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.447892][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.454895][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.463952][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.480998][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.488379][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.495319][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.504650][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.511596][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.518958][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.529642][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.537020][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.543903][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.551355][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.558302][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.565775][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.573054][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.580520][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.593388][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.603139][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.610171][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.617766][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.624672][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.632048][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.639000][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.646401][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.657609][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.664955][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.671878][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.679383][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.686368][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.693798][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.700745][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.714332][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.725605][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.732977][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.739934][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.747294][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.754354][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.761746][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.768760][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.776228][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.787290][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.794669][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.801616][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.811332][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.818326][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.825789][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.832756][ T6680] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  215.840275][ T6680] SQUASHFS error: read_indexes: reading block [2fa:0]
[  215.896893][   T30] audit: type=1800 audit(1743914954.160:13): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.190" name="file1" dev="loop1" ino=5 res=0 errno=0
[  217.874227][ T6683] Bluetooth: hci1: command 0x0406 tx timeout
[  217.880328][ T6683] Bluetooth: hci2: command 0x0406 tx timeout
[  217.886790][ T6683] Bluetooth: hci0: command 0x0406 tx timeout
[  217.892844][ T6683] Bluetooth: hci3: command 0x0406 tx timeout
[  217.903596][ T6691] Bluetooth: hci4: command 0x0406 tx timeout
[  220.374335][ T6700] loop0: detected capacity change from 0 to 128
[  220.503426][ T6702] loop4: detected capacity change from 0 to 256
[  220.537317][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  220.697689][ T6710] bio_check_eod: 244 callbacks suppressed
[  220.703822][ T6710] syz.0.197: attempt to access beyond end of device
[  220.703822][ T6710] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  220.726388][ T6709] loop2: detected capacity change from 0 to 8
[  220.733371][ T6710] syz.0.197: attempt to access beyond end of device
[  220.733371][ T6710] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  220.747643][ T6710] syz.0.197: attempt to access beyond end of device
[  220.747643][ T6710] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  220.761970][ T6710] syz.0.197: attempt to access beyond end of device
[  220.761970][ T6710] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  220.776391][ T6710] syz.0.197: attempt to access beyond end of device
[  220.776391][ T6710] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  220.790623][ T6710] syz.0.197: attempt to access beyond end of device
[  220.790623][ T6710] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  220.804741][ T6710] syz.0.197: attempt to access beyond end of device
[  220.804741][ T6710] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  220.820824][ T6710] syz.0.197: attempt to access beyond end of device
[  220.820824][ T6710] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  220.835602][ T6710] syz.0.197: attempt to access beyond end of device
[  220.835602][ T6710] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  220.850234][ T6710] syz.0.197: attempt to access beyond end of device
[  220.850234][ T6710] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  221.046981][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  221.270876][ T6702] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  221.377867][ T6702] UDF-fs: Scanning with blocksize 512 failed
[  221.959017][ T6706] loop3: detected capacity change from 0 to 128
[  222.377074][ T6702] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  222.441674][ T6702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.588948][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.492773][ T6768] loop2: detected capacity change from 0 to 128
[  230.752240][ T6771] loop3: detected capacity change from 0 to 32768
[  231.001990][ T6773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.100572][ T6774] bio_check_eod: 153 callbacks suppressed
[  231.100599][ T6774] syz.2.216: attempt to access beyond end of device
[  231.100599][ T6774] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128
[  231.120875][ T6774] syz.2.216: attempt to access beyond end of device
[  231.120875][ T6774] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  231.134820][ T6774] syz.2.216: attempt to access beyond end of device
[  231.134820][ T6774] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128
[  231.148960][ T6774] syz.2.216: attempt to access beyond end of device
[  231.148960][ T6774] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128
[  231.164337][ T6774] syz.2.216: attempt to access beyond end of device
[  231.164337][ T6774] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  231.748824][ T6777] loop0: detected capacity change from 0 to 2048
[  232.672396][ T3507] kworker/u8:6: attempt to access beyond end of device
[  232.672396][ T3507] loop2: rw=1, sector=225, nr_sectors = 8 limit=128
[  232.696939][ T3507] kworker/u8:6: attempt to access beyond end of device
[  232.696939][ T3507] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[  232.732310][ T6781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.850352][ T3507] kworker/u8:6: attempt to access beyond end of device
[  232.850352][ T3507] loop2: rw=1, sector=257, nr_sectors = 8 limit=128
[  232.851758][ T3507] kworker/u8:6: attempt to access beyond end of device
[  232.851758][ T3507] loop2: rw=1, sector=273, nr_sectors = 8 limit=128
[  232.852613][ T3507] kworker/u8:6: attempt to access beyond end of device
[  232.852613][ T3507] loop2: rw=1, sector=289, nr_sectors = 8 limit=128
[  233.057024][ T6782] loop4: detected capacity change from 0 to 512
[  233.141804][ T6782] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  233.475050][   T30] audit: type=1800 audit(1743914972.239:14): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.218" name="file2" dev="loop0" ino=16 res=0 errno=0
[  236.010902][ T6798] loop2: detected capacity change from 0 to 128
[  236.127542][ T6799] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.207065][ T6800] bio_check_eod: 102 callbacks suppressed
[  236.207093][ T6800] syz.2.224: attempt to access beyond end of device
[  236.207093][ T6800] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[  236.227044][ T6800] syz.2.224: attempt to access beyond end of device
[  236.227044][ T6800] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  236.241339][ T6800] syz.2.224: attempt to access beyond end of device
[  236.241339][ T6800] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  236.255920][ T6800] syz.2.224: attempt to access beyond end of device
[  236.255920][ T6800] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  236.270468][ T6800] syz.2.224: attempt to access beyond end of device
[  236.270468][ T6800] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  236.285739][ T6800] syz.2.224: attempt to access beyond end of device
[  236.285739][ T6800] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  236.301050][ T6800] syz.2.224: attempt to access beyond end of device
[  236.301050][ T6800] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  236.315244][ T6800] syz.2.224: attempt to access beyond end of device
[  236.315244][ T6800] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  236.329362][ T6800] syz.2.224: attempt to access beyond end of device
[  236.329362][ T6800] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  236.343518][ T6800] syz.2.224: attempt to access beyond end of device
[  236.343518][ T6800] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  238.687234][ T6817] loop1: detected capacity change from 0 to 8
[  241.004731][ T6826] loop3: detected capacity change from 0 to 512
[  241.074979][ T6826] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  241.472408][ T3541] bio_check_eod: 87 callbacks suppressed
[  241.472430][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.472430][ T3541] loop2: rw=1, sector=977, nr_sectors = 8 limit=128
[  241.522876][ T6826] EXT4-fs (loop3): 1 truncate cleaned up
[  241.530508][ T6826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.562453][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.562453][ T3541] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[  241.618429][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.618429][ T3541] loop2: rw=1, sector=369, nr_sectors = 8 limit=128
[  241.632466][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.632466][ T3541] loop2: rw=1, sector=497, nr_sectors = 8 limit=128
[  241.646383][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.646383][ T3541] loop2: rw=1, sector=625, nr_sectors = 8 limit=128
[  241.660155][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.660155][ T3541] loop2: rw=1, sector=753, nr_sectors = 8 limit=128
[  241.674065][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.674065][ T3541] loop2: rw=1, sector=881, nr_sectors = 8 limit=128
[  241.695907][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.695907][ T3541] loop2: rw=1, sector=1009, nr_sectors = 8 limit=128
[  241.727533][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.727533][ T3541] loop2: rw=1, sector=305, nr_sectors = 8 limit=128
[  241.761785][ T3541] kworker/u8:7: attempt to access beyond end of device
[  241.761785][ T3541] loop2: rw=1, sector=561, nr_sectors = 8 limit=128
[  241.979415][ T6835] loop4: detected capacity change from 0 to 128
[  242.035446][ T6837] loop0: detected capacity change from 0 to 128
[  243.081469][ T6840] loop2: detected capacity change from 0 to 256
[  243.433983][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  244.184786][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.491750][ T6859] loop4: detected capacity change from 0 to 8
[  245.603543][ T6860] input: syz0 as /devices/virtual/input/input7
[  245.867936][ T6859] SQUASHFS error: Failed to read block 0x2fc: -5
[  245.874821][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.882259][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.889218][ T6859] SQUASHFS error: Failed to read block 0xfc: -5
[  245.900171][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.907592][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.914995][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.922584][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.943870][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.951682][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.958603][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.966082][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.973091][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  245.980565][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  245.993269][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.007489][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.014576][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.022027][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.029046][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.037012][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.044276][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.051698][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.065309][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.073413][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.080489][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.087917][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.095584][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.110470][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.117582][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.125452][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.139046][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.146587][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.153687][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.161554][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.168689][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.176118][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.183330][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.190820][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.204098][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.211561][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.218490][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.225912][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.233351][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.240884][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.247805][ T6859] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  246.255996][ T6859] SQUASHFS error: read_indexes: reading block [2fa:0]
[  246.400233][   T30] audit: type=1800 audit(1743914984.615:15): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="file1" dev="loop4" ino=5 res=0 errno=0
[  248.301569][ T6871] loop1: detected capacity change from 0 to 128
[  248.506587][ T6872] loop3: detected capacity change from 0 to 128
[  249.287984][ T6875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.661754][ T6879] bio_check_eod: 135 callbacks suppressed
[  249.667701][ T6879] syz.1.241: attempt to access beyond end of device
[  249.667701][ T6879] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  249.695811][ T6879] syz.1.241: attempt to access beyond end of device
[  249.695811][ T6879] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  249.711419][ T6879] syz.1.241: attempt to access beyond end of device
[  249.711419][ T6879] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  249.726115][ T6879] syz.1.241: attempt to access beyond end of device
[  249.726115][ T6879] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  249.740387][ T6879] syz.1.241: attempt to access beyond end of device
[  249.740387][ T6879] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  249.754510][ T6879] syz.1.241: attempt to access beyond end of device
[  249.754510][ T6879] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  249.769025][ T6879] syz.1.241: attempt to access beyond end of device
[  249.769025][ T6879] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  249.799074][ T6879] syz.1.241: attempt to access beyond end of device
[  249.799074][ T6879] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  250.563965][ T6879] syz.1.241: attempt to access beyond end of device
[  250.563965][ T6879] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  250.578785][ T6879] syz.1.241: attempt to access beyond end of device
[  250.578785][ T6879] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  254.454327][ T6904] loop2: detected capacity change from 0 to 512
[  254.491868][ T6904] EXT4-fs: Ignoring removed i_version option
[  254.540119][ T6904] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.606812][ T6904] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.247: inode #13: comm syz.2.247: iget: illegal inode #
[  254.635976][ T6904] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.247: couldn't read orphan inode 13 (err -117)
[  254.672820][ T6911] loop3: detected capacity change from 0 to 512
[  254.693999][ T6904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.724290][ T6911] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  254.821033][ T6911] EXT4-fs (loop3): 1 truncate cleaned up
[  254.856612][ T6911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.027441][   T30] audit: type=1800 audit(1743914993.788:16): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.246" name="file1" dev="loop3" ino=15 res=0 errno=0
[  255.129988][ T6923] loop1: detected capacity change from 0 to 256
[  255.137461][ T6923] vfat: Unknown parameter 'ocharsmt'
[  256.157246][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  256.555636][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.740758][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.761999][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c
[  256.803099][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.846880][ T5889] usb 2-1: config 0 descriptor??
[  256.894180][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.027404][ T5889] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[  257.048220][ T6934] loop2: detected capacity change from 0 to 8
[  257.692463][ T6940] loop3: detected capacity change from 0 to 8
[  258.784608][ T6939] SQUASHFS error: Failed to read block 0x2fc: -5
[  258.791318][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.800175][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.807169][ T6939] SQUASHFS error: Failed to read block 0xfc: -5
[  258.813683][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.821038][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.827958][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.835385][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.842717][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.850352][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.857291][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.864599][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.871541][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.878970][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.898920][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.906370][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.913340][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.920735][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.927692][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.935001][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.942351][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.949950][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.957755][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.965165][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.972252][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.979655][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  258.986715][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  258.994063][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.002364][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.009770][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.016676][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.024137][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.031130][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.038528][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.045434][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.049604][   T30] audit: type=1800 audit(1743914997.448:17): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.253" name="file1" dev="loop3" ino=5 res=0 errno=0
[  259.052912][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.080366][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.087792][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.094778][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.104334][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.112348][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.119841][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.126869][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.134277][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.141278][ T6940] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.148638][ T6940] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.155539][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.164306][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.171286][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.178816][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.185707][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.193314][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  259.200424][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  259.210953][ T6939] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.304857][ T5889] usb 2-1: USB disconnect, device number 4
[  260.403424][ T6953] loop2: detected capacity change from 0 to 8
[  260.416685][ T6951] loop0: detected capacity change from 0 to 128
[  260.623752][ T6953] SQUASHFS error: Failed to read block 0x2fc: -5
[  260.630755][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.639221][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.646982][ T6953] SQUASHFS error: Failed to read block 0xfc: -5
[  260.654375][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.661818][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.669558][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.677247][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.752847][   T30] audit: type=1800 audit(1743914999.308:18): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.257" name="file1" dev="loop2" ino=5 res=0 errno=0
[  260.753035][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.779977][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.787197][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.794821][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.802248][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.809673][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.883322][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.890974][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.904634][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.912632][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.920448][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.928206][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.936021][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.944714][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.970343][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.978235][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  260.985960][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  260.993654][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  261.001229][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  261.009126][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  261.016593][ T6953] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  261.024456][ T6953] SQUASHFS error: read_indexes: reading block [2fa:0]
[  261.098108][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  261.105003][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  261.707604][ T6958] loop3: detected capacity change from 0 to 8
[  261.844953][ T6962] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  262.001291][ T6964] bio_check_eod: 214 callbacks suppressed
[  262.001439][ T6964] syz.0.259: attempt to access beyond end of device
[  262.001439][ T6964] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  262.021918][ T6964] syz.0.259: attempt to access beyond end of device
[  262.021918][ T6964] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  262.036490][ T6964] syz.0.259: attempt to access beyond end of device
[  262.036490][ T6964] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  262.133795][ T6964] syz.0.259: attempt to access beyond end of device
[  262.133795][ T6964] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  262.148716][ T6964] syz.0.259: attempt to access beyond end of device
[  262.148716][ T6964] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  262.163426][ T6964] syz.0.259: attempt to access beyond end of device
[  262.163426][ T6964] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  262.186498][ T6964] syz.0.259: attempt to access beyond end of device
[  262.186498][ T6964] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  263.080683][   T30] audit: type=1800 audit(1743915000.548:19): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.258" name="file1" dev="loop3" ino=5 res=0 errno=0
[  263.174895][ T6967] loop2: detected capacity change from 0 to 1024
[  263.507414][   T63] kworker/u8:4: attempt to access beyond end of device
[  263.507414][   T63] loop0: rw=1, sector=256, nr_sectors = 1 limit=128
[  263.534338][ T6974] loop4: detected capacity change from 0 to 512
[  263.561395][ T6974] ext4: Unknown parameter 'defcontext'
[  263.580279][   T63] Buffer I/O error on dev loop0, logical block 256, lost async page write
[  264.570596][   T63] kworker/u8:4: attempt to access beyond end of device
[  264.570596][   T63] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[  265.583184][   T63] kworker/u8:4: attempt to access beyond end of device
[  265.583184][   T63] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[  265.603432][   T36] hfsplus: b-tree write err: -5, ino 4
[  267.691081][ T6993] input: syz0 as /devices/virtual/input/input8
[  269.257564][ T6997] loop0: detected capacity change from 0 to 32768
[  271.628773][ T7009] input: syz0 as /devices/virtual/input/input9
[  272.110315][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  272.521983][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  272.595724][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.996648][ T7014] loop4: detected capacity change from 0 to 32768
[  273.068393][ T5886] usb 1-1: config 0 descriptor??
[  273.427820][ T5886] usb 1-1: can't set config #0, error -71
[  273.700404][ T5886] usb 1-1: USB disconnect, device number 3
[  273.881803][ T7019] loop2: detected capacity change from 0 to 2048
[  273.937363][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  273.953396][ T7022] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.030206][ T7024] loop1: detected capacity change from 0 to 8
[  274.366840][ T7024] SQUASHFS error: Failed to read block 0x2fc: -5
[  274.373375][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.380901][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.388105][ T7024] SQUASHFS error: Failed to read block 0xfc: -5
[  274.395053][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.402581][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.409896][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.417384][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.495019][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.503334][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.510659][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.518107][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.525388][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.532842][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.560561][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.569241][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.580720][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.588169][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.595504][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.602960][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.610454][ T7024] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  274.617913][ T7024] SQUASHFS error: read_indexes: reading block [2fa:0]
[  274.657740][   T30] audit: type=1800 audit(1743915013.048:20): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.279" name="file1" dev="loop1" ino=5 res=0 errno=0
[  274.736985][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.950469][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.967207][   T30] audit: type=1800 audit(1743915013.728:21): pid=7019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file2" dev="loop2" ino=16 res=0 errno=0
[  275.001388][    T9] usb 5-1: config 0 descriptor??
[  275.069070][    T9] cp210x 5-1:0.0: cp210x converter detected
[  275.422919][    T9] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71
[  275.641045][    T9] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  275.751577][ T7032] input: syz0 as /devices/virtual/input/input10
[  276.461094][    T9] usb 5-1: cp210x converter now attached to ttyUSB0
[  276.547598][    T9] usb 5-1: USB disconnect, device number 4
[  276.736987][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  276.757915][ T7033] loop0: detected capacity change from 0 to 2048
[  276.765948][    T9] cp210x 5-1:0.0: device disconnected
[  276.832947][ T7036] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.932775][ T7037] loop1: detected capacity change from 0 to 256
[  277.014776][   T30] audit: type=1800 audit(1743915015.788:22): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="file2" dev="loop0" ino=16 res=0 errno=0
[  278.055714][ T7048] loop2: detected capacity change from 0 to 512
[  278.124722][ T7045] loop4: detected capacity change from 0 to 512
[  278.125551][ T7045] ext4: Unknown parameter 'defcontext'
[  278.135685][ T7048] ext4: Unknown parameter 'defcontext'
[  278.290561][ T7050] loop2: detected capacity change from 0 to 256
[  278.291262][ T7050] vfat: Unknown parameter '�tf8'
[  282.488043][ T7058] loop0: detected capacity change from 0 to 32768
[  282.534677][ T7060] input: syz0 as /devices/virtual/input/input11
[  284.677304][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  284.865362][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  284.940191][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.013469][ T7070] loop4: detected capacity change from 0 to 2048
[  285.025778][    T9] usb 1-1: config 0 descriptor??
[  285.033972][ T7075] loop2: detected capacity change from 0 to 16
[  285.790624][    T9] cp210x 1-1:0.0: cp210x converter detected
[  285.797252][ T7075] erofs (device loop2): mounted with root inode @ nid 36.
[  285.821689][    T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  285.942751][ T7070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.967845][    T9] cp210x 1-1:0.0: querying part number failed
[  285.978666][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[  286.007674][ T7070] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.147505][    T9] usb 1-1: USB disconnect, device number 4
[  286.157584][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  286.166192][    T9] cp210x 1-1:0.0: device disconnected
[  286.220498][ T7075] erofs (device loop2): read error -117 @ 123 of nid 36
[  286.707297][   T30] audit: type=1326 audit(1743915025.478:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  286.758434][   T30] audit: type=1326 audit(1743915025.478:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  286.995951][   T30] audit: type=1326 audit(1743915025.478:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  287.077224][   T30] audit: type=1326 audit(1743915025.478:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  287.139295][ T7089] erofs (device loop2): read error -117 @ 0 of nid 36
[  287.162320][ T7089] erofs (device loop2): failed to readdir of logical block 0 of nid 36
[  287.181283][   T30] audit: type=1326 audit(1743915025.478:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  287.288721][ T7092] loop1: detected capacity change from 0 to 8
[  287.764727][ T7092] SQUASHFS error: Failed to read block 0x2fc: -5
[  287.771263][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  287.780216][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  287.787222][ T7092] SQUASHFS error: Failed to read block 0xfc: -5
[  287.794366][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  287.801825][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  287.809626][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  287.817143][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.011462][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.019439][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.026945][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.034361][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.042348][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.049786][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.092753][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.100317][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.107945][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.115311][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.122574][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.129985][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.139332][ T7092] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.146707][ T7092] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.190575][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.197969][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.204950][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.212521][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.219884][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.227268][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.234301][ T7091] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  288.241846][ T7091] SQUASHFS error: read_indexes: reading block [2fa:0]
[  288.252005][   T30] audit: type=1326 audit(1743915025.478:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  288.274586][   T30] audit: type=1326 audit(1743915025.478:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  288.298796][   T30] audit: type=1326 audit(1743915025.478:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  288.475317][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.506696][   T30] audit: type=1326 audit(1743915025.478:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  288.530084][   T30] audit: type=1326 audit(1743915025.478:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x7ffc0000
[  290.483780][ T7103] loop1: detected capacity change from 0 to 512
[  291.457835][ T7103] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  292.780099][ T7111] input: syz0 as /devices/virtual/input/input12
[  292.875925][ T7114] loop2: detected capacity change from 0 to 128
[  293.399445][ T7118] bio_check_eod: 103 callbacks suppressed
[  293.399470][ T7118] syz.2.299: attempt to access beyond end of device
[  293.399470][ T7118] loop2: rw=2049, sector=145, nr_sectors = 32 limit=128
[  293.421077][ T7118] syz.2.299: attempt to access beyond end of device
[  293.421077][ T7118] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  293.434738][ T7118] syz.2.299: attempt to access beyond end of device
[  293.434738][ T7118] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  293.448315][ T7118] syz.2.299: attempt to access beyond end of device
[  293.448315][ T7118] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  293.501536][ T7118] syz.2.299: attempt to access beyond end of device
[  293.501536][ T7118] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  293.522190][ T7118] syz.2.299: attempt to access beyond end of device
[  293.522190][ T7118] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  293.595823][ T7121] loop0: detected capacity change from 0 to 512
[  293.623616][ T7118] syz.2.299: attempt to access beyond end of device
[  293.623616][ T7118] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  293.660279][ T7121] EXT4-fs: Ignoring removed i_version option
[  293.660318][ T7121] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.672519][ T7121] EXT4-fs error (device loop0): ext4_orphan_get:1390: comm syz.0.303: inode #13: comm syz.0.303: iget: illegal inode #
[  293.693591][ T7121] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.303: couldn't read orphan inode 13 (err -117)
[  293.866839][ T7118] syz.2.299: attempt to access beyond end of device
[  293.866839][ T7118] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  293.866984][ T7118] syz.2.299: attempt to access beyond end of device
[  293.866984][ T7118] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  293.880735][ T7118] syz.2.299: attempt to access beyond end of device
[  293.880735][ T7118] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128
[  293.911794][ T7121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.103573][ T7137] loop3: detected capacity change from 0 to 512
[  295.589665][ T7137] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  296.052790][ T7141] loop1: detected capacity change from 0 to 512
[  296.080559][ T7141] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  296.102868][ T7139] loop2: detected capacity change from 0 to 2048
[  296.536744][ T7139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.388197][ T7139] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.065890][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.182356][ T7126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  298.222685][ T7126] EXT4-fs (loop2): Remounting filesystem read-only
[  298.299932][ T7160] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  299.550872][ T7168] loop0: detected capacity change from 0 to 512
[  299.618034][ T7168] ext4: Unknown parameter 'defcontext'
[  303.603153][ T7178] loop1: detected capacity change from 0 to 512
[  303.780517][ T7178] ext4: Unknown parameter 'defcontext'
[  303.903265][ T7180] fuse: Bad value for 'fd'
[  305.451755][ T7190] input: syz0 as /devices/virtual/input/input13
[  308.879368][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.886134][ T7192] overlayfs: missing 'lowerdir'
[  309.386640][ T7196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  311.066006][ T7199] loop2: detected capacity change from 0 to 512
[  311.076790][ T7199] EXT4-fs: Ignoring removed i_version option
[  311.083284][ T7199] EXT4-fs: Ignoring removed mblk_io_submit option
[  311.279814][ T7199] EXT4-fs error (device loop2): ext4_orphan_get:1390: comm syz.2.322: inode #13: comm syz.2.322: iget: illegal inode #
[  311.319554][ T7199] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.322: couldn't read orphan inode 13 (err -117)
[  311.402164][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.650118][ T7225] loop0: detected capacity change from 0 to 128
[  314.978925][ T7227] netlink: 'syz.3.328': attribute type 1 has an invalid length.
[  314.996664][ T7227] loop3: detected capacity change from 0 to 16
[  316.692657][ T7229] bio_check_eod: 99 callbacks suppressed
[  316.698625][ T7229] syz.0.331: attempt to access beyond end of device
[  316.698625][ T7229] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128
[  316.713024][ T7229] syz.0.331: attempt to access beyond end of device
[  316.713024][ T7229] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  316.727355][ T7229] syz.0.331: attempt to access beyond end of device
[  316.727355][ T7229] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  316.800219][ T7229] syz.0.331: attempt to access beyond end of device
[  316.800219][ T7229] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  316.815093][ T7229] syz.0.331: attempt to access beyond end of device
[  316.815093][ T7229] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  316.829357][ T7229] syz.0.331: attempt to access beyond end of device
[  316.829357][ T7229] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  316.843480][ T7229] syz.0.331: attempt to access beyond end of device
[  316.843480][ T7229] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  316.863204][ T7229] syz.0.331: attempt to access beyond end of device
[  316.863204][ T7229] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  316.877787][ T7229] syz.0.331: attempt to access beyond end of device
[  316.877787][ T7229] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  316.892074][ T7229] syz.0.331: attempt to access beyond end of device
[  316.892074][ T7229] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  317.337937][ T7227] erofs (device loop3): mounted with root inode @ nid 36.
[  317.528978][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.833844][ T7241] loop0: detected capacity change from 0 to 128
[  318.877032][ T7243] loop4: detected capacity change from 0 to 512
[  318.888287][ T7243] ext4: Unknown parameter 'defcontext'
[  319.045665][ T7248] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  320.144322][ T7255] loop2: detected capacity change from 0 to 512
[  320.567750][ T7255] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  321.633029][ T7260] loop1: detected capacity change from 0 to 512
[  322.121429][ T7260] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal
[  322.499868][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  322.506433][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  324.868713][ T7275] loop2: detected capacity change from 0 to 2048
[  324.882292][ T7277] loop4: detected capacity change from 0 to 128
[  324.890438][ T7277] /dev/loop4: Can't open blockdev
[  324.972462][ T7275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.286258][ T7275] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.398450][ T7281] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  325.906135][ T7284] loop1: detected capacity change from 0 to 64
[  327.147969][ T7273] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  327.282865][ T7281] EXT4-fs (loop2): Remounting filesystem read-only
[  327.522294][ T7287] loop0: detected capacity change from 0 to 32768
[  327.529893][ T7287] btrfs: Deprecated parameter 'usebackuproot'
[  327.536569][ T7287] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  327.565461][ T7287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.345 (7287)
[  327.596054][ T7287] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  327.610893][ T7287] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  328.253197][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.754759][ T7309] loop2: detected capacity change from 0 to 128
[  329.616496][ T7287] BTRFS info (device loop0): rebuilding free space tree
[  329.667226][ T7287] BTRFS info (device loop0): disabling free space tree
[  329.674386][ T7287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  329.684547][ T7287] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  329.725395][ T7287] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  330.355272][ T7319] bio_check_eod: 214 callbacks suppressed
[  330.355303][ T7319] syz.2.346: attempt to access beyond end of device
[  330.355303][ T7319] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[  330.377479][ T7319] syz.2.346: attempt to access beyond end of device
[  330.377479][ T7319] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  330.391864][ T7319] syz.2.346: attempt to access beyond end of device
[  330.391864][ T7319] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  330.526237][ T7319] syz.2.346: attempt to access beyond end of device
[  330.526237][ T7319] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  330.541109][ T7319] syz.2.346: attempt to access beyond end of device
[  330.541109][ T7319] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  330.555951][ T7319] syz.2.346: attempt to access beyond end of device
[  330.555951][ T7319] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  330.570569][ T7319] syz.2.346: attempt to access beyond end of device
[  330.570569][ T7319] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  330.586060][ T7319] syz.2.346: attempt to access beyond end of device
[  330.586060][ T7319] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  330.601241][ T7319] syz.2.346: attempt to access beyond end of device
[  330.601241][ T7319] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  330.615485][ T7319] syz.2.346: attempt to access beyond end of device
[  330.615485][ T7319] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128
[  331.364049][ T7326] loop4: detected capacity change from 0 to 512
[  337.575032][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.731950][ T7326] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  338.105517][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.114836][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  338.352109][ T5888] usb 4-1: Using ep0 maxpacket: 32
[  338.496979][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0
[  338.641608][ T5888] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  338.727884][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.801738][ T5888] usb 4-1: Product: syz
[  338.829728][ T5888] usb 4-1: Manufacturer: syz
[  338.859491][ T5888] usb 4-1: SerialNumber: syz
[  338.939349][ T5888] usb 4-1: config 0 descriptor??
[  338.946832][ T7360] loop4: detected capacity change from 0 to 2048
[  338.971426][ T5888] gs_usb 4-1:0.0: Required endpoints not found
[  339.045216][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.125361][ T7360] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.237402][ T7378] Bluetooth: MGMT ver 1.23
[  342.458992][ T7375] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  342.620275][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.190166][ T7383] loop2: detected capacity change from 0 to 32768
[  343.301371][ T7380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  343.757248][ T5886] usb 4-1: USB disconnect, device number 5
[  347.109772][ T7396] Process accounting resumed
[  347.728322][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  348.028922][    T9] usb 2-1: Using ep0 maxpacket: 32
[  348.046173][ T7406] loop4: detected capacity change from 0 to 512
[  348.053747][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  348.088454][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  348.108488][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.116612][    T9] usb 2-1: Product: syz
[  348.221156][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.238468][ T7411] loop2: detected capacity change from 0 to 512
[  348.245638][ T7411] ext4: Unknown parameter 'defcontext'
[  348.252097][    T9] usb 2-1: Manufacturer: syz
[  348.277345][    T9] usb 2-1: SerialNumber: syz
[  348.302990][ T7406] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  348.387967][    T9] usb 2-1: config 0 descriptor??
[  348.580709][    T9] gs_usb 2-1:0.0: Required endpoints not found
[  349.473882][ T7416] loop0: detected capacity change from 0 to 32768
[  350.625266][ T7422] loop3: detected capacity change from 0 to 4096
[  350.700827][ T7422] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  351.317153][ T5889] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  351.757937][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  351.757959][   T30] audit: type=1800 audit(1743915090.308:45): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="file2" dev="loop4" ino=16 res=0 errno=0
[  351.802990][   T30] audit: type=1800 audit(1743915090.338:46): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.372" name="file2" dev="loop4" ino=16 res=0 errno=0
[  351.881099][ T5889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  351.933366][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.954916][ T5889] usb 1-1: config 0 descriptor??
[  351.960495][ T5889] usb 1-1: can't set config #0, error -71
[  352.080949][ T5889] usb 1-1: USB disconnect, device number 5
[  352.094478][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.101701][ T7428] syzkaller0: entered allmulticast mode
[  353.598652][ T7439] loop0: detected capacity change from 0 to 64
[  354.612065][   T24] usb 2-1: USB disconnect, device number 5
[  355.928788][ T7457] libceph: resolve '0.0' (ret=-3): failed
[  356.803983][ T7470] xt_limit: Overflow, try lower: 0/0
[  357.543890][ T7469] loop2: detected capacity change from 0 to 8
[  357.849735][   T30] audit: type=1800 audit(1743915096.618:47): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.383" name="file1" dev="loop2" ino=5 res=0 errno=0
[  358.241273][ T7469] SQUASHFS error: Failed to read block 0x2fc: -5
[  358.409906][ T7469] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  358.664160][ T7480] loop0: detected capacity change from 0 to 32768
[  358.847935][ T7469] SQUASHFS error: read_indexes: reading block [2fa:0]
[  358.854930][ T7469] SQUASHFS error: Failed to read block 0xfc: -5
[  358.864353][ T7478] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  358.872827][ T7478] SQUASHFS error: read_indexes: reading block [2fa:0]
[  359.307278][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  359.579566][ T7469] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  359.626373][ T7469] SQUASHFS error: read_indexes: reading block [2fa:0]
[  359.763673][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  359.785815][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.825606][ T5886] usb 1-1: config 0 descriptor??
[  359.852851][ T5886] cp210x 1-1:0.0: cp210x converter detected
[  361.474748][ T5886] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71
[  361.485441][ T5886] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  361.513862][ T5886] usb 1-1: cp210x converter now attached to ttyUSB0
[  361.585761][ T7494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  361.664140][ T7494] loop1: detected capacity change from 0 to 4096
[  361.671621][ T7494] ntfs3: Unknown parameter 'H'
[  361.699684][ T5886] usb 1-1: USB disconnect, device number 6
[  361.713071][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  361.721834][ T5886] cp210x 1-1:0.0: device disconnected
[  362.729248][ T7500] loop0: detected capacity change from 0 to 512
[  362.806383][ T7500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.833792][ T7500] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  362.957233][   T30] audit: type=1800 audit(1743915101.698:48): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file2" dev="loop0" ino=16 res=0 errno=0
[  363.015049][   T30] audit: type=1800 audit(1743915101.698:49): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.391" name="file2" dev="loop0" ino=16 res=0 errno=0
[  363.821122][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  366.270041][ T7527] Process accounting resumed
[  366.627746][ T7529] loop0: detected capacity change from 0 to 32768
[  367.795736][ T7535] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[7535]
[  367.838337][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  367.839506][ T7535] syz.2.398 (7535): /proc/7535/oom_adj is deprecated, please use /proc/7535/oom_score_adj instead.
[  368.439376][ T5888] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  368.583188][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.628469][ T7540] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.631126][ T5888] usb 1-1: config 0 descriptor??
[  368.670374][ T5888] cp210x 1-1:0.0: cp210x converter detected
[  368.718032][ T7540] loop3: detected capacity change from 0 to 4096
[  368.725465][ T7540] ntfs3: Unknown parameter 'H'
[  369.461151][ T7544] libceph: resolve '0.0' (ret=-3): failed
[  370.156796][ T5888] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71
[  370.188480][ T5888] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  370.905156][ T5888] usb 1-1: cp210x converter now attached to ttyUSB0
[  371.312300][ T5888] usb 1-1: USB disconnect, device number 7
[  371.334615][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  372.228082][ T5888] cp210x 1-1:0.0: device disconnected
[  373.248176][ T7564] loop3: detected capacity change from 0 to 32768
[  373.255624][ T7564] btrfs: Deprecated parameter 'usebackuproot'
[  373.261799][ T7564] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  373.522243][ T7564] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.407 (7564)
[  374.028879][ T7564] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  374.039175][ T7564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  374.118345][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  374.130091][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  374.140209][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  374.152356][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  374.161972][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  374.358003][ T7564] BTRFS info (device loop3): rebuilding free space tree
[  374.394847][ T7564] BTRFS info (device loop3): disabling free space tree
[  374.401998][ T7564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  374.413561][ T7564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  374.453289][ T7591] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[  374.461590][ T5838] syz-executor (5838) used greatest stack depth: 19192 bytes left
[  374.670664][ T7564] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  375.924425][ T7568] chnl_net:caif_netlink_parms(): no params data found
[  376.268277][ T5844] Bluetooth: hci5: command tx timeout
[  378.407468][ T7621] xt_limit: Overflow, try lower: 0/0
[  378.418956][ T5844] Bluetooth: hci5: command tx timeout
[  379.694089][ T7625] loop1: detected capacity change from 0 to 32768
[  380.497317][ T5844] Bluetooth: hci5: command tx timeout
[  380.727255][ T5886] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  381.145350][ T7635] loop3: detected capacity change from 0 to 64
[  381.169648][ T5886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  381.187548][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.211949][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.227365][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.241503][ T5886] usb 2-1: config 0 descriptor??
[  381.257293][ T7568] bridge_slave_0: entered allmulticast mode
[  381.270317][ T5886] cp210x 2-1:0.0: cp210x converter detected
[  381.279923][ T7568] bridge_slave_0: entered promiscuous mode
[  381.300392][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.317572][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.335398][ T7568] bridge_slave_1: entered allmulticast mode
[  381.358023][ T7568] bridge_slave_1: entered promiscuous mode
[  382.587234][ T5844] Bluetooth: hci5: command tx timeout
[  383.967233][ T5886] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71
[  383.967658][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  383.974830][ T5886] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  384.001096][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  384.040209][ T5886] usb 2-1: cp210x converter now attached to ttyUSB0
[  384.105212][ T5886] usb 2-1: USB disconnect, device number 6
[  384.178462][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  384.187002][ T5886] cp210x 2-1:0.0: device disconnected
[  384.221776][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  384.314254][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.445785][ T7665] loop3: detected capacity change from 0 to 512
[  385.474204][ T7665] ext4: Unknown parameter 'defcontext'
[  385.480169][ T7568] team0: Port device team_slave_0 added
[  385.510976][ T7568] team0: Port device team_slave_1 added
[  385.893673][ T7667] loop0: detected capacity change from 0 to 2048
[  386.152976][ T7671] loop1: detected capacity change from 0 to 32768
[  386.185726][ T7667] /dev/loop0: Can't open blockdev
[  388.076871][ T7678] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  389.757269][  T976] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  390.939840][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.946881][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.024891][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.062091][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.321504][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.351109][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.490045][ T7568] hsr_slave_0: entered promiscuous mode
[  393.513617][ T7698] loop2: detected capacity change from 0 to 64
[  393.523656][ T7568] hsr_slave_1: entered promiscuous mode
[  393.560882][ T7568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.588676][ T7568] Cannot create hsr debugfs directory
[  396.648253][ T7711] loop3: detected capacity change from 0 to 4096
[  397.435409][ T7711] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  399.383334][ T7568] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  399.663048][ T7731] loop0: detected capacity change from 0 to 32768
[  399.913639][ T7568] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  400.970147][ T7568] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  400.979410][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  401.043177][ T7568] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  401.202713][ T5889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  401.284564][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.369317][ T5889] usb 1-1: config 0 descriptor??
[  401.380235][ T7743] loop1: detected capacity change from 0 to 32768
[  401.405734][ T5889] cp210x 1-1:0.0: cp210x converter detected
[  401.465835][ T7568] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.688242][ T7747] loop3: detected capacity change from 0 to 8
[  402.736584][ T7568] 8021q: adding VLAN 0 to HW filter on device team0
[  402.812993][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.820443][ T7561] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.905969][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.913222][ T5964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.967340][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  403.076667][ T7754] loop2: detected capacity change from 0 to 512
[  403.130573][ T7754] ext4: Unknown parameter 'defcontext'
[  403.276260][ T7755] loop3: detected capacity change from 0 to 32768
[  403.569676][ T5889] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71
[  404.219951][    T9] usb 2-1: unable to read config index 0 descriptor/all
[  404.299383][ T5889] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  404.372927][ T5889] usb 1-1: cp210x converter now attached to ttyUSB0
[  404.382260][ T5889] usb 1-1: USB disconnect, device number 8
[  404.390847][    T9] usb 2-1: can't read configurations, error -71
[  404.795734][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  404.867932][ T5889] cp210x 1-1:0.0: device disconnected
[  405.147792][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  405.253801][ T7568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.309677][ T5890] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  405.335859][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.373836][ T5890] usb 4-1: config 0 descriptor??
[  405.526170][ T5890] cp210x 4-1:0.0: cp210x converter detected
[  407.533623][ T5890] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71
[  407.633154][ T5890] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  407.645317][ T5890] usb 4-1: cp210x converter now attached to ttyUSB0
[  407.657838][ T5890] usb 4-1: USB disconnect, device number 6
[  407.670372][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  407.679794][ T5890] cp210x 4-1:0.0: device disconnected
[  409.161456][ T7568] veth0_vlan: entered promiscuous mode
[  409.180766][ T7568] veth1_vlan: entered promiscuous mode
[  409.360851][ T7568] veth0_macvtap: entered promiscuous mode
[  409.495265][ T7568] veth1_macvtap: entered promiscuous mode
[  409.539178][ T7792] loop0: detected capacity change from 0 to 512
[  409.546367][ T7792] ext4: Unknown parameter 'defcontext'
[  409.611264][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.635707][ T7790] loop2: detected capacity change from 0 to 4096
[  409.639781][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.670570][ T7790] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  409.680209][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.711441][ T7795] loop0: detected capacity change from 0 to 256
[  409.722046][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.741360][ T7795] vfat: Unknown parameter '�tf8'
[  409.761298][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.807175][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.743556][ T7807] loop3: detected capacity change from 0 to 4096
[  410.786411][ T7807] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  411.006520][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.024617][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.035270][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.053879][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.074524][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  413.891774][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.925127][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.954149][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.990185][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.000239][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.010766][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.021125][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.042196][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.052180][ T7568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.077110][ T7568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.103736][ T7568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.170127][ T7568] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.201845][ T7568] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.230253][ T7568] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.266046][ T7568] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.667292][ T7831] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[7831]
[  415.733421][ T5977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.799612][ T5977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.395276][ T7833] loop2: detected capacity change from 0 to 32768
[  416.403596][ T7833] btrfs: Deprecated parameter 'usebackuproot'
[  416.409800][ T7833] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  416.436756][ T7833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.468 (7833)
[  416.457413][ T7833] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  416.468076][ T7833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  416.469165][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  416.572452][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.810974][ T7843] loop1: detected capacity change from 0 to 32768
[  416.851321][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'.
[  416.898109][ T7833] BTRFS info (device loop2): rebuilding free space tree
[  416.957414][ T7833] BTRFS info (device loop2): disabling free space tree
[  416.964402][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  416.974193][ T7833] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  417.000223][ T7833] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  418.262467][   T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  418.770875][   T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  418.885945][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.408403][   T24] usb 2-1: config 0 descriptor??
[  419.469018][   T24] cp210x 2-1:0.0: cp210x converter detected
[  419.594784][   T24] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  419.759835][   T24] cp210x 2-1:0.0: querying part number failed
[  420.912904][   T24] usb 2-1: cp210x converter now attached to ttyUSB0
[  420.952795][   T24] usb 2-1: USB disconnect, device number 10
[  420.994260][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  421.082432][   T24] cp210x 2-1:0.0: device disconnected
[  421.106493][ T7881] loop0: detected capacity change from 0 to 8
[  423.503148][ T7903] loop3: detected capacity change from 0 to 2048
[  423.578105][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.688539][ T7903] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.327982][ T7915] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  428.367185][ T7907] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  428.550404][ T7907] EXT4-fs (loop3): Remounting filesystem read-only
[  428.590086][ T5852] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.966652][ T7917] loop2: detected capacity change from 0 to 32768
[  429.322469][ T7923] input: syz0 as /devices/virtual/input/input14
[  431.410450][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  432.666166][ T7938] loop5: detected capacity change from 0 to 1024
[  432.702053][ T7938] hfsplus: Unknown parameter 'f>Cce'
[  433.401901][ T7952] loop1: detected capacity change from 0 to 8
[  434.985429][ T7961] loop5: detected capacity change from 0 to 128
[  435.426292][ T7962] loop2: detected capacity change from 0 to 512
[  435.842415][ T7961] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  435.919552][ T7963] bio_check_eod: 102 callbacks suppressed
[  435.919576][ T7963] syz.5.497: attempt to access beyond end of device
[  435.919576][ T7963] loop5: rw=2049, sector=145, nr_sectors = 88 limit=128
[  435.939536][ T7963] syz.5.497: attempt to access beyond end of device
[  435.939536][ T7963] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128
[  435.965269][ T7962] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  436.010643][ T7963] syz.5.497: attempt to access beyond end of device
[  436.010643][ T7963] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128
[  436.024837][ T7963] syz.5.497: attempt to access beyond end of device
[  436.024837][ T7963] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128
[  436.038499][ T7963] syz.5.497: attempt to access beyond end of device
[  436.038499][ T7963] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128
[  436.079619][ T7963] syz.5.497: attempt to access beyond end of device
[  436.079619][ T7963] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128
[  436.259770][ T7963] syz.5.497: attempt to access beyond end of device
[  436.259770][ T7963] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128
[  436.274226][ T7963] syz.5.497: attempt to access beyond end of device
[  436.274226][ T7963] loop5: rw=2049, sector=337, nr_sectors = 8 limit=128
[  436.483073][ T7963] syz.5.497: attempt to access beyond end of device
[  436.483073][ T7963] loop5: rw=2049, sector=353, nr_sectors = 8 limit=128
[  436.499268][ T7963] syz.5.497: attempt to access beyond end of device
[  436.499268][ T7963] loop5: rw=2049, sector=369, nr_sectors = 8 limit=128
[  436.805598][ T7975] input: syz0 as /devices/virtual/input/input15
[  437.340877][ T7979] loop3: detected capacity change from 0 to 8
[  437.930132][ T7988] input: syz0 as /devices/virtual/input/input16
[  439.514874][ T7993] libceph: resolve '0.0' (ret=-3): failed
[  440.034440][ T7998] netlink: 'syz.2.506': attribute type 4 has an invalid length.
[  443.646575][ T8022] loop2: detected capacity change from 0 to 2048
[  443.737953][ T8022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  443.817256][ T8022] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.996520][ T8032] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  444.954141][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.379580][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  445.424082][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  445.634626][ T8032] loop0: detected capacity change from 0 to 4096
[  445.643718][ T8032] ntfs3: Unknown parameter 'H'
[  445.696515][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'.
[  446.556088][ T8057] input: syz0 as /devices/virtual/input/input17
[  448.461758][ T8064] libceph: resolve '0.0' (ret=-3): failed
[  451.329588][ T8080] input: syz0 as /devices/virtual/input/input18
[  454.689442][ T8094] xt_limit: Overflow, try lower: 0/0
[  456.264123][ T8109] ptrace attach of "./syz-executor exec"[7568] was attempted by "./syz-executor exec"[8109]
[  457.932339][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'.
[  458.094283][ T8120] loop3: detected capacity change from 0 to 512
[  458.145774][ T8120] ext4: Unknown parameter 'defcontext'
[  458.340551][ T8125] loop3: detected capacity change from 0 to 256
[  458.448185][ T8125] vfat: Unknown parameter '�tf8'
[  463.296092][ T8281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  464.357123][ T3582] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  464.685135][ T8302] vlan3: entered promiscuous mode
[  464.690381][ T8302] vlan2: entered promiscuous mode
[  464.695441][ T8302] gretap0: entered promiscuous mode
[  464.810798][ T8304] 9pnet_fd: Insufficient options for proto=fd
[  464.863791][ T3582] usb 4-1: Using ep0 maxpacket: 8
[  465.070445][ T3582] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  465.217714][ T5152] Bluetooth: hci4: command 0x0406 tx timeout
[  465.362426][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  465.401660][ T3582] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  465.468767][ T3582] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  465.542524][ T3582] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  465.567118][ T3582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.898736][ T3582] usb 4-1: GET_CAPABILITIES returned 0
[  465.931873][ T3582] usbtmc 4-1:16.0: can't read capabilities
[  466.250573][ T3582] usb 4-1: USB disconnect, device number 7
[  466.270744][ T8311] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  466.324242][ T8311] overlayfs: failed to set xattr on upper
[  466.344776][ T8311] overlayfs: ...falling back to redirect_dir=nofollow.
[  466.378830][ T8311] overlayfs: ...falling back to index=off.
[  466.395090][ T8311] overlayfs: ...falling back to uuid=null.
[  470.061544][ T8354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.636'.
[  472.074892][ T8373] ubi31: attaching mtd0
[  472.111963][ T8373] ubi31: scanning is finished
[  472.133017][ T8373] ubi31: empty MTD device detected
[  472.272835][ T8382] atomic_op ffff8880327a5198 conn xmit_atomic 0000000000000000
[  472.396416][ T8384] netlink: 173 bytes leftover after parsing attributes in process `syz.0.644'.
[  474.735887][ T8373] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  476.277660][ T8412] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'.
[  476.302275][ T8412] netlink: 80 bytes leftover after parsing attributes in process `syz.1.652'.
[  477.338215][ T8422] netlink: 'syz.1.656': attribute type 1 has an invalid length.
[  477.345941][ T8422] netlink: 216 bytes leftover after parsing attributes in process `syz.1.656'.
[  478.794378][  T976] IPVS: starting estimator thread 0...
[  478.892573][ T8443] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  478.933080][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'.
[  478.947401][ T8442] IPVS: using max 28 ests per chain, 67200 per kthread
[  479.387140][  T976] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  479.603248][  T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  479.611908][  T976] usb 4-1: config 0 has no interface number 0
[  479.805832][  T976] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  479.846283][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.910016][  T976] usb 4-1: config 0 descriptor??
[  480.985279][  T976] usb 4-1: selecting invalid altsetting 1
[  481.058299][  T976] dvb_ttusb_budget: ttusb_init_controller: error
[  481.169328][ T8464] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  481.242865][ T8464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  481.785120][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.667'.
[  481.830162][  T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  481.960174][  T976] DVB: Unable to find symbol cx22700_attach()
[  482.097964][ T8472] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  482.191180][   T54] Bluetooth: hci0: Frame reassembly failed (-84)
[  483.211552][  T976] DVB: Unable to find symbol tda10046_attach()
[  483.287800][  T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  483.692368][  T976] usb 4-1: USB disconnect, device number 8
[  484.414943][ T5152] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  498.500748][ T5152] Bluetooth: hci5: command 0x0406 tx timeout
[  499.368846][ T8488] syz.0.673 (8488): drop_caches: 1
[  500.537124][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  500.669569][ T8571] libceph: resolve '0' (ret=-3): failed
[  500.837531][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  501.373658][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  501.431721][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  501.937039][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  501.958140][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  502.006018][ T8580] ALSA: mixer_oss: invalid OSS volume 'P�}VIN'
[  502.012486][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.037350][ T8580] ALSA: mixer_oss: invalid OSS volume 'X#*N�߈��l͏Я�����u\Q�a�{�k'
[  502.050134][    T9] usb 3-1: config 0 descriptor??
[  503.361191][    T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  503.719077][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  503.780825][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  503.790974][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  503.807750][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  503.816162][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  503.915528][    T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  504.217296][ T8599] netlink: 92 bytes leftover after parsing attributes in process `syz.1.707'.
[  504.872624][    T9] usb 3-1: USB disconnect, device number 6
[  505.858470][ T5152] Bluetooth: hci0: command tx timeout
[  506.248060][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  506.457656][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.715'.
[  506.599828][    T9] usb 3-1: Using ep0 maxpacket: 8
[  506.628669][ T8630] program syz.1.714 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  506.677906][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  506.686215][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  506.753024][    T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  506.893149][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.024004][    T9] usb 3-1: Product: syz
[  507.077300][    T9] usb 3-1: Manufacturer: syz
[  507.145226][    T9] usb 3-1: SerialNumber: syz
[  507.223871][    T9] usb 3-1: config 0 descriptor??
[  507.269162][    T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  507.291675][    T9] usb 3-1: setting power ON
[  507.306556][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  507.456651][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  507.497796][    T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  507.525457][ T8609] dvb-usb: bulk message failed: -22 (3/0)
[  507.533227][    T9] usb 3-1: media controller created
[  507.599632][ T8609] usb 3-1: gpio_write failed.
[  507.605457][ T8609] dvb-usb: bulk message failed: -22 (6/0)
[  507.645607][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  507.651287][ T8586] chnl_net:caif_netlink_parms(): no params data found
[  507.669713][ T8640] dvb-usb: bulk message failed: -22 (4/0)
[  507.684031][ T8639] fuse: blksize only supported for fuseblk
[  507.707340][ T8640] cxusb: i2c read failed
[  507.741166][    T9] usb 3-1: selecting invalid altsetting 6
[  507.768781][    T9] usb 3-1: digital interface selection failed (-22)
[  507.807519][    T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  507.848609][    T9] usb 3-1: setting power OFF
[  507.853626][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  507.877462][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  507.887050][    T9] (NULL device *): no alternate interface
[  507.939967][ T5152] Bluetooth: hci0: command tx timeout
[  507.973950][    T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  508.005448][    T9] usb 3-1: USB disconnect, device number 7
[  508.283272][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.297273][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.327567][ T8586] bridge_slave_0: entered allmulticast mode
[  508.362782][ T8586] bridge_slave_0: entered promiscuous mode
[  508.407533][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.414740][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.488030][ T8586] bridge_slave_1: entered allmulticast mode
[  508.508191][ T8586] bridge_slave_1: entered promiscuous mode
[  509.581609][ T8680] virtio-fs: tag <(null)> not found
[  509.607694][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  509.945341][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.987467][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.673050][ T5152] Bluetooth: hci0: command tx timeout
[  511.064853][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.082318][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  511.096207][    T9] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  511.127385][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.146867][    T9] usb 3-1: config 0 descriptor??
[  511.190126][ T5152] Bluetooth: Wrong link type (-22)
[  511.295058][ T8586] team0: Port device team_slave_0 added
[  511.435457][ T8586] team0: Port device team_slave_1 added
[  511.734422][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  511.918959][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.934189][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  511.966528][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.018046][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.038814][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  512.146788][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.550879][ T8586] hsr_slave_0: entered promiscuous mode
[  512.574073][ T8586] hsr_slave_1: entered promiscuous mode
[  512.596762][ T8586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  512.621244][ T8586] Cannot create hsr debugfs directory
[  512.766882][ T5152] Bluetooth: hci0: command tx timeout
[  513.715677][ T8671] sctp: failed to load transform for md5: -2
[  514.197393][ T5918] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  514.367405][ T5886] usb 3-1: USB disconnect, device number 8
[  514.487885][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  514.495483][ T5918] usb 2-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config
[  514.527324][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  514.554840][ T8725] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  514.573956][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  514.603125][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.639851][ T5918] usb 2-1: config 0 descriptor??
[  514.669692][ T5918] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  515.791453][ T8586] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  516.491110][ T8586] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  516.640940][ T8586] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  516.665029][ T8586] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  516.799696][   T24] usb 2-1: USB disconnect, device number 11
[  518.341819][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.425882][ T8586] 8021q: adding VLAN 0 to HW filter on device team0
[  518.513583][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.520832][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.567097][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.574358][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  519.691432][ T8779] netlink: 14144 bytes leftover after parsing attributes in process `syz.1.759'.
[  521.370893][ T8781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.762'.
[  524.818121][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.831498][ T8586] veth0_vlan: entered promiscuous mode
[  525.978710][ T8586] veth1_vlan: entered promiscuous mode
[  526.047796][ T8586] veth0_macvtap: entered promiscuous mode
[  526.089909][ T8586] veth1_macvtap: entered promiscuous mode
[  526.145305][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.206225][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.269237][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.316420][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.327804][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.338692][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.349293][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.364283][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.722948][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.000222][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.031215][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.063541][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.117365][ T5933] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  527.162468][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.385033][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.396608][ T5933] usb 3-1: Using ep0 maxpacket: 8
[  527.461461][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  527.492733][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.523374][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  527.535153][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.547266][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  527.571310][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.585458][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  527.597174][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.609831][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  527.622915][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.637255][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.648539][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.661757][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.662074][ T5933] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  527.690414][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.702967][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.727035][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  527.743506][ T5933] usb 3-1: Product: syz
[  527.757381][ T5933] usb 3-1: Manufacturer: syz
[  527.762489][ T5933] usb 3-1: SerialNumber: syz
[  527.774570][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.821712][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.854071][ T5933] usb 3-1: config 0 descriptor??
[  527.908117][ T5933] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21
[  528.124608][ T8586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.135844][ T5933] usb 3-1: USB disconnect, device number 9
[  529.344062][ T8853] tty tty27: ldisc open failed (-12), clearing slot 26
[  529.360054][ T8586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.624563][ T8586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.677235][ T8586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.443518][   T30] audit: type=1326 audit(1743915269.128:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.2.782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9d678d169 code=0x0
[  530.847919][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.855812][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.029457][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.103846][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.970556][ T8896] netlink: 452 bytes leftover after parsing attributes in process `syz.6.790'.
[  535.296400][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'.
[  536.952586][ T8930] @: renamed from vlan0 (while UP)
[  537.929465][ T8939] netlink: 'syz.5.803': attribute type 4 has an invalid length.
[  540.242789][ T8953] syzkaller1: entered promiscuous mode
[  540.242817][ T8953] syzkaller1: entered allmulticast mode
[  540.470009][ T8956] netlink: 277 bytes leftover after parsing attributes in process `syz.5.809'.
[  541.171297][ T8970] netlink: 'syz.5.814': attribute type 10 has an invalid length.
[  541.276787][ T8971] netlink: 'syz.1.815': attribute type 4 has an invalid length.
[  541.359330][ T8973] netlink: 'syz.2.816': attribute type 10 has an invalid length.
[  541.518496][ T8970] team0: Device veth1_macvtap failed to register rx_handler
[  542.072224][ T8973] team0: Device veth1_macvtap failed to register rx_handler
[  542.121995][ T8970] syz.5.814 (8970) used greatest stack depth: 18696 bytes left
[  542.446261][ T8982] netlink: 'syz.1.819': attribute type 4 has an invalid length.
[  542.471305][ T5886] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  543.174976][ T5886] usb 7-1: Using ep0 maxpacket: 32
[  543.202326][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.223736][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  543.299000][ T5886] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  543.326225][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.376436][ T5886] usb 7-1: config 0 descriptor??
[  544.097682][ T5886] steelseries 0003:1038:1410.0002: item fetching failed at offset 0/2
[  544.147869][ T5886] steelseries 0003:1038:1410.0002: parse failed
[  544.179287][ T5886] steelseries 0003:1038:1410.0002: probe with driver steelseries failed with error -22
[  544.287714][  T976] usb 7-1: USB disconnect, device number 2
[  545.554296][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  545.606105][ T9011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  546.018723][ T9015] overlayfs: conflicting lowerdir path
[  546.140363][ T5889] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=16.e3
[  546.150798][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.159750][ T5889] usb 7-1: Product: syz
[  546.164785][ T5889] usb 7-1: Manufacturer: syz
[  546.170919][ T5889] usb 7-1: SerialNumber: syz
[  546.506659][ T5889] usb 7-1: config 0 descriptor??
[  546.617772][ T5889] comedi comedi0: Wrong number of endpoints
[  546.857014][ T5889] dt9812 7-1:0.0: driver 'dt9812' failed to auto-configure device.
[  547.238969][ T5889] usb 7-1: USB disconnect, device number 3
[  548.365602][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  549.467302][ T5889] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  549.898703][ T5889] usb 7-1: Using ep0 maxpacket: 16
[  549.905249][ T5152] Bluetooth: hci4: unexpected event for opcode 0x1004
[  549.922029][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  549.933369][ T5889] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  549.944838][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.957922][ T5889] usb 7-1: config 0 descriptor??
[  551.051878][ T9059] netlink: 173 bytes leftover after parsing attributes in process `syz.1.844'.
[  551.095073][ T5889] nintendo 0003:057E:2019.0003: hidraw0: USB HID v80.03 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0
[  551.178265][ T5889] nintendo 0003:057E:2019.0003: Failed to get joycon info; ret=-38
[  551.189384][ T5889] nintendo 0003:057E:2019.0003: Failed to retrieve controller info; ret=-38
[  551.201193][ T5889] nintendo 0003:057E:2019.0003: Failed to initialize controller; ret=-38
[  551.268878][ T5889] nintendo 0003:057E:2019.0003: probe - fail = -38
[  551.275615][ T5889] nintendo 0003:057E:2019.0003: probe with driver nintendo failed with error -38
[  551.371222][ T5889] usb 7-1: USB disconnect, device number 4
[  552.518948][ T9075] wg1: entered promiscuous mode
[  552.524067][ T9075] wg1: entered allmulticast mode
[  553.943710][ T5152] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  553.952544][ T5152] Bluetooth: hci4: Injecting HCI hardware error event
[  553.962091][ T5152] Bluetooth: hci4: hardware error 0x00
[  554.839564][ T9097] pimreg: entered allmulticast mode
[  555.897084][ T5888] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  555.909927][ T9104] netlink: 173 bytes leftover after parsing attributes in process `syz.3.859'.
[  556.007052][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  556.098653][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  556.167118][ T5888] usb 2-1: device descriptor read/64, error -71
[  556.227668][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  556.234760][ T5918] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  556.244837][ T5918] usb 6-1: config 0 has no interface number 0
[  556.251786][ T5918] usb 6-1: config 0 interface 196 has no altsetting 0
[  556.274797][ T5918] usb 6-1: New USB device found, idVendor=04cb, idProduct=0115, bcdDevice=56.6c
[  556.304452][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.342495][ T5918] usb 6-1: Product: syz
[  556.375510][ T5918] usb 6-1: Manufacturer: syz
[  556.397546][ T5918] usb 6-1: SerialNumber: syz
[  556.433535][ T5918] usb 6-1: config 0 descriptor??
[  556.438775][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  556.648957][ T5918] gspca_main: finepix-2.14.0 probing 04cb:0115
[  557.616292][  T976] usb 6-1: USB disconnect, device number 2
[  557.654198][ T5888] usb 2-1: device descriptor read/64, error -71
[  557.791854][ T5888] usb usb2-port1: attempt power cycle
[  558.127085][ T5886] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  558.167150][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  558.329203][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  558.353890][ T5886] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  558.448832][ T9137] netlink: 'syz.2.868': attribute type 4 has an invalid length.
[  558.953342][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.006782][ T5886] usb 7-1: config 0 descriptor??
[  559.055361][ T5886] pwc: Askey VC010 type 2 USB webcam detected.
[  559.265419][ T5888] usb 2-1: device descriptor read/8, error -71
[  559.467138][ T5886] pwc: recv_control_msg error -32 req 02 val 2b00
[  559.500584][ T5886] pwc: recv_control_msg error -32 req 02 val 2700
[  559.520351][ T5886] pwc: recv_control_msg error -32 req 02 val 2c00
[  559.537533][ T5886] pwc: recv_control_msg error -32 req 04 val 1000
[  559.562386][ T5886] pwc: recv_control_msg error -32 req 04 val 1300
[  559.794129][ T5886] pwc: recv_control_msg error -32 req 04 val 1400
[  559.842125][ T5886] pwc: recv_control_msg error -32 req 02 val 2000
[  560.431166][ T5886] pwc: recv_control_msg error -32 req 02 val 2100
[  560.598853][ T5886] pwc: recv_control_msg error -32 req 04 val 1500
[  560.635930][ T5886] pwc: recv_control_msg error -32 req 02 val 2500
[  560.740648][ T5886] pwc: recv_control_msg error -32 req 02 val 2400
[  561.177118][ T5886] pwc: recv_control_msg error -32 req 02 val 2600
[  561.361619][ T5886] pwc: recv_control_msg error -32 req 02 val 2900
[  562.368165][ T5886] pwc: recv_control_msg error -71 req 04 val 1100
[  562.408252][ T5886] pwc: recv_control_msg error -71 req 04 val 1200
[  562.444149][ T5886] pwc: Registered as video103.
[  562.461747][ T9181] overlayfs: failed to resolve './file1': -2
[  562.478806][ T5886] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22
[  562.514888][ T5886] usb 7-1: USB disconnect, device number 5
[  562.678580][ T9178] input: syz1 as /devices/virtual/input/input23
[  562.912935][ T9189] netlink: 'syz.6.882': attribute type 4 has an invalid length.
[  562.939990][ T9185] netlink: 'syz.1.881': attribute type 13 has an invalid length.
[  562.960198][ T9185] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.881'.
[  565.158146][ T9221] netlink: 'syz.6.894': attribute type 4 has an invalid length.
[  565.207156][  T976] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  566.217201][  T976] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  566.233786][  T976] usb 3-1: config 0 has no interface number 0
[  566.249023][  T976] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  566.259078][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.452240][  T976] usb 3-1: config 0 descriptor??
[  567.196672][  T976] usb 3-1: selecting invalid altsetting 1
[  567.206647][  T976] dvb_ttusb_budget: ttusb_init_controller: error
[  567.214655][  T976] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  567.557848][  T976] DVB: Unable to find symbol cx22700_attach()
[  567.834876][  T976] DVB: Unable to find symbol tda10046_attach()
[  567.867548][  T976] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  567.893138][  T976] usb 3-1: USB disconnect, device number 10
[  568.107656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  568.117385][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  569.433474][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  569.637181][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  569.667241][ T5918] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  569.703825][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  569.724253][ T9261] netlink: 'syz.6.905': attribute type 4 has an invalid length.
[  569.734444][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  569.756263][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  569.781479][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  569.841336][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  569.852151][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.556224][ T5918] usb 6-1: usb_control_msg returned -32
[  570.571024][ T5918] usbtmc 6-1:16.0: can't read capabilities
[  571.020210][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.083517][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.563440][ T5933] usb 6-1: USB disconnect, device number 3
[  571.675511][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'.
[  571.803614][ T9289] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  571.873673][ T9288] IPVS: stopping master sync thread 9289 ...
[  572.339478][ T9298] netlink: 'syz.2.918': attribute type 4 has an invalid length.
[  575.625932][ T9325] netlink: 161716 bytes leftover after parsing attributes in process `syz.6.926'.
[  575.688884][ T9325] netlink: zone id is out of range
[  575.726432][ T9325] netlink: zone id is out of range
[  575.765223][ T9325] netlink: zone id is out of range
[  575.793175][ T9325] netlink: zone id is out of range
[  575.798663][ T9325] netlink: zone id is out of range
[  575.803931][ T9325] netlink: zone id is out of range
[  575.809247][ T9325] netlink: zone id is out of range
[  575.814460][ T9325] netlink: zone id is out of range
[  575.828229][ T9325] netlink: zone id is out of range
[  575.833435][ T9325] netlink: zone id is out of range
[  580.200565][ T9373] netlink: 'syz.6.942': attribute type 10 has an invalid length.
[  580.347084][ T5933] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  580.529484][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  580.899340][ T9373] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  581.683638][ T9381] netlink: 452 bytes leftover after parsing attributes in process `syz.6.943'.
[  582.565464][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'.
[  584.329137][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.948'.
[  584.496088][ T5933] usb 2-1: unable to get BOS descriptor or descriptor too short
[  584.505095][ T5933] usb 2-1: unable to read config index 0 descriptor/start: -71
[  584.535746][ T5933] usb 2-1: can't read configurations, error -71
[  585.226748][ T9419] netlink: 452 bytes leftover after parsing attributes in process `syz.1.955'.
[  585.978981][ T9414] ------------[ cut here ]------------
[  585.984673][ T9414] do not call blocking ops when !TASK_RUNNING; state=1 set at [<ffffffff819c19fc>] prepare_to_wait_event+0x3ac/0x460
[  585.997210][ T9414] WARNING: CPU: 1 PID: 9414 at kernel/sched/core.c:8745 __might_sleep+0xb9/0xe0
[  586.006292][ T9414] Modules linked in:
[  586.010606][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.951 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) 
[  586.022908][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  586.033090][ T9414] RIP: 0010:__might_sleep+0xb9/0xe0
[  586.038395][ T9414] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  586.059170][ T9414] RSP: 0018:ffffc9000449f988 EFLAGS: 00010246
[  586.066692][ T9414] RAX: f586a12113af8000 RBX: 1ffff110040fd6b1 RCX: 0000000000080000
[  586.074783][ T9414] RDX: ffffc9000ea20000 RSI: 0000000000016e98 RDI: 0000000000016e99
[  586.083019][ T9414] RBP: ffff8880207eb588 R08: ffffffff81828012 R09: fffffbfff1d7a980
[  586.091080][ T9414] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000
[  586.099291][ T9414] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740
[  586.107333][ T9414] FS:  00007fb9d45d56c0(0000) GS:ffff88812508f000(0000) knlGS:0000000000000000
[  586.116295][ T9414] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  586.123074][ T9414] CR2: 00007f297a777d38 CR3: 000000006d1aa000 CR4: 00000000003526f0
[  586.131131][ T9414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  586.139347][ T9414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  586.148304][ T9414] Call Trace:
[  586.151628][ T9414]  <TASK>
[  586.154589][ T9414]  __mutex_lock+0x12c/0x10c0
[  586.159348][ T9414]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  586.165296][ T9414]  ? __ceph_open_session+0x471/0xa30
[  586.172044][ T9414]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  586.178041][ T9414]  ? __pfx___mutex_lock+0x10/0x10
[  586.183154][ T9414]  ? __up_read+0x2c4/0x6b0
[  586.187673][ T9414]  ? prepare_to_wait_event+0x3ac/0x460
[  586.193168][ T9414]  ? prepare_to_wait_event+0x40c/0x460
[  586.198716][ T9414]  __ceph_open_session+0x471/0xa30
[  586.204047][ T9414]  ? bdi_register_va+0x593/0x770
[  586.209100][ T9414]  ? __pfx___ceph_open_session+0x10/0x10
[  586.214864][ T9414]  ? __pfx_autoremove_wake_function+0x10/0x10
[  586.221158][ T9414]  ? shrinker_register+0x160/0x230
[  586.226366][ T9414]  ceph_get_tree+0xac4/0x17b0
[  586.231215][ T9414]  vfs_get_tree+0x90/0x2b0
[  586.235765][ T9414]  vfs_cmd_create+0xa0/0x1f0
[  586.240525][ T9414]  ? __se_sys_fsconfig+0xa14/0xf40
[  586.246601][ T9414]  __se_sys_fsconfig+0xa20/0xf40
[  586.251632][ T9414]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  586.257199][ T9414]  ? __x64_sys_fsconfig+0x20/0xc0
[  586.262365][ T9414]  do_syscall_64+0xf3/0x230
[  586.266917][ T9414]  ? clear_bhb_loop+0x45/0xa0
[  586.273041][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.279053][ T9414] RIP: 0033:0x7fb9d678d169
[  586.283515][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.303233][ T9414] RSP: 002b:00007fb9d45d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  586.311726][ T9414] RAX: ffffffffffffffda RBX: 00007fb9d69a6160 RCX: 00007fb9d678d169
[  586.319787][ T9414] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[  586.327821][ T9414] RBP: 00007fb9d680e2a0 R08: 0000000000000000 R09: 0000000000000000
[  586.335824][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.343909][ T9414] R13: 0000000000000000 R14: 00007fb9d69a6160 R15: 00007ffd9fd6fe88
[  586.352885][ T9414]  </TASK>
[  586.355956][ T9414] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  586.363281][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.951 Not tainted 6.14.0-next-20250404-syzkaller #0 PREEMPT(full) 
[  586.374340][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  586.384431][ T9414] Call Trace:
[  586.387740][ T9414]  <TASK>
[  586.390698][ T9414]  dump_stack_lvl+0x241/0x360
[  586.395425][ T9414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  586.400665][ T9414]  ? __pfx__printk+0x10/0x10
[  586.405302][ T9414]  ? vscnprintf+0x5d/0x90
[  586.409666][ T9414]  panic+0x349/0x880
[  586.413607][ T9414]  ? __warn+0x174/0x4d0
[  586.417800][ T9414]  ? __pfx_panic+0x10/0x10
[  586.422276][ T9414]  __warn+0x344/0x4d0
[  586.426298][ T9414]  ? __might_sleep+0xb9/0xe0
[  586.430937][ T9414]  report_bug+0x2b3/0x500
[  586.435300][ T9414]  ? __might_sleep+0xb9/0xe0
[  586.439934][ T9414]  ? __might_sleep+0xb9/0xe0
[  586.444571][ T9414]  ? __might_sleep+0xbb/0xe0
[  586.449221][ T9414]  handle_bug+0x89/0x170
[  586.453607][ T9414]  exc_invalid_op+0x1a/0x50
[  586.458421][ T9414]  asm_exc_invalid_op+0x1a/0x20
[  586.463303][ T9414] RIP: 0010:__might_sleep+0xb9/0xe0
[  586.468544][ T9414] Code: b7 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 3e 13 9b 00 48 8b 4d 00 48 c7 c7 e0 33 4a 8c 44 89 ee 48 89 ca e8 18 11 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff
[  586.488508][ T9414] RSP: 0018:ffffc9000449f988 EFLAGS: 00010246
[  586.495251][ T9414] RAX: f586a12113af8000 RBX: 1ffff110040fd6b1 RCX: 0000000000080000
[  586.503352][ T9414] RDX: ffffc9000ea20000 RSI: 0000000000016e98 RDI: 0000000000016e99
[  586.511529][ T9414] RBP: ffff8880207eb588 R08: ffffffff81828012 R09: fffffbfff1d7a980
[  586.519530][ T9414] R10: dffffc0000000000 R11: fffffbfff1d7a980 R12: dffffc0000000000
[  586.527529][ T9414] R13: 0000000000000001 R14: 0000000000000242 R15: ffffffff8c4ad740
[  586.535543][ T9414]  ? __warn_printk+0x2a2/0x360
[  586.540379][ T9414]  ? __might_sleep+0xb8/0xe0
[  586.545015][ T9414]  __mutex_lock+0x12c/0x10c0
[  586.549653][ T9414]  ? _raw_spin_unlock_irqrestore+0x90/0x140
[  586.555840][ T9414]  ? __ceph_open_session+0x471/0xa30
[  586.561160][ T9414]  ? _raw_spin_unlock_irqrestore+0xde/0x140
[  586.567198][ T9414]  ? __pfx___mutex_lock+0x10/0x10
[  586.572273][ T9414]  ? __up_read+0x2c4/0x6b0
[  586.576735][ T9414]  ? prepare_to_wait_event+0x3ac/0x460
[  586.582239][ T9414]  ? prepare_to_wait_event+0x40c/0x460
[  586.587748][ T9414]  __ceph_open_session+0x471/0xa30
[  586.592987][ T9414]  ? bdi_register_va+0x593/0x770
[  586.597979][ T9414]  ? __pfx___ceph_open_session+0x10/0x10
[  586.603654][ T9414]  ? __pfx_autoremove_wake_function+0x10/0x10
[  586.609772][ T9414]  ? shrinker_register+0x160/0x230
[  586.614924][ T9414]  ceph_get_tree+0xac4/0x17b0
[  586.619642][ T9414]  vfs_get_tree+0x90/0x2b0
[  586.624096][ T9414]  vfs_cmd_create+0xa0/0x1f0
[  586.628719][ T9414]  ? __se_sys_fsconfig+0xa14/0xf40
[  586.633871][ T9414]  __se_sys_fsconfig+0xa20/0xf40
[  586.638856][ T9414]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  586.644359][ T9414]  ? __x64_sys_fsconfig+0x20/0xc0
[  586.649428][ T9414]  do_syscall_64+0xf3/0x230
[  586.653969][ T9414]  ? clear_bhb_loop+0x45/0xa0
[  586.658678][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.664597][ T9414] RIP: 0033:0x7fb9d678d169
[  586.669040][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.689031][ T9414] RSP: 002b:00007fb9d45d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  586.697492][ T9414] RAX: ffffffffffffffda RBX: 00007fb9d69a6160 RCX: 00007fb9d678d169
[  586.705517][ T9414] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007
[  586.713617][ T9414] RBP: 00007fb9d680e2a0 R08: 0000000000000000 R09: 0000000000000000
[  586.721631][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.729640][ T9414] R13: 0000000000000000 R14: 00007fb9d69a6160 R15: 00007ffd9fd6fe88
[  586.737865][ T9414]  </TASK>
[  586.741325][ T9414] Kernel Offset: disabled
[  586.745661][ T9414] Rebooting in 86400 seconds..